URL: https://github.com/freeipa/freeipa/pull/239
Author: tomaskrizek
 Title: #239: cainstance: use correct certificate for replica install check
Action: opened

PR body:
"""
Incorrect certificate file extension caused DL0 replica install to fail.

https://fedorahosted.org/freeipa/ticket/6461
"""

To pull the PR as Git branch:
git remote add ghfreeipa https://github.com/freeipa/freeipa
git fetch ghfreeipa pull/239/head:pr239
git checkout pr239
From a190b83f1c048a2ec40d925b7ee054a74549389d Mon Sep 17 00:00:00 2001
From: Tomas Krizek <tkri...@redhat.com>
Date: Mon, 14 Nov 2016 17:25:33 +0100
Subject: [PATCH] cainstance: use correct certificate for replica install check

Incorrect certificate file extension caused DL0 replica install to fail.

https://fedorahosted.org/freeipa/ticket/6461
---
 ipaserver/install/cainstance.py | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/ipaserver/install/cainstance.py b/ipaserver/install/cainstance.py
index 4953ff7..c7a117d 100644
--- a/ipaserver/install/cainstance.py
+++ b/ipaserver/install/cainstance.py
@@ -1301,7 +1301,7 @@ def replica_ca_install_check(config, promote):
         with ipaldap.LDAPClient(
                 ca_ldap_url,
                 start_tls=True,
-                cacert=config.dir + "/ca.cer",
+                cacert=config.dir + "/ca.crt",
                 force_schema_updates=False) as connection:
             connection.simple_bind(bind_dn=ipaldap.DIRMAN_DN,
                                    bind_password=config.dirman_password)
-- 
Manage your subscription for the Freeipa-devel mailing list:
https://www.redhat.com/mailman/listinfo/freeipa-devel
Contribute to FreeIPA: http://www.freeipa.org/page/Contribute/Code

Reply via email to