diff options
author | Rob Crittenden <rcritten@redhat.com> | 2012-04-10 21:21:08 +0200 |
---|---|---|
committer | Rob Crittenden <rcritten@redhat.com> | 2012-04-10 01:08:41 -0400 |
commit | 717bbcd2bf624ad68ea1cdf08216ab4f06e8bc4d (patch) | |
tree | c322f49a4d11e13bd69ee1f7db69b377f62c93c4 /freeipa.spec.in | |
parent | e9b79cc1e111bbdc91675f8a2f48a92baa4266c9 (diff) | |
download | freeipa-717bbcd2bf624ad68ea1cdf08216ab4f06e8bc4d.tar.gz freeipa-717bbcd2bf624ad68ea1cdf08216ab4f06e8bc4d.tar.xz freeipa-717bbcd2bf624ad68ea1cdf08216ab4f06e8bc4d.zip |
Configure certmonger to execute restart scripts on renewal.
certmonger now has the ability to execute a script when it renews a
certificate. This can be used to automatically restart servers so
the certificate doesn't expire in the running server.
https://fedorahosted.org/freeipa/ticket/2050
Diffstat (limited to 'freeipa.spec.in')
-rw-r--r-- | freeipa.spec.in | 11 |
1 files changed, 9 insertions, 2 deletions
diff --git a/freeipa.spec.in b/freeipa.spec.in index 3d057ac4d..a1e43a0ad 100644 --- a/freeipa.spec.in +++ b/freeipa.spec.in @@ -118,7 +118,7 @@ Requires(pre): systemd-units Requires(post): systemd-units %endif %if 0%{?fedora} >= 17 -Requires: selinux-policy >= 3.10.0-82 +Requires: selinux-policy >= 3.10.0-110 %else %if 0%{?fedora} == 16 Requires: selinux-policy >= 3.10.0-78 @@ -215,7 +215,7 @@ Requires: xmlrpc-c %endif %endif Requires: sssd >= 1.8.0 -Requires: certmonger >= 0.26 +Requires: certmonger >= 0.53 Requires: nss-tools Requires: bind-utils Requires: oddjob-mkhomedir @@ -542,6 +542,8 @@ fi %endif %dir %{python_sitelib}/ipaserver %{python_sitelib}/ipaserver/* +%dir %{_libdir}/ipa/certmonger +%attr(755,root,root) %{_libdir}/ipa/certmonger/* %dir %{_usr}/share/ipa %{_usr}/share/ipa/wsgi.py* %{_usr}/share/ipa/*.ldif @@ -681,6 +683,11 @@ fi %ghost %attr(0644,root,apache) %config(noreplace) %{_sysconfdir}/ipa/ca.crt %changelog +* Tue Apr 10 2012 Rob Crittenden <rcritten@redhat.com> - 2.99.0-28 +- Set min for selinux-policy to 3.10.0-110 on F-17 to pick up certmonger + policy for restarting services. +- Set min for certmonger to 0.53 so we have the -C option to set restart + commands. * Thu Apr 5 2012 Rob Crittenden <rcritten@redhat.com> - 2.99.0-27 - Bump minimum version of slapi-nis to 0.40 |