Hi, the attached patch fixes <https://fedorahosted.org/freeipa/ticket/5611>.
Note that this is a 4.2-specific fix. Honza -- Jan Cholasta
From c2a0684c64538166809883a235bd131518b6e78f Mon Sep 17 00:00:00 2001 From: Jan Cholasta <jchol...@redhat.com> Date: Mon, 25 Jan 2016 08:48:42 +0100 Subject: [PATCH] CA install: explicitly set dogtag_version to 10 When installing new CA master, explicitly set the dogtag_version option to 10 in api.bootstrap() to prevent failures in code which expects the value to be 10 rather than the default value of 9. https://fedorahosted.org/freeipa/ticket/5611 --- install/tools/ipa-ca-install | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/install/tools/ipa-ca-install b/install/tools/ipa-ca-install index 6564e4d..e8ccaef 100755 --- a/install/tools/ipa-ca-install +++ b/install/tools/ipa-ca-install @@ -162,7 +162,7 @@ def install_master(safe_options, options): # override ra_plugin setting read from default.conf so that we have # functional dogtag backend plugins during CA install - api.bootstrap(in_server=True, ra_plugin='dogtag') + api.bootstrap(in_server=True, ra_plugin='dogtag', dogtag_version=10) api.finalize() dm_password = options.password -- 2.5.0
-- Manage your subscription for the Freeipa-devel mailing list: https://www.redhat.com/mailman/listinfo/freeipa-devel Contribute to FreeIPA: http://www.freeipa.org/page/Contribute/Code