IntenseWebs/freeipa
3
0
Fork 0
mirror of https://salsa.debian.org/freeipa-team/freeipa.git synced 2025-01-26 16:16:31 -06:00
Code Issues Packages Projects Releases Wiki Activity

Changing cert-find to go through the proxy instead of using the port 8080

Browse Source 
The cert-find command now uses the proxy to reach Dogtag, instead of using
the port 8080. In order to accomplish that, it's necessary to change the
proxy configuration including the URL called.

https://pagure.io/freeipa/issue/6966

Reviewed-By: Fraser Tweedale <ftweedal@redhat.com>
This commit is contained in:
Felipe Volpone 2017-06-14 18:19:41 -03:00 committed by Tomas Krizek
parent 7fd2102a78
commit 36532031cf
No known key found for this signature in database
GPG Key ID: 22A2A94B5E49415A
2 changed files with 3 additions and 3 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

4
install/conf/ipa-pki-proxy.conf
View File

@ -1,4 +1,4 @@
# VERSION 10 - DO NOT REMOVE THIS LINE
# VERSION 11 - DO NOT REMOVE THIS LINE
ProxyRequests Off
@ -27,7 +27,7 @@ ProxyRequests Off
</LocationMatch>
# matches for CA REST API
<LocationMatch "^/ca/rest/account/login|^/ca/rest/account/logout|^/ca/rest/installer/installToken|^/ca/rest/securityDomain/domainInfo|^/ca/rest/securityDomain/installToken|^/ca/rest/profiles|^/ca/rest/authorities|^/ca/rest/certrequests|^/ca/rest/admin/kraconnector/remove">
<LocationMatch "^/ca/rest/account/login|^/ca/rest/account/logout|^/ca/rest/installer/installToken|^/ca/rest/securityDomain/domainInfo|^/ca/rest/securityDomain/installToken|^/ca/rest/profiles|^/ca/rest/authorities|^/ca/rest/certrequests|^/ca/rest/admin/kraconnector/remove|^/ca/rest/certs/search">
NSSOptions +StdEnvVars +ExportCertData +StrictRequire +OptRenegotiate
NSSVerifyClient optional
ProxyPassMatch ajp://localhost:$DOGTAG_PORT

2
ipaserver/plugins/dogtag.py
View File

@ -1903,7 +1903,7 @@ class ra(rabase.rabase, RestClient):
self.debug('%s.find(): request: %s', type(self).__name__, payload)
url = 'http://%s/ca/rest/certs/search?size=%d' % (
ipautil.format_netloc(self.ca_host, 8080),
ipautil.format_netloc(self.ca_host, 80),
options.get('sizelimit', 0x7fffffff))
opener = urllib.request.build_opener()