URL: https://github.com/freeipa/freeipa/pull/835 Author: stlaz Title: #835: kdc.key should not be visible to all Action: opened
PR body: """ While the world certainly is interested in our privates, we should not just go ahead and show it to them. https://pagure.io/freeipa/issue/6973 """ To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/835/head:pr835 git checkout pr835
From 84e377880b9ca5106e9034e3797870005e4e4193 Mon Sep 17 00:00:00 2001 From: Stanislav Laznicka <slazn...@redhat.com> Date: Wed, 31 May 2017 14:14:34 +0200 Subject: [PATCH] kdc.key should not be visible to all While the world certainly is interested in our privates, we should not just go ahead and show it to them. https://pagure.io/freeipa/issue/6973 --- ipalib/install/certmonger.py | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/ipalib/install/certmonger.py b/ipalib/install/certmonger.py index ad031a738f..c286996ee2 100644 --- a/ipalib/install/certmonger.py +++ b/ipalib/install/certmonger.py @@ -370,8 +370,8 @@ def request_cert( request_parameters['cert-postsave-command'] = post_command if perms: - request_parameters['key-perms'] = perms[0] - request_parameters['cert-perms'] = perms[1] + request_parameters['cert-perms'] = perms[0] + request_parameters['key-perms'] = perms[1] result = cm.obj_if.add_request(request_parameters) try:
_______________________________________________ FreeIPA-devel mailing list -- freeipa-devel@lists.fedorahosted.org To unsubscribe send an email to freeipa-devel-le...@lists.fedorahosted.org
