diff options
| author | Petr Viktorin <pviktori@redhat.com> | 2013-03-26 18:06:50 +0100 |
|---|---|---|
| committer | Rob Crittenden <rcritten@redhat.com> | 2013-04-15 16:55:27 -0400 |
| commit | 4e3c1051d029363a099312eac48f337244a5610c (patch) | |
| tree | 81574e96640ac9743ab7088af724233944d9cb62 /ipaserver/install/httpinstance.py | |
| parent | fe00788bb439d461e1429ffbd94e42d615e2ddf9 (diff) | |
| download | freeipa-4e3c1051d029363a099312eac48f337244a5610c.tar.gz freeipa-4e3c1051d029363a099312eac48f337244a5610c.tar.xz freeipa-4e3c1051d029363a099312eac48f337244a5610c.zip | |
Uninstall selfsign CA on upgrade
This will convert a master with a selfsign CA to a CA-less one in
ipa-upgradeconfig.
The relevant files are left in place and can be used to manage certs
manually.
Part of the work for: https://fedorahosted.org/freeipa/ticket/3494
Diffstat (limited to 'ipaserver/install/httpinstance.py')
| -rw-r--r-- | ipaserver/install/httpinstance.py | 7 |
1 files changed, 5 insertions, 2 deletions
diff --git a/ipaserver/install/httpinstance.py b/ipaserver/install/httpinstance.py index c34073546..e134fbef3 100644 --- a/ipaserver/install/httpinstance.py +++ b/ipaserver/install/httpinstance.py @@ -376,8 +376,7 @@ class HTTPInstance(service.Service): if not running is None: self.stop() - db = certs.CertDB(api.env.realm) - db.untrack_server_cert(self.cert_nickname) + self.stop_tracking_certificates() if not enabled is None and not enabled: self.disable() @@ -404,3 +403,7 @@ class HTTPInstance(service.Service): if not running is None and running: self.start() + + def stop_tracking_certificates(self): + db = certs.CertDB(api.env.realm) + db.untrack_server_cert(self.cert_nickname) |