diff options
| author | Jan Cholasta <jcholast@redhat.com> | 2013-07-23 10:19:42 +0000 |
|---|---|---|
| committer | Petr Viktorin <pviktori@redhat.com> | 2014-03-25 16:54:54 +0100 |
| commit | 4c761108e871ae029b5e1a16aaf35f9e78a3c02e (patch) | |
| tree | 5850e6def660ed6abbf36f46986d3a88c71778f0 /install/restart_scripts | |
| parent | c5e61c85e626da61180f84bc80e294ab0eb3757a (diff) | |
| download | freeipa-4c761108e871ae029b5e1a16aaf35f9e78a3c02e.tar.gz freeipa-4c761108e871ae029b5e1a16aaf35f9e78a3c02e.tar.xz freeipa-4c761108e871ae029b5e1a16aaf35f9e78a3c02e.zip | |
Fix certificate renewal scripts to work with separate CA DS instance.
https://fedorahosted.org/freeipa/ticket/3805
Reviewed-By: Petr Viktorin <pviktori@redhat.com>
Diffstat (limited to 'install/restart_scripts')
| -rw-r--r-- | install/restart_scripts/renew_ca_cert | 4 | ||||
| -rw-r--r-- | install/restart_scripts/renew_ra_cert | 2 |
2 files changed, 2 insertions, 4 deletions
diff --git a/install/restart_scripts/renew_ca_cert b/install/restart_scripts/renew_ca_cert index 2ae869db9..b05369cbe 100644 --- a/install/restart_scripts/renew_ca_cert +++ b/install/restart_scripts/renew_ca_cert @@ -90,9 +90,7 @@ def main(): # Done withing stopped_service context, CA restarted here update_cert_config(nickname, cert) - - if nickname == 'subsystemCert cert-pki-ca': - update_people_entry('pkidbuser', cert) + update_people_entry(cert) if nickname == 'auditSigningCert cert-pki-ca': # Fix trust on the audit cert diff --git a/install/restart_scripts/renew_ra_cert b/install/restart_scripts/renew_ra_cert index 0d731144b..7628e9b9e 100644 --- a/install/restart_scripts/renew_ra_cert +++ b/install/restart_scripts/renew_ra_cert @@ -43,7 +43,7 @@ def main(): dercert = db.get_cert_from_db('ipaCert', pem=False) # Load it into dogtag - update_people_entry('ipara', dercert) + update_people_entry(dercert) attempts = 0 updated = False |