URL: https://github.com/freeipa/freeipa/pull/853
Title: #853: x509,certdb: handle certificates as bytes

stlaz commented:
This will require some more refactoring, adding WIP label.

Basically, `Bytes` parameter only base64-decodes its value if it's of 
`unicode`/`str` instance (Python2/Python3), but in most cases, its value is 
checked with `validate_ceritifate()` of the `ipaserver.plugins.service` module, 
which requires the certificate to be in DER format. But the ceritificate won't 
be decoded to DER from PEM as it above decoding condition is not fulfilled.

See the full comment at 
FreeIPA-devel mailing list -- freeipa-devel@lists.fedorahosted.org
To unsubscribe send an email to freeipa-devel-le...@lists.fedorahosted.org

Reply via email to