URL: https://github.com/freeipa/freeipa/pull/655
Title: #655: httpinstance.disable_system_trust: Don't fail if module 'Root
Certs' …
tomaskrizek commented:
"""
ipa-4-5:
* 2a499551ca5ddf2596cc19a77f47c34e9f5c10c5 httpinstance.disable_system_trust:
Don't fail if module 'Root Certs' is not avail
URL: https://github.com/freeipa/freeipa/pull/655
Title: #655: httpinstance.disable_system_trust: Don't fail if module 'Root
Certs' …
stlaz commented:
"""
This fixes the mentioned issue. I did not test whether the actual disable works
but I should hope so as I don't see how this could break it.
URL: https://github.com/freeipa/freeipa/pull/655
Title: #655: httpinstance.disable_system_trust: Don't fail if module 'Root
Certs' …
stlaz commented:
"""
@HonzaCholasta You're right, I completely forgot about that one.
"""
See the full comment at
https://github.com/freeipa/freeipa/pull/655#is
URL: https://github.com/freeipa/freeipa/pull/655
Title: #655: httpinstance.disable_system_trust: Don't fail if module 'Root
Certs' …
HonzaCholasta commented:
"""
@stlaz, you can't do just `-disable`, as that would break upgrade (note that
the `-list` is there because `-disable` always reports
URL: https://github.com/freeipa/freeipa/pull/655
Title: #655: httpinstance.disable_system_trust: Don't fail if module 'Root
Certs' …
dkupka commented:
"""
@tiran @stlaz Makes sense. I will update it accordingly. Thanks for suggestions.
"""
See the full comment at
https://github.com/freeipa/fr
URL: https://github.com/freeipa/freeipa/pull/655
Title: #655: httpinstance.disable_system_trust: Don't fail if module 'Root
Certs' …
stlaz commented:
"""
@tiran I of course agree on narrowing the broad except down, my point is we
should rather remove the whole `-list` part and just try to do `
URL: https://github.com/freeipa/freeipa/pull/655
Title: #655: httpinstance.disable_system_trust: Don't fail if module 'Root
Certs' …
stlaz commented:
"""
@tiran I of course agree on narrowing the broad except down, my point is we
should rather remove the whole `-list` part and just try to do `
URL: https://github.com/freeipa/freeipa/pull/655
Title: #655: httpinstance.disable_system_trust: Don't fail if module 'Root
Certs' …
tiran commented:
"""
@stlaz The broad except also catches and ignores typos in the command line or
missing ```modutil``` binary.
"""
See the full comment at
ht
URL: https://github.com/freeipa/freeipa/pull/655
Title: #655: httpinstance.disable_system_trust: Don't fail if module 'Root
Certs' …
stlaz commented:
"""
For the record:
```bash
[slaznick@vm-066 ~]$ sudo modutil -dbdir nssdb/ -disable 'Root Certs' -force
ERROR: Module "Root Certs" not found in
URL: https://github.com/freeipa/freeipa/pull/655
Title: #655: httpinstance.disable_system_trust: Don't fail if module 'Root
Certs' …
stlaz commented:
"""
For the record:
```bash
[slaznick@vm-066 ~]$ sudo modutil -dbdir nssdb/ -disable 'Root Certs' -force
ERROR: Module "Root Certs" not found in
URL: https://github.com/freeipa/freeipa/pull/655
Title: #655: httpinstance.disable_system_trust: Don't fail if module 'Root
Certs' …
stlaz commented:
"""
Hm, I believe the `-list` operation was there just to check whether the module
is there. If `modutil` fails like this no matter the situatio
URL: https://github.com/freeipa/freeipa/pull/655
Title: #655: httpinstance.disable_system_trust: Don't fail if module 'Root
Certs' …
stlaz commented:
"""
Hm, I believe the `-list` operation was there just to check whether the module
is there. If `modutil` fails like this no matter the situatio
12 matches
Mail list logo
