freeipa/ipaserver
Florence Blanc-Renaud 044d887e81 Fix ipa-replica-install when upgrade from ca-less to ca-full
When ipa-replica-prepare is run on a master upgraded from CA-less to
CA-full, it creates the replica file with a copy of the local /etc/ipa/ca.crt.
This causes issues if this file hasn't been updated with ipa-certupdate,
as it contains the external CA that signed http/ldap certs, but not
the newly installed IPA CA.
As a consequence, ipa-replica-install fails with "Could not find a CA cert".

The fix consists in retrieving the CA certificates from LDAP instead of
the local /etc/ipa/ca.crt.

https://fedorahosted.org/freeipa/ticket/6375

Reviewed-By: Stanislav Laznicka <slaznick@redhat.com>
Reviewed-By: Tomas Krizek <tkrizek@redhat.com>
2016-11-25 09:26:22 +01:00
..
advise advise: Use name instead of __name__ to get plugin names 2016-09-08 17:28:24 +02:00
install Fix ipa-replica-install when upgrade from ca-less to ca-full 2016-11-25 09:26:22 +01:00
plugins Break ipaplatform / ipalib import cycle of hell 2016-11-24 16:30:32 +01:00
__init__.py Change FreeIPA license to GPLv3+ 2010-12-20 17:19:53 -05:00
dcerpc.py ipaldap: merge IPAdmin to LDAPClient 2016-11-07 11:34:03 +01:00
dns_data_management.py Fix compatibility with python-dns 1.15.0 2016-10-11 15:45:41 +02:00
Makefile.am Build: Makefiles for Python packages 2016-11-09 13:08:32 +01:00
rpcserver.py pylint: enable the import-error check 2016-10-24 14:11:08 +02:00
servroles.py Introduce "NTP server" role 2016-06-15 13:51:48 +02:00
session.py pylint: enable the import-error check 2016-10-24 14:11:08 +02:00
setup.cfg Port all setup.py to setuptools 2016-10-20 18:43:37 +02:00
setup.py Add install requirements to Python packages 2016-11-16 22:58:39 +01:00
topology.py Fix topologysuffix-verify failing connections 2016-06-24 13:32:02 +02:00