IntenseWebs/freeipa
3
0
Fork 0
mirror of https://salsa.debian.org/freeipa-team/freeipa.git synced 2025-02-25 18:55:28 -06:00
Code Issues Packages Projects Releases Wiki Activity

Explicitly use legacy ID generators by default

Browse Source 
The default ID generators used by PKI might change in the
future, so to preserve the current behavior the installation
code has been updated to explicitly use the legacy ID
generators by default.

Signed-off-by: Endi S. Dewata <edewata@redhat.com>
Reviewed-By: Alexander Bokovoy <abokovoy@redhat.com>
Reviewed-By: Rob Crittenden <rcritten@redhat.com>
This commit is contained in:
Endi S. Dewata
2022-08-01 09:56:31 -05:00
committed by Rob Crittenden
parent c62e5d7a18
commit 38728dd518
2 changed files with 8 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

5
ipaserver/install/cainstance.py
View File

@@ -529,6 +529,9 @@ class CAInstance(DogtagInstance):
if self.random_serial_numbers:
cfg['pki_request_id_generator'] = 'random'
cfg['pki_cert_id_generator'] = 'random'
else:
cfg['pki_request_id_generator'] = 'legacy'
cfg['pki_cert_id_generator'] = 'legacy'
if not (os.path.isdir(paths.PKI_TOMCAT_ALIAS_DIR) and
os.path.isfile(paths.PKI_TOMCAT_PASSWORD_CONF)):
@@ -576,6 +579,8 @@ class CAInstance(DogtagInstance):
else:
cfg.update(
pki_random_serial_numbers_enable=False,
pki_request_id_generator="legacy",
pki_cert_id_generator="legacy",
)
self._configure_clone(

3
ipaserver/install/krainstance.py
View File

@@ -169,6 +169,9 @@ class KRAInstance(DogtagInstance):
if lookup_random_serial_number_version(api) > 0:
cfg['pki_key_id_generator'] = 'random'
cfg['pki_request_id_generator'] = 'random'
else:
cfg['pki_key_id_generator'] = 'legacy'
cfg['pki_request_id_generator'] = 'legacy'
if not (os.path.isdir(paths.PKI_TOMCAT_ALIAS_DIR) and
os.path.isfile(paths.PKI_TOMCAT_PASSWORD_CONF)):