mirror of
https://salsa.debian.org/freeipa-team/freeipa.git
synced 2025-02-25 18:55:28 -06:00
If certmonger is running prior to client installation then its IPA CA configuration will be incomplete and missing the CA chain. If a certificate is subsequently requested with -F to store the CA chain in a file or NSS db it may not be available yet. A conditional restart of certmonger will pick up the new IPA configuration and complete the IPA CA configuration in certmonger. A pure restart and service activation is not done since certmonger is not required unless --request-cert was passed ipa-client-install. https://pagure.io/freeipa/issue/8105 Reviewed-By: Christian Heimes <cheimes@redhat.com> Reviewed-By: Ade Lee <alee@redhat.com>