freeipa/ipaserver/install
Florence Blanc-Renaud 73b2097569 ipa-server-upgrade: fix the logic for tracking certs
ipa-server-upgrade needs to configure certmonger with the right options
in order to track PKI, HTTP and LDAP certs (for instance the RA agent cert
location has changed from older releases).
The upgrade code looks for existing tracking requests with the expected
options by using criteria (location of the NSSDB, nickname, CA helper...)
If a tracking request is not found, it means that it is either using wrong
options or not configured. In this case, the upgrade stop tracking
all the certs, reconfigures the helpers, starts tracking the certs so that
the config is up-to-date.

The issue is that the criteria is using the keyword 'ca' instead of
'ca-name' and this leads to upgrade believing that the config needs to be
updated in all the cases.

https://pagure.io/freeipa/issue/7151

Reviewed-By: Rob Crittenden <rcritten@redhat.com>
2017-10-17 10:22:39 +02:00
..
plugins Fix ipa-server-upgrade: This entry already exists 2017-08-30 12:47:53 +02:00
server ipa-server-upgrade: fix the logic for tracking certs 2017-10-17 10:22:39 +02:00
__init__.py Remove __all__ specifications in ipaclient and ipaserver.install 2013-09-06 15:42:33 +02:00
adtrust.py Correct typo estabilish->establish in the install scripts 2017-07-24 13:41:16 +02:00
adtrustinstance.py logging: do not log into the root logger 2017-07-14 15:55:59 +02:00
bindinstance.py py3: fixing zonemgr_callback 2017-07-27 16:48:49 +02:00
ca.py install: allow specifying external CA template 2017-10-04 10:09:18 +02:00
cainstance.py install: allow specifying external CA template 2017-10-04 10:09:18 +02:00
certs.py browser config: cleanup after removal of Firefox extension 2017-09-21 10:27:14 +02:00
conncheck.py install: introduce installer class hierarchy 2016-11-11 12:17:25 +01:00
custodiainstance.py Misc Python 3 fixes for ipaserver.secrets 2017-08-11 13:47:35 +02:00
dns.py logging: do not log into the root logger 2017-07-14 15:55:59 +02:00
dnskeysyncinstance.py logging: do not log into the root logger 2017-07-14 15:55:59 +02:00
dogtag.py install: introduce installer class hierarchy 2016-11-11 12:17:25 +01:00
dogtaginstance.py python3: port certmonger requests script 2017-08-22 10:53:39 +02:00
dsinstance.py Fix ipa-server-upgrade with server cert tracking 2017-09-19 09:34:31 +02:00
httpinstance.py Fix ipa-server-upgrade with server cert tracking 2017-09-19 09:34:31 +02:00
installutils.py Remove the message attribute from exceptions 2017-10-06 09:19:46 +02:00
ipa_backup.py logging: remove object-specific loggers 2017-07-14 15:55:59 +02:00
ipa_cacert_manage.py ipa-cacert-manage: avoid some duplicate string definitions 2017-10-04 10:09:18 +02:00
ipa_kra_install.py logging: remove object-specific loggers 2017-07-14 15:55:59 +02:00
ipa_ldap_updater.py logging: remove object-specific loggers 2017-07-14 15:55:59 +02:00
ipa_otptoken_import.py OTP import: support hash names with HMAC- prefix 2017-09-18 11:37:31 +02:00
ipa_pkinit_manage.py logging: remove object-specific loggers 2017-07-14 15:55:59 +02:00
ipa_replica_install.py install: re-introduce option groups 2017-03-13 10:12:40 +01:00
ipa_replica_prepare.py logging: remove object-specific loggers 2017-07-14 15:55:59 +02:00
ipa_restore.py logging: do not reference loggers in arguments and attributes 2017-07-14 15:55:59 +02:00
ipa_server_certinstall.py x509: Make certificates represented as objects 2017-07-27 10:28:58 +02:00
ipa_server_install.py install: re-introduce option groups 2017-03-13 10:12:40 +01:00
ipa_server_upgrade.py logging: remove object-specific loggers 2017-07-14 15:55:59 +02:00
ipa_winsync_migrate.py logging: remove object-specific loggers 2017-07-14 15:55:59 +02:00
kra.py kra: promote: Get ticket before calling custodia 2017-06-15 10:10:27 +02:00
krainstance.py Unify storing certificates in LDAP 2017-08-25 09:40:15 +02:00
krbinstance.py Less confusing message for PKINIT configuration during install 2017-10-13 16:47:53 +02:00
ldapupdate.py logging: remove object-specific loggers 2017-07-14 15:55:59 +02:00
ntpinstance.py logging: do not log into the root logger 2017-07-14 15:55:59 +02:00
odsexporterinstance.py logging: do not log into the root logger 2017-07-14 15:55:59 +02:00
opendnssecinstance.py logging: do not log into the root logger 2017-07-14 15:55:59 +02:00
otpdinstance.py Enable pylint missing-final-newline check 2015-12-23 07:59:22 +01:00
replication.py Python3: Fix winsync replication agreement 2017-09-15 08:36:22 +02:00
schemaupdate.py logging: do not use ipa_log_manager to create module-level loggers 2017-07-14 15:55:59 +02:00
service.py Unify storing certificates in LDAP 2017-08-25 09:40:15 +02:00
sysupgrade.py logging: do not log into the root logger 2017-07-14 15:55:59 +02:00
upgradeinstance.py logging: do not log into the root logger 2017-07-14 15:55:59 +02:00