IntenseWebs/freeipa
3
0
Fork 0
mirror of https://salsa.debian.org/freeipa-team/freeipa.git synced 2026-08-05 02:43:25 -05:00
Code Issues Packages Projects Releases Wiki Activity

Export full CA chain to /etc/ipa/ca.crt in ipa-server-install.

Browse Source 
Part of https://fedorahosted.org/freeipa/ticket/3259
Part of https://fedorahosted.org/freeipa/ticket/3520

Reviewed-By: Rob Crittenden <rcritten@redhat.com>
This commit is contained in:
Jan Cholasta
2014-07-30 16:04:21 +02:00
committed by Petr Viktorin
parent 60e19b585c
commit f1e186d7d8
1 changed files with 5 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files
install/tools/ipa-server-install
+5
View File
@@ -1162,6 +1162,11 @@ def main():
subject_base=options.subject, auto_redirect=options.ui_redirect)
tasks.restore_context(paths.CACHE_IPA_SESSIONS)
# Export full CA chain
ca_db = certs.CertDB(realm_name)
os.chmod(CACERT, 0644)
ca_db.publish_ca_cert(CACERT)
set_subject_in_config(realm_name, dm_password, ipautil.realm_to_suffix(realm_name), options.subject)
# Apply any LDAP updates. Needs to be done after the configuration file