diff options
| author | Ade Lee <alee@redhat.com> | 2012-12-20 17:38:13 -0500 |
|---|---|---|
| committer | Ade Lee <alee@redhat.com> | 2013-01-15 09:28:38 -0500 |
| commit | 1cceecafb8050ec362a9c9568d36d52d3fe4117e (patch) | |
| tree | cc4019509f5befe6159b00e95a2fbbb9415df921 /base/deploy/src/scriptlets/initialization.py | |
| parent | d93a522df48a294018468c1db60f651e501ec458 (diff) | |
| download | pki-1cceecafb8050ec362a9c9568d36d52d3fe4117e.tar.gz pki-1cceecafb8050ec362a9c9568d36d52d3fe4117e.tar.xz pki-1cceecafb8050ec362a9c9568d36d52d3fe4117e.zip | |
Resolved Trac Ticket 367 - pkidestroy does not remove connector
* Added RESTful servlet to add/remove a KRA connector from the CA.
* Modified ACL to allow KRA subsystem user to remove connector.
* Modified connector code to allow the connector to be replaced without a server restart.
* Added functionality to pki CLI to add/remove connector
* Added code to pkidestroy to remove the connector (using both pki CLI and sslget)
When the issues with pki connection are resolved, we will use that method instead.
* Modified sslget to accept HTTP return codes != 200. In this case, we were returning
204 - which is perfectly legitimate.
Diffstat (limited to 'base/deploy/src/scriptlets/initialization.py')
| -rw-r--r-- | base/deploy/src/scriptlets/initialization.py | 4 |
1 files changed, 4 insertions, 0 deletions
diff --git a/base/deploy/src/scriptlets/initialization.py b/base/deploy/src/scriptlets/initialization.py index 034179ef1..102fd4245 100644 --- a/base/deploy/src/scriptlets/initialization.py +++ b/base/deploy/src/scriptlets/initialization.py @@ -104,6 +104,10 @@ class PkiScriptlet(pkiscriptlet.AbstractBasePkiScriptlet): util.identity.set_gid(master['pki_group']) # get ports to remove selinux context util.configuration_file.populate_non_default_ports() + + # remove kra connector from CA if this is a KRA + util.kra_connector.deregister() + # de-register instance from its Security Domain # # NOTE: Since the security domain of an instance must be up |