IntenseWebs/freeipa
3
0
Fork 0
mirror of https://salsa.debian.org/freeipa-team/freeipa.git synced 2025-02-25 18:55:28 -06:00
Code Issues Packages Projects Releases Wiki Activity

Cache installer questions for the 2-step process of an externally-signed CA

Browse Source 
Installing a CA that is signed by another CA is a 2-step process. The first
step is to generate a CSR for the CA and the second step is to install
the certificate issued by the external CA. To avoid asking questions
over and over (and potentially getting different answers) the answers
are cached.
This commit is contained in:
Rob Crittenden
2009-11-18 14:28:33 -05:00
parent 4262358111
commit 884301ef33
2 changed files with 64 additions and 7 deletions
Download Patch File Download Diff File Expand all files Collapse all files

3
ipaserver/install/cainstance.py
View File

@@ -604,7 +604,8 @@ class CAInstance(service.Service):
ipautil.run(args)
if self.external == 1:
print "The next step is to get %s signed by your CA and re-run ipa-server-install" % self.csr_file
print "The next step is to get %s signed by your CA and re-run ipa-server-install as:" % self.csr_file
print "ipa-server-install --ca --external_cert_file=/path/to/signed_certificate --external_ca_file=/path/to/external_ca_certificate"
sys.exit(0)
# pkisilent doesn't return 1 on error so look at the output of