From 87400cdec1054971f50f90a0c63f18ab045f3833 Mon Sep 17 00:00:00 2001 From: Jan Cholasta Date: Mon, 30 Jan 2017 13:25:04 +0100 Subject: [PATCH] ipa-ca-install: do not fail without --subject-base and --ca-subject When --subject-base and --ca-subject are not specified in ipa-ca-install, default values are used. DN objects are used as the default values in ipa-ca-install, but the CA installer expects the values to be strings. This causes ipa-ca-install to fail unless both --subject-base and --ca-subject are specified. Convert the DN objects to strings to fix the issue. https://fedorahosted.org/freeipa/ticket/2614 Reviewed-By: Fraser Tweedale --- install/tools/ipa-ca-install | 7 ++++--- 1 file changed, 4 insertions(+), 3 deletions(-) diff --git a/install/tools/ipa-ca-install b/install/tools/ipa-ca-install index 0952d0088..5e425f827 100755 --- a/install/tools/ipa-ca-install +++ b/install/tools/ipa-ca-install @@ -216,10 +216,11 @@ def install_master(safe_options, options): options.host_name = api.env.host if not options.subject_base: - options.subject_base = installutils.default_subject_base(api.env.realm) + options.subject_base = str( + installutils.default_subject_base(api.env.realm)) if not options.ca_subject: - options.ca_subject = installutils.default_ca_subject_dn( - options.subject_base) + options.ca_subject = str( + installutils.default_ca_subject_dn(options.subject_base)) try: ca.subject_validator(ca.VALID_SUBJECT_BASE_ATTRS, options.subject_base)