From 5c10f66e4abd35dc24fe65d5916e429bee221093 Mon Sep 17 00:00:00 2001
From: Rob Crittenden <rcritten@redhat.com>
Date: Mon, 10 Oct 2011 10:15:41 -0400
Subject: Fix upgrades of selfsign server

In checking to see if the dogtag proxy configuration needed to be updated
we didn't handle the case where dogtag isn't installed at all.

https://fedorahosted.org/freeipa/ticket/1951
---
 install/tools/ipa-upgradeconfig | 3 +++
 1 file changed, 3 insertions(+)

diff --git a/install/tools/ipa-upgradeconfig b/install/tools/ipa-upgradeconfig
index 406da9396..8c4d9a260 100644
--- a/install/tools/ipa-upgradeconfig
+++ b/install/tools/ipa-upgradeconfig
@@ -145,6 +145,9 @@ def upgrade_pki():
 
     This requires enabling SSL renegotiation.
     """
+    if not os.path.exists('/etc/pki-ca/CS.cfg'):
+        return
+
     fstore = sysrestore.FileStore('/var/lib/ipa/sysrestore')
     http = httpinstance.HTTPInstance(fstore)
     http.enable_mod_nss_renegotiate()
-- 
cgit