diff options
| author | Simo Sorce <ssorce@redhat.com> | 2010-11-01 13:51:14 -0400 |
|---|---|---|
| committer | Simo Sorce <ssorce@redhat.com> | 2010-11-18 15:09:31 -0500 |
| commit | 74ba0cc7c1bdb9c560324a68c16593755bcda5d8 (patch) | |
| tree | 13165adebe5ee440606b76e735e49787fb94657a /ipaserver/plugins/selfsign.py | |
| parent | 775fc23738d8a882bdd9cff9064b50594901e518 (diff) | |
| download | freeipa-74ba0cc7c1bdb9c560324a68c16593755bcda5d8.tar.gz freeipa-74ba0cc7c1bdb9c560324a68c16593755bcda5d8.tar.xz freeipa-74ba0cc7c1bdb9c560324a68c16593755bcda5d8.zip | |
Use Realm as certs subject base name
Also use the realm name as nickname for the CA certificate
Diffstat (limited to 'ipaserver/plugins/selfsign.py')
| -rw-r--r-- | ipaserver/plugins/selfsign.py | 5 |
1 files changed, 3 insertions, 2 deletions
diff --git a/ipaserver/plugins/selfsign.py b/ipaserver/plugins/selfsign.py index 9943f73d2..741fb0dc4 100644 --- a/ipaserver/plugins/selfsign.py +++ b/ipaserver/plugins/selfsign.py @@ -39,7 +39,7 @@ from ipalib import Backend from ipalib import errors from ipalib import x509 from ipalib import pkcs10 -from ipapython.certdb import CA_NICKNAME +from ipapython.certdb import get_ca_nickname import subprocess import os import re @@ -47,6 +47,7 @@ from ipaserver.plugins import rabase from ipaserver.install import certs import tempfile from ipalib import _ +from ipalib import api from ipalib.plugins.cert import get_csr_hostname from nss.error import NSPRError @@ -157,7 +158,7 @@ class ra(rabase.rabase): "/usr/bin/certutil", "-C", "-d", self.sec_dir, - "-c", CA_NICKNAME, + "-c", get_ca_nickname(api.env.realm), "-i", csr_name, "-o", cert_name, "-m", str(serialno), |