mirror of
https://salsa.debian.org/freeipa-team/freeipa.git
synced 2025-02-25 18:55:28 -06:00
In a CA-less install, if the CA cert subject contains non-ascii characters, ipa-server-install fails when configuring SSL for httpd. The issue happens when calling ipautil.run to extract the keys from a p12file. The code is using the raw output of the command and doesn't need to specify capture_output=True, as this option breaks if the output contains non-ascii characters. The raw_output contains bytes, the output is a str built by decoding the raw_output and may fail if non-ascii characters are present. Fixes: https://pagure.io/freeipa/issue/8880 Signed-off-by: Florence Blanc-Renaud <flo@redhat.com> Reviewed-By: Rob Crittenden <rcritten@redhat.com> Reviewed-By: Francois Cami <fcami@redhat.com>