https://fedorahosted.org/freeipa/ticket/5287
Patch attached.
From ea3ccb19cf326efb1a2f6cb44d9047d0169b6643 Mon Sep 17 00:00:00 2001 From: Martin Basti <mba...@redhat.com> Date: Thu, 10 Sep 2015 18:46:00 +0200 Subject: [PATCH] Server Upgrade: backup CS.cfg when dogtag is turned off Is unable to made CS.cfg when dogtag is running. https://fedorahosted.org/freeipa/ticket/5287 --- ipaserver/install/server/upgrade.py | 5 ++++- 1 file changed, 4 insertions(+), 1 deletion(-) diff --git a/ipaserver/install/server/upgrade.py b/ipaserver/install/server/upgrade.py index 093aee878be797b853202be8907598f4f9adaff1..ed1241befdcce2a04666248d3362e26a78bfa25d 100644 --- a/ipaserver/install/server/upgrade.py +++ b/ipaserver/install/server/upgrade.py @@ -1355,10 +1355,13 @@ def upgrade_configuration(): sub_dict['SUBJECT_BASE'] = subject_base ca = cainstance.CAInstance(api.env.realm, certs.NSS_DIR) - ca.backup_config() with installutils.stopped_service(configured_constants.SERVICE_NAME, configured_constants.PKI_INSTANCE_NAME): + + # Dogtag must be stopped to be able to backup CS.cfg config + ca.backup_config() + # migrate CRL publish dir before the location in ipa.conf is updated ca_restart = migrate_crl_publish_dir(ca) -- 2.4.3
-- Manage your subscription for the Freeipa-devel mailing list: https://www.redhat.com/mailman/listinfo/freeipa-devel Contribute to FreeIPA: http://www.freeipa.org/page/Contribute/Code
