Dogtag 10.3.3, which fixes a lightweight CA initialisation bug, should land in updates-testing soon[2]. Pursuant to [2], this patch bumps minimum required Dogtag version to 10.3.3.
[1] https://bodhi.fedoraproject.org/updates/?packages=pki-core [2] https://www.redhat.com/archives/freeipa-devel/2016-June/msg00417.html Thanks, Fraser
From bdb3f40f89a70803b3b1b3069b8dce7cff4390f2 Mon Sep 17 00:00:00 2001 From: Fraser Tweedale <ftwee...@redhat.com> Date: Tue, 21 Jun 2016 19:42:53 +1000 Subject: [PATCH] Require Dogtag >= 10.3.3 Dogtag 10.3.3 fixes a lightweight CA initialisation issue that caused existing lightweight CAs to not be initialised on CA replicas on first run (see https://fedorahosted.org/pki/ticket/2359). Part of: https://fedorahosted.org/freeipa/ticket/4559 --- freeipa.spec.in | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) diff --git a/freeipa.spec.in b/freeipa.spec.in index 0d5c745d5306cd7141c573454bd1c1e6a78c7e7f..d31ddfaf78a455f4e4d65724bbbe23461e1336e0 100644 --- a/freeipa.spec.in +++ b/freeipa.spec.in @@ -94,7 +94,7 @@ BuildRequires: libunistring-devel BuildRequires: python-lesscpy BuildRequires: python-yubico >= 1.2.3 BuildRequires: openssl-devel -BuildRequires: pki-base >= 10.3.2 +BuildRequires: pki-base >= 10.3.3 BuildRequires: python-pytest-multihost >= 0.5 BuildRequires: python-pytest-sourceorder BuildRequires: python-kdcproxy >= 0.3 @@ -155,8 +155,8 @@ Requires(post): systemd-units Requires: selinux-policy >= %{selinux_policy_version} Requires(post): selinux-policy-base >= %{selinux_policy_version} Requires: slapi-nis >= 0.55-1 -Requires: pki-ca >= 10.3.2 -Requires: pki-kra >= 10.3.2 +Requires: pki-ca >= 10.3.3 +Requires: pki-kra >= 10.3.3 Requires(preun): python systemd-units Requires(postun): python systemd-units Requires: zip -- 2.5.5
-- Manage your subscription for the Freeipa-devel mailing list: https://www.redhat.com/mailman/listinfo/freeipa-devel Contribute to FreeIPA: http://www.freeipa.org/page/Contribute/Code