diff options
author | Rob Crittenden <rcritten@redhat.com> | 2013-04-23 17:05:59 -0400 |
---|---|---|
committer | Rob Crittenden <rcritten@redhat.com> | 2013-05-03 16:05:49 -0400 |
commit | 6e2c3a45a1da4b2b39037bf7ed3a0d3fcd42b008 (patch) | |
tree | 4ad669897aba32991b93dbdd0a3e277f09d7f88f /ipaserver | |
parent | 252de46ebfde14db30879e94f185096fdaa1faa3 (diff) | |
download | freeipa.git-6e2c3a45a1da4b2b39037bf7ed3a0d3fcd42b008.tar.gz freeipa.git-6e2c3a45a1da4b2b39037bf7ed3a0d3fcd42b008.tar.xz freeipa.git-6e2c3a45a1da4b2b39037bf7ed3a0d3fcd42b008.zip |
Handle a 501 in cert-find from dogtag as a "not supported"
Upgrading from d9 -> d10 does not set up the RESTful interface
in dogtag, they just never coded it. Rather than trying to backport
things they have decided to not support upgrades.
We need to catch this and report a more reasonable error. They are
returning a 501 (HTTP method unimplemented) in this case.
https://fedorahosted.org/freeipa/ticket/3549
Diffstat (limited to 'ipaserver')
-rw-r--r-- | ipaserver/plugins/dogtag.py | 4 |
1 files changed, 4 insertions, 0 deletions
diff --git a/ipaserver/plugins/dogtag.py b/ipaserver/plugins/dogtag.py index 054a29b4..e5a8d3b1 100644 --- a/ipaserver/plugins/dogtag.py +++ b/ipaserver/plugins/dogtag.py @@ -1828,6 +1828,10 @@ class ra(rabase.rabase): try: response = opener.open(req) except urllib2.HTTPError, e: + self.debug('HTTP Response code: %d' % e.getcode()) + if e.getcode() == 501: + self.raise_certificate_operation_error('find', + detail=_('find not supported on CAs upgraded from 9 to 10')) self.raise_certificate_operation_error('find', detail=e.msg) except urllib2.URLError, e: |