From b382a77fc393a078ebbba8000284dd9abe75a3d5 Mon Sep 17 00:00:00 2001 From: Petr Viktorin Date: Thu, 24 Jan 2013 11:11:03 -0500 Subject: Add the CA cert to LDAP after the CA install The DS is installed before the CA cert is generated. Trying to add the cert to LDAP before it exists resulted in a nasty-looking error message. This moves the cert upload to after the CA cert is ready and the certdb is created. Move the cert upload to after thecertdb is generated. https://fedorahosted.org/freeipa/ticket/3375 --- ipaserver/install/dsinstance.py | 3 +-- 1 file changed, 1 insertion(+), 2 deletions(-) (limited to 'ipaserver/install/dsinstance.py') diff --git a/ipaserver/install/dsinstance.py b/ipaserver/install/dsinstance.py index 76ef68726..367496f18 100644 --- a/ipaserver/install/dsinstance.py +++ b/ipaserver/install/dsinstance.py @@ -262,7 +262,6 @@ class DsInstance(service.Service): self.step("adding range check plugin", self.__add_range_check_plugin) if hbac_allow: self.step("creating default HBAC rule allow_all", self.add_hbac) - self.step("Upload CA cert to the directory", self.__upload_ca_cert) self.__common_post_setup() @@ -589,7 +588,7 @@ class DsInstance(service.Service): # check for open secure port 636 from now on self.open_ports.append(636) - def __upload_ca_cert(self): + def upload_ca_cert(self): """ Upload the CA certificate in DER form in the LDAP directory. """ -- cgit