freeipa/ipaserver/install
Fraser Tweedale 49c0a7b4d4 ipa-cacert-manage: handle alternative tracking request CA name
For an externally-signed CA, if an earlier run of ipa-cacert-manage
was interrupted, the CA name in the IPA CA tracking request may have
been left as "dogtag-ipa-ca-renew-agent-reuse" (it gets reverted to
"dogtag-ipa-ca-renew-agent" at the end of the CSR generation
procedure).  `ipa-cacert-manage renew` currently only looks for a
tracking request with the "dogtag-ipa-ca-renew-agent" CA, so in this
scenario the program fails with message "CA certificate is not
tracked by certmonger".

To handle this scenario, if the IPA CA tracking request is not
found, try once again but with the "dogtag-ipa-ca-renew-agent-renew"
CA name.

Part of: https://pagure.io/freeipa/issue/6858

Reviewed-By: Florence Blanc-Renaud <frenaud@redhat.com>
2017-10-04 10:09:18 +02:00
..
plugins Fix ipa-server-upgrade: This entry already exists 2017-08-30 12:47:53 +02:00
server install: allow specifying external CA template 2017-10-04 10:09:18 +02:00
__init__.py Remove __all__ specifications in ipaclient and ipaserver.install 2013-09-06 15:42:33 +02:00
adtrust.py Correct typo estabilish->establish in the install scripts 2017-07-24 13:41:16 +02:00
adtrustinstance.py logging: do not log into the root logger 2017-07-14 15:55:59 +02:00
bindinstance.py py3: fixing zonemgr_callback 2017-07-27 16:48:49 +02:00
ca.py install: allow specifying external CA template 2017-10-04 10:09:18 +02:00
cainstance.py install: allow specifying external CA template 2017-10-04 10:09:18 +02:00
certs.py browser config: cleanup after removal of Firefox extension 2017-09-21 10:27:14 +02:00
conncheck.py install: introduce installer class hierarchy 2016-11-11 12:17:25 +01:00
custodiainstance.py Misc Python 3 fixes for ipaserver.secrets 2017-08-11 13:47:35 +02:00
dns.py logging: do not log into the root logger 2017-07-14 15:55:59 +02:00
dnskeysyncinstance.py logging: do not log into the root logger 2017-07-14 15:55:59 +02:00
dogtag.py install: introduce installer class hierarchy 2016-11-11 12:17:25 +01:00
dogtaginstance.py python3: port certmonger requests script 2017-08-22 10:53:39 +02:00
dsinstance.py Fix ipa-server-upgrade with server cert tracking 2017-09-19 09:34:31 +02:00
httpinstance.py Fix ipa-server-upgrade with server cert tracking 2017-09-19 09:34:31 +02:00
installutils.py ldif: handle attribute names as strings 2017-09-12 16:46:38 +02:00
ipa_backup.py logging: remove object-specific loggers 2017-07-14 15:55:59 +02:00
ipa_cacert_manage.py ipa-cacert-manage: handle alternative tracking request CA name 2017-10-04 10:09:18 +02:00
ipa_kra_install.py logging: remove object-specific loggers 2017-07-14 15:55:59 +02:00
ipa_ldap_updater.py logging: remove object-specific loggers 2017-07-14 15:55:59 +02:00
ipa_otptoken_import.py OTP import: support hash names with HMAC- prefix 2017-09-18 11:37:31 +02:00
ipa_pkinit_manage.py logging: remove object-specific loggers 2017-07-14 15:55:59 +02:00
ipa_replica_install.py install: re-introduce option groups 2017-03-13 10:12:40 +01:00
ipa_replica_prepare.py logging: remove object-specific loggers 2017-07-14 15:55:59 +02:00
ipa_restore.py logging: do not reference loggers in arguments and attributes 2017-07-14 15:55:59 +02:00
ipa_server_certinstall.py x509: Make certificates represented as objects 2017-07-27 10:28:58 +02:00
ipa_server_install.py install: re-introduce option groups 2017-03-13 10:12:40 +01:00
ipa_server_upgrade.py logging: remove object-specific loggers 2017-07-14 15:55:59 +02:00
ipa_winsync_migrate.py logging: remove object-specific loggers 2017-07-14 15:55:59 +02:00
kra.py kra: promote: Get ticket before calling custodia 2017-06-15 10:10:27 +02:00
krainstance.py Unify storing certificates in LDAP 2017-08-25 09:40:15 +02:00
krbinstance.py logging: do not log into the root logger 2017-07-14 15:55:59 +02:00
ldapupdate.py logging: remove object-specific loggers 2017-07-14 15:55:59 +02:00
ntpinstance.py logging: do not log into the root logger 2017-07-14 15:55:59 +02:00
odsexporterinstance.py logging: do not log into the root logger 2017-07-14 15:55:59 +02:00
opendnssecinstance.py logging: do not log into the root logger 2017-07-14 15:55:59 +02:00
otpdinstance.py Enable pylint missing-final-newline check 2015-12-23 07:59:22 +01:00
replication.py Python3: Fix winsync replication agreement 2017-09-15 08:36:22 +02:00
schemaupdate.py logging: do not use ipa_log_manager to create module-level loggers 2017-07-14 15:55:59 +02:00
service.py Unify storing certificates in LDAP 2017-08-25 09:40:15 +02:00
sysupgrade.py logging: do not log into the root logger 2017-07-14 15:55:59 +02:00
upgradeinstance.py logging: do not log into the root logger 2017-07-14 15:55:59 +02:00