IntenseWebs/freeipa
3
0
Fork 0
mirror of https://salsa.debian.org/freeipa-team/freeipa.git synced 2025-02-25 18:55:28 -06:00
Code Issues Packages Projects Releases Wiki Activity

Update comments to explain caSubsystemCert switch

Browse Source 
Related: https://bugzilla.redhat.com/1670239
Signed-off-by: Christian Heimes <cheimes@redhat.com>
Reviewed-By: Fraser Tweedale <ftweedal@redhat.com>
Reviewed-By: Christian Heimes <cheimes@redhat.com>
This commit is contained in:
Christian Heimes
2019-08-08 07:08:58 +02:00
parent 802a54bfc8
commit 3c82585e52
2 changed files with 4 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files

2
ipaserver/install/cainstance.py
View File

@@ -857,7 +857,7 @@ class CAInstance(DogtagInstance):
ipalib.constants.RENEWAL_CA_NAME, helper)
try:
# The certificate must be requested using caServerCert profile
# The certificate must be requested using caSubsystemCert profile
# because this profile does not require agent authentication
reqId = certmonger.request_and_wait_for_cert(
certpath=(paths.RA_AGENT_PEM, paths.RA_AGENT_KEY),