IntenseWebs/freeipa
3
0
Fork 0
mirror of https://salsa.debian.org/freeipa-team/freeipa.git synced 2025-02-25 18:55:28 -06:00
Code Issues Packages Projects Releases Wiki Activity

Use dogtag-ipa-ca-renew-agent to retrieve renewed certificates from LDAP.

Browse Source 
Before, this was done by dogtag-ipa-retrieve-agent-submit.

Reviewed-By: Petr Viktorin <pviktori@redhat.com>
This commit is contained in:
Jan Cholasta
2013-10-16 08:08:57 +00:00
committed by Petr Viktorin
parent bbb2af5016
commit babddaaee8
2 changed files with 27 additions and 16 deletions
Download Patch File Download Diff File Expand all files Collapse all files

9
ipapython/certmonger.py
View File

@@ -369,7 +369,7 @@ def get_pin(token, dogtag_constants=None):
return None
def dogtag_start_tracking(ca, nickname, pin, pinfile, secdir, pre_command,
post_command):
post_command, profile=None):
"""
Tell certmonger to start tracking a dogtag CA certificate. These
are handled differently because their renewal must be done directly
@@ -423,12 +423,9 @@ def dogtag_start_tracking(ca, nickname, pin, pinfile, secdir, pre_command,
args.append("-P")
args.append(pin)
if ca == 'dogtag-ipa-retrieve-agent-submit':
# We cheat and pass in the nickname as the profile when
# renewing on a clone. The submit otherwise doesn't pass in the
# nickname and we need some way to find the right entry in LDAP.
if profile:
args.append("-T")
args.append(nickname)
args.append(profile)
(stdout, stderr, returncode) = ipautil.run(args, nolog=[pin])