From 52f72ec058f11b3ca494c696f7d6a5e16b44cd49 Mon Sep 17 00:00:00 2001 From: Jan Cholasta Date: Mon, 9 Jun 2014 14:51:23 +0200 Subject: Do not treat the IPA RA cert as CA cert in DS NSS database. Reviewed-By: Rob Crittenden --- ipaserver/install/certs.py | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) (limited to 'ipaserver') diff --git a/ipaserver/install/certs.py b/ipaserver/install/certs.py index 90d04a3fb..e201c2529 100644 --- a/ipaserver/install/certs.py +++ b/ipaserver/install/certs.py @@ -461,7 +461,7 @@ class CertDB(object): do that step.""" # export the CA cert for use with other apps ipautil.backup_file(self.cacert_fname) - root_nicknames = self.find_root_cert(nickname) + root_nicknames = self.find_root_cert(nickname)[:-1] fd = open(self.cacert_fname, "w") for root in root_nicknames: (cert, stderr, returncode) = self.run_certutil(["-L", "-n", root, "-a"]) -- cgit