freeipa

mirror of https://salsa.debian.org/freeipa-team/freeipa.git synced 2026-07-30 08:07:56 -05:00

Files

T

Florence Blanc-Renaud 1a988ba96d ipa-cert-fix: do not fail when CSR is missing from CS.cfg

When the CSR for an expired cert is not found in
/etc/pki/pki-tomcat/{ca|kra}/CS.cfg, ipa-cert-fix fails to
renew the certificate and repair the installation.

The CSR can be found using certmonger as it is stored in
/var/lib/certmonger/requests/<ID> in the "csr" attribute.
Prior to calling pki-server cert-fix, make sure that the
CSR is present in CS.cfg, or update CS.cfg with the content
found using certmonger.

Fixes: https://pagure.io/freeipa/issue/8618

Signed-off-by: Florence Blanc-Renaud <flo@redhat.com>
Reviewed-By: Alexander Bokovoy <abokovoy@redhat.com>
Reviewed-By: Rob Crittenden <rcritten@redhat.com>

2021-01-07 16:21:16 +01:00

advise

ipa-advise: fallback to /usr/libexec/platform-python if python3 not found

2020-05-05 11:50:01 +02:00

dnssec

Change mkdir logic in DNSSEC

2020-12-18 20:40:36 +02:00

install

ipa-cert-fix: do not fail when CSR is missing from CS.cfg

2021-01-07 16:21:16 +01:00

plugins

Allow leading/trailing whitespaces in passwords