mirror of
https://salsa.debian.org/freeipa-team/freeipa.git
synced 2026-08-11 05:24:56 -05:00
Fix certmonger.request_cert
https://fedorahosted.org/freeipa/ticket/4550 Reviewed-By: Petr Vobornik <pvoborni@redhat.com>
This commit is contained in:
committed by
Petr Vobornik
parent
fdc70e89e9
commit
4333a623da
@@ -254,9 +254,14 @@ def request_cert(nssdb, nickname, subject, principal, passwd_fname=None):
|
||||
Execute certmonger to request a server certificate.
|
||||
"""
|
||||
cm = _connect_to_certmonger()
|
||||
ca_path = cm.obj_if.find_ca_by_nickname('IPA')
|
||||
if not ca_path:
|
||||
raise RuntimeError('IPA CA not found')
|
||||
request_parameters = dict(KEY_STORAGE='NSSDB', CERT_STORAGE='NSSDB',
|
||||
CERT_LOCATION=nssdb, CERT_NICKNAME=nickname,
|
||||
SUBJECT=subject, PRINCIPAL=principal,)
|
||||
KEY_LOCATION=nssdb, KEY_NICKNAME=nickname,
|
||||
SUBJECT=subject, PRINCIPAL=[principal],
|
||||
CA=ca_path)
|
||||
if passwd_fname:
|
||||
request_parameters['KEY_PIN_FILE'] = passwd_fname
|
||||
result = cm.obj_if.add_request(request_parameters)
|
||||
|
||||
Reference in New Issue
Block a user