diff options
| author | Rob Crittenden <rcritten@redhat.com> | 2009-11-18 14:28:33 -0500 |
|---|---|---|
| committer | Rob Crittenden <rcritten@redhat.com> | 2009-11-18 14:28:33 -0500 |
| commit | 884301ef33509df5d6934983e0ad60ca02214d04 (patch) | |
| tree | 2d75fac7ed4d5e9d0236edfcdefe30e1c2c575be /ipaserver/install/cainstance.py | |
| parent | 4262358111fb97820915769bfdb201ad39f24d7c (diff) | |
| download | freeipa.git-884301ef33509df5d6934983e0ad60ca02214d04.tar.gz freeipa.git-884301ef33509df5d6934983e0ad60ca02214d04.tar.xz freeipa.git-884301ef33509df5d6934983e0ad60ca02214d04.zip | |
Cache installer questions for the 2-step process of an externally-signed CA
Installing a CA that is signed by another CA is a 2-step process. The first
step is to generate a CSR for the CA and the second step is to install
the certificate issued by the external CA. To avoid asking questions
over and over (and potentially getting different answers) the answers
are cached.
Diffstat (limited to 'ipaserver/install/cainstance.py')
| -rw-r--r-- | ipaserver/install/cainstance.py | 3 |
1 files changed, 2 insertions, 1 deletions
diff --git a/ipaserver/install/cainstance.py b/ipaserver/install/cainstance.py index d07e5829..7a50d353 100644 --- a/ipaserver/install/cainstance.py +++ b/ipaserver/install/cainstance.py @@ -604,7 +604,8 @@ class CAInstance(service.Service): ipautil.run(args) if self.external == 1: - print "The next step is to get %s signed by your CA and re-run ipa-server-install" % self.csr_file + print "The next step is to get %s signed by your CA and re-run ipa-server-install as:" % self.csr_file + print "ipa-server-install --ca --external_cert_file=/path/to/signed_certificate --external_ca_file=/path/to/external_ca_certificate" sys.exit(0) # pkisilent doesn't return 1 on error so look at the output of |