Re: [Freeipa-devel] [PATCH] 491 Fix replacing a certificate in a service.

2010-08-06 Thread Rob Crittenden
Adam Young wrote: On 07/22/2010 04:14 PM, Rob Crittenden wrote: Rob Crittenden wrote: When a service has a certificate and the CA backend doesn't support revocation (like selfsign) then we simply drop the old certificate in preparation for adding a new one. We weren't setting the

[Freeipa-devel] [PATCH] 491 Fix replacing a certificate in a service.

2010-07-22 Thread Rob Crittenden
When a service has a certificate and the CA backend doesn't support revocation (like selfsign) then we simply drop the old certificate in preparation for adding a new one. We weren't setting the usercertificate attribute to None so there was nothing to do in ldap_update(). Added a test case

Re: [Freeipa-devel] [PATCH] 491 Fix replacing a certificate in a service.

2010-07-22 Thread Rob Crittenden
Rob Crittenden wrote: When a service has a certificate and the CA backend doesn't support revocation (like selfsign) then we simply drop the old certificate in preparation for adding a new one. We weren't setting the usercertificate attribute to None so there was nothing to do in