mirror of
https://salsa.debian.org/freeipa-team/freeipa.git
synced 2026-11-02 20:30:26 -06:00
Move RA agent certificate file export to a different location
HTTPS connection to certificate server requires client authentication so we need a file with client certificate and private key prior to its first occurence which happens during migration of certificate profiles to LDAP. https://fedorahosted.org/freeipa/ticket/5695 https://fedorahosted.org/freeipa/ticket/6392 Reviewed-By: Jan Cholasta <jcholast@redhat.com>
This commit is contained in:
1 parent
dfd560a190
commit
2a1494c9ae
8 files changed
+17
-19
No files matched your search
@@ -29,7 +29,7 @@ import traceback
|
||||
|
||||
from ipalib.install.kinit import kinit_keytab
|
||||
from ipalib import api
|
||||
from ipaserver.install import certs, cainstance, krainstance
|
||||
from ipaserver.install import certs, cainstance, dogtaginstance
|
||||
from ipaplatform.paths import paths
|
||||
|
||||
|
||||
@@ -61,7 +61,7 @@ def _main():
|
||||
cainstance.update_people_entry(dercert)
|
||||
|
||||
if api.Command.kra_is_enabled()['result']:
|
||||
krainstance.export_kra_agent_pem()
|
||||
dogtaginstance.export_ra_agent_pem()
|
||||
finally:
|
||||
shutil.rmtree(tmpdir)
|
||||
api.Backend.ldap2.disconnect()
|
||||
|
||||
Reference in new issue
Block a user