IntenseWebs/freeipa
3
0
Fork 0
mirror of https://salsa.debian.org/freeipa-team/freeipa.git synced 2025-02-25 18:55:28 -06:00
Code Issues Packages Projects Releases Wiki Activity

uninstall: untrack lightweight CA certs

Browse Source 
Fixes: https://fedorahosted.org/freeipa/ticket/6020
Reviewed-By: Martin Babinsky <mbabinsk@redhat.com>
This commit is contained in:
Fraser Tweedale
2016-07-04 13:05:28 +10:00
committed by Petr Vobornik
parent f784532d4e
commit 88841a5619
1 changed files with 6 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

6
ipaserver/install/cainstance.py
View File

@@ -1127,6 +1127,12 @@ class CAInstance(DogtagInstance):
"""
super(CAInstance, self).stop_tracking_certificates(False)
# stop tracking lightweight CA signing certs
for request_id in certmonger.get_requests_for_dir(self.nss_db):
nickname = certmonger.get_request_value(request_id, 'key-nickname')
if nickname.startswith('caSigningCert cert-pki-ca '):
certmonger.stop_tracking(self.nss_db, nickname=nickname)
try:
certmonger.stop_tracking(paths.HTTPD_ALIAS_DIR, nickname='ipaCert')
except RuntimeError as e: