mirror of
https://salsa.debian.org/freeipa-team/freeipa.git
synced 2024-12-23 07:33:27 -06:00
dba89712c6
ipa-server-install now verifies the pki ini override file earlier Fixes: https://pagure.io/freeipa/issue/5608 Signed-off-by: Christian Heimes <cheimes@redhat.com> Reviewed-By: Fraser Tweedale <ftweedal@redhat.com> Reviewed-By: Alexander Bokovoy <abokovoy@redhat.com>
38 lines
999 B
Python
38 lines
999 B
Python
#
|
|
# Copyright (C) 2016 FreeIPA Contributors see COPYING for license
|
|
#
|
|
|
|
"""
|
|
Dogtag-based service installer module
|
|
"""
|
|
|
|
from ipalib.install import service
|
|
from ipalib.install.service import prepare_only, replica_install_only
|
|
from ipapython.install.core import knob
|
|
from ipaserver.install.dogtaginstance import PKIIniLoader
|
|
|
|
|
|
class DogtagInstallInterface(service.ServiceInstallInterface):
|
|
"""
|
|
Interface common to all Dogtag-based service installers
|
|
"""
|
|
|
|
ca_file = knob(
|
|
str, None,
|
|
description="location of CA PKCS#12 file",
|
|
cli_metavar='FILE',
|
|
)
|
|
ca_file = prepare_only(ca_file)
|
|
ca_file = replica_install_only(ca_file)
|
|
|
|
pki_config_override = knob(
|
|
str, None,
|
|
cli_names='--pki-config-override',
|
|
description="Path to ini file with config overrides.",
|
|
)
|
|
|
|
@pki_config_override.validator
|
|
def pki_config_override(self, value):
|
|
if value is not None:
|
|
PKIIniLoader.verify_pki_config_override(value)
|