Fix DL1 replica installation in CA-less topology

Commit dbb98765d7 changed certmonger
requests for DS and HTTP certificates during installation to raise
on error (https://fedorahosted.org/freeipa/ticket/6514).
This introduced a regression in DL1 replica installation in CA-less
topology.  A certificate was requested, but prior to the
aforementioned commit this would fail silently and installation
continued, whereas now installation fails.

Guard the certificate request with a check that the topology is
CA-ful.

Fixes: https://fedorahosted.org/freeipa/ticket/6573
Reviewed-By: Martin Babinsky <mbabinsk@redhat.com>
This commit is contained in:
Fraser Tweedale authored and Martin Babinsky committed 2016-12-20 10:19:15 +01:00
1 parent 1b85e59cee
commit 4028ad73e7
1 file changed
+1 -1
+1 -1
View File
@@ -1338,7 +1338,7 @@ def install(installer):
# Always try to install DNS records
install_dns_records(config, options, remote_api)
if promote:
if promote and ca_enabled:
# we need to install http certs to setup ssl for httpd
install_http_certs(config.host_name,
config.realm_name,