diff options
| author | Rob Crittenden <rcritten@redhat.com> | 2013-01-24 16:14:31 -0500 |
|---|---|---|
| committer | Martin Kosek <mkosek@redhat.com> | 2013-01-25 10:15:58 +0100 |
| commit | 771624bb72af1d0df8aa3cf3c5a71ae28ab590d3 (patch) | |
| tree | 83a32735c445b8eb4bf064f6199b35e5316e43fd /freeipa.spec.in | |
| parent | 64de33a772255e6c8a921a6463ca1c751e25512d (diff) | |
| download | freeipa.git-771624bb72af1d0df8aa3cf3c5a71ae28ab590d3.tar.gz freeipa.git-771624bb72af1d0df8aa3cf3c5a71ae28ab590d3.tar.xz freeipa.git-771624bb72af1d0df8aa3cf3c5a71ae28ab590d3.zip | |
Make certmonger a (pre) requires on server, restart it before upgrading
certmonger may provide new CAs, as in the case from upgrading IPA 2.2
to 3.x. We need these new CAs available during the upgrade process.
The certmonger package does its own condrestart as part of %postun
which runs after the %post script of freeipa-server, so we need to
restart it ourselves before upgrading.
https://fedorahosted.org/freeipa/ticket/3378
Diffstat (limited to 'freeipa.spec.in')
| -rw-r--r-- | freeipa.spec.in | 8 |
1 files changed, 7 insertions, 1 deletions
diff --git a/freeipa.spec.in b/freeipa.spec.in index f1c45b6c..90014819 100644 --- a/freeipa.spec.in +++ b/freeipa.spec.in @@ -126,6 +126,7 @@ Requires: keyutils Requires: zip Requires: policycoreutils >= %{POLICYCOREUTILSVER} Requires: tar +Requires(pre): certmonger >= 0.65 # We have a soft-requires on bind. It is an optional part of # IPA but if it is configured we need a way to require versions @@ -213,7 +214,7 @@ Requires: wget Requires: libcurl >= 7.21.7-2 Requires: xmlrpc-c >= 1.27.4 Requires: sssd >= 1.8.0 -Requires: certmonger >= 0.60 +Requires: certmonger >= 0.65 Requires: nss-tools Requires: bind-utils Requires: oddjob-mkhomedir @@ -429,6 +430,7 @@ rm -rf %{buildroot} /bin/systemctl --system daemon-reload 2>&1 || : # END if [ $1 -gt 1 ] ; then + /bin/systemctl condrestart certmonger.service 2>&1 || : /usr/sbin/ipa-upgradeconfig --quiet >/dev/null || : fi @@ -752,6 +754,10 @@ fi %ghost %attr(0644,root,apache) %config(noreplace) %{_sysconfdir}/ipa/ca.crt %changelog +* Thu Jan 24 2013 Rob Crittenden <rcritten@redhat.com> - 3.0.99-10 +- Add certmonger condrestart to server post scriptlet +- Make certmonger a (pre) Requires on the server subpackage + * Fri Dec 7 2012 Endi S. Dewata <edewata@redhat.com> - 3.0.99-9 - Bump minimum version of pki-ca to 10.0.0-0.54.b3 |