diff options
author | Rob Crittenden <rcritten@redhat.com> | 2011-09-27 17:44:20 +0200 |
---|---|---|
committer | Martin Kosek <mkosek@redhat.com> | 2011-09-27 17:50:46 +0200 |
commit | a41457ec3a905a68af60c1b359c25679c3c5a7b7 (patch) | |
tree | 7b1b8a0a23316ac7e15f80081dbd98b8463ea0e2 /ipaserver | |
parent | 2028a4095d00054fb2015ab38d1f3720ea105e13 (diff) | |
download | freeipa-a41457ec3a905a68af60c1b359c25679c3c5a7b7.tar.gz freeipa-a41457ec3a905a68af60c1b359c25679c3c5a7b7.tar.xz freeipa-a41457ec3a905a68af60c1b359c25679c3c5a7b7.zip |
Detect CA installation type in ipa-replica-prepare and ipa-ca-install.
ipa-ca-install can only add a dogtag CA to an IPA install.
ipa-replica-prepare can only be run on the initial master with a
selfsign backend.
https://fedorahosted.org/freeipa/ticket/1756
https://fedorahosted.org/freeipa/ticket/1757
Diffstat (limited to 'ipaserver')
-rw-r--r-- | ipaserver/install/certs.py | 13 |
1 files changed, 13 insertions, 0 deletions
diff --git a/ipaserver/install/certs.py b/ipaserver/install/certs.py index affa26127..feac48a89 100644 --- a/ipaserver/install/certs.py +++ b/ipaserver/install/certs.py @@ -65,6 +65,19 @@ def ipa_self_signed(): else: return False +def ipa_self_signed_master(): + """ + The selfsign backend is enabled only one a single master. + + Return True/False whether this is that master. + + Returns None if not a self-signed server. + """ + if ipa_self_signed(): + return api.env.enable_ra + else: + return None + def find_cert_from_txt(cert, start=0): """ Given a cert blob (str) which may or may not contian leading and |