mirror of
https://salsa.debian.org/freeipa-team/freeipa.git
synced 2024-12-24 08:00:02 -06:00
f769045f0a
Set `pkinit_pool` in `kdc.conf` to a CA certificate bundle of all CAs known to IPA. Make sure `cacert.pem` is exported in all installation code paths. Use the KDC certificate itself as a PKINIT anchor in `login_password`. https://pagure.io/freeipa/issue/6831 Reviewed-By: Stanislav Laznicka <slaznick@redhat.com> Reviewed-By: Martin Babinsky <mbabinsk@redhat.com>
17 lines
334 B
Makefile
17 lines
334 B
Makefile
NULL =
|
|
|
|
appdir = $(libexecdir)/ipa/certmonger
|
|
app_DATA = \
|
|
restart_dirsrv \
|
|
restart_httpd \
|
|
renew_ca_cert \
|
|
renew_kdc_cert \
|
|
renew_ra_cert \
|
|
stop_pkicad \
|
|
renew_ra_cert_pre \
|
|
$(NULL)
|
|
|
|
EXTRA_DIST = \
|
|
$(app_DATA) \
|
|
$(NULL)
|