install: always export KRA agent PEM file

Export the file even when KRA is not installed locally so that vault commands
work on all IPA replicas.

https://fedorahosted.org/freeipa/ticket/5302

Reviewed-By: Martin Basti <mbasti@redhat.com>
This commit is contained in:
Jan Cholasta
2015-09-16 09:05:20 +02:00
parent 110e85cc74
commit b035a2a114
4 changed files with 9 additions and 9 deletions

View File

@@ -61,8 +61,7 @@ def _main():
# Load it into dogtag
cainstance.update_people_entry(dercert)
kra = krainstance.KRAInstance(api.env.realm)
if kra.is_installed():
if api.Command.kra_is_enabled()['result']:
krainstance.export_kra_agent_pem()
finally:
shutil.rmtree(tmpdir)