Florence Blanc-Renaud 73b2097569 ipa-server-upgrade: fix the logic for tracking certs ... ipa-server-upgrade needs to configure certmonger with the right options in order to track PKI, HTTP and LDAP certs (for instance the RA agent cert location has changed from older releases). The upgrade code looks for existing tracking requests with the expected options by using criteria (location of the NSSDB, nickname, CA helper...) If a tracking request is not found, it means that it is either using wrong options or not configured. In this case, the upgrade stop tracking all the certs, reconfigures the helpers, starts tracking the certs so that the config is up-to-date. The issue is that the criteria is using the keyword 'ca' instead of 'ca-name' and this leads to upgrade believing that the config needs to be updated in all the cases. https://pagure.io/freeipa/issue/7151 Reviewed-By: Rob Crittenden <rcritten@redhat.com>		2017-10-17 10:22:39 +02:00
..
__init__.py	install: allow specifying external CA template	2017-10-04 10:09:18 +02:00
install.py	Checks if Dir Server is installed and running before IPA installation	2017-09-21 10:24:06 +02:00
replicainstall.py	Fixing how sssd.conf is updated when promoting a client to replica	2017-09-12 15:46:04 +02:00
upgrade.py	ipa-server-upgrade: fix the logic for tracking certs	2017-10-17 10:22:39 +02:00