IntenseWebs/freeipa
3
0
Fork 0
mirror of https://salsa.debian.org/freeipa-team/freeipa.git synced 2025-01-13 09:41:55 -06:00
Code Issues Packages Projects Releases Wiki Activity

Remove certificate "External CA cert" from /etc/pki/nssdb on client uninstall.

Browse Source 
This is a no longer used nickname for CA certificate on CA-less server
installs.

Reviewed-By: Rob Crittenden <rcritten@redhat.com>
This commit is contained in:
Jan Cholasta 2014-06-12 17:54:40 +02:00 committed by Petr Viktorin
parent 52f72ec058
commit a8a44c1c71
1 changed files with 7 additions and 3 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

10
ipa-client/ipa-install/ipa-client-install
View File

@ -483,12 +483,16 @@ def uninstall(options, env):
client_nss_nickname = client_nss_nickname_format % hostname
# Remove our host cert and CA cert
if nickname_exists("IPA CA"):
for nickname in ('IPA CA', 'External CA cert'):
if not nickname_exists(nickname):
continue
try:
run([paths.CERTUTIL, "-D", "-d", paths.NSS_DB_DIR, "-n", "IPA CA"])
run([paths.CERTUTIL, "-D",
"-d", paths.NSS_DB_DIR,
"-n", nickname])
except Exception, e:
root_logger.error(
"Failed to remove IPA CA from /etc/pki/nssdb: %s", str(e))
"Failed to remove %s from /etc/pki/nssdb: %s", nickname, e)
# Always start certmonger. We can't untrack something if it isn't
# running