mirror of
https://salsa.debian.org/freeipa-team/freeipa.git
synced 2024-12-24 08:00:02 -06:00
Don't let failure to trust the CA abort the server installation.
This error could result in things not working properly but it should be relatively easy to fix from the command-line. There is no point in not installing at all due to this.
This commit is contained in:
parent
2736177938
commit
4bf70406d3
@ -791,8 +791,11 @@ class CertDB(object):
|
||||
if root_nickname[:7] == "Builtin":
|
||||
logging.debug("No need to add trust for built-in root CA's, skipping %s" % root_nickname)
|
||||
else:
|
||||
try:
|
||||
self.run_certutil(["-M", "-n", root_nickname,
|
||||
"-t", "CT,CT,"])
|
||||
except ipautil.CalledProcessError, e:
|
||||
logging.error("Setting trust on %s failed" % root_nickname)
|
||||
|
||||
def find_server_certs(self):
|
||||
p = subprocess.Popen(["/usr/bin/certutil", "-d", self.secdir,
|
||||
|
Loading…
Reference in New Issue
Block a user