On Mon, Jun 27, 2016 at 02:02:15PM +0200, Martin Basti wrote:
> On 27.06.2016 13:58, Fraser Tweedale wrote:
> > Hi all,
> > The attached patch fixes the OCSP URI in the Dogtag CA and system
> > certificates (https://fedorahosted.org/freeipa/ticket/5956). It
> > depends on a patch for Dogtag which is expected to be released in
> > v10.3.4. In the meantime, you can test with the build of v10.3.4
> > from my COPR.
> >  https://www.redhat.com/archives/pki-devel/2016-June/msg00138.html
> >  https://copr.fedorainfracloud.org/coprs/ftweedal/freeipa/
> > Cheers,
> > Fraser
> this upgrade is executed always, is it on purpose?
> If not please use sysupgrade and run upgrade only once
It is intentional; the directive only gets added if it is missing.
I do not see any benefit in gating it with the sysupgrade mechanism.
Manage your subscription for the Freeipa-devel mailing list:
Contribute to FreeIPA: http://www.freeipa.org/page/Contribute/Code