freeipa/ipaserver
Florence Blanc-Renaud 73b2097569 ipa-server-upgrade: fix the logic for tracking certs
ipa-server-upgrade needs to configure certmonger with the right options
in order to track PKI, HTTP and LDAP certs (for instance the RA agent cert
location has changed from older releases).
The upgrade code looks for existing tracking requests with the expected
options by using criteria (location of the NSSDB, nickname, CA helper...)
If a tracking request is not found, it means that it is either using wrong
options or not configured. In this case, the upgrade stop tracking
all the certs, reconfigures the helpers, starts tracking the certs so that
the config is up-to-date.

The issue is that the criteria is using the keyword 'ca' instead of
'ca-name' and this leads to upgrade believing that the config needs to be
updated in all the cases.

https://pagure.io/freeipa/issue/7151

Reviewed-By: Rob Crittenden <rcritten@redhat.com>
2017-10-17 10:22:39 +02:00
..
advise logging: do not log into the root logger 2017-07-14 15:55:59 +02:00
dnssec dnssec: fix localhsm.py utility script 2017-08-30 16:00:23 +02:00
install ipa-server-upgrade: fix the logic for tracking certs 2017-10-17 10:22:39 +02:00
plugins Remove the message attribute from exceptions 2017-10-06 09:19:46 +02:00
secrets pylint: fix missing module 2017-09-18 11:41:15 +02:00
__init__.py Change FreeIPA license to GPLv3+ 2010-12-20 17:19:53 -05:00
dcerpc.py py3: set samba dependencies 2017-09-14 14:06:09 +02:00
dns_data_management.py DNS update: reduce timeout for CA records 2017-08-30 13:02:59 +02:00
Makefile.am Build: Makefiles for Python packages 2016-11-09 13:08:32 +01:00
p11helper.py py3: softhsm key_id must be bytes 2017-06-01 09:24:24 +02:00
rpcserver.py rpcserver: don't call xmlserver.Command 2017-09-08 15:42:07 +02:00
servroles.py Do not remove the old masters when setting the attribute fails 2017-07-04 14:42:43 +02:00
setup.cfg Port all setup.py to setuptools 2016-10-20 18:43:37 +02:00
setup.py Turn on NSSOCSP check in mod_nss conf 2017-05-10 09:08:34 +02:00
topology.py fix incorrect suffix handling in topology checks 2017-06-05 18:37:37 +02:00