URL: https://github.com/freeipa/freeipa/pull/506
Title: #506: added ssl verification

tscherf commented:
When the system wide trust store is supposed to be used here, then something 
else must be broken somewhere in the verification code. Without explicitly 
using the IPA trust anchor stored in IPA_CA_CRT, the installer failed with an 
"[SSL: CERTIFICATE_VERIFY_FAILED]" error. We have seen this in CA-less and 
chained CA setups.

See the full comment at 
Manage your subscription for the Freeipa-devel mailing list:
Contribute to FreeIPA: http://www.freeipa.org/page/Contribute/Code

Reply via email to