diff options
| author | Fraser Tweedale <ftweedal@redhat.com> | 2016-06-27 15:49:30 +1000 |
|---|---|---|
| committer | Martin Basti <mbasti@redhat.com> | 2016-06-28 19:15:35 +0200 |
| commit | 45daffa22fcc6c481a8302f1947a5e0ded0b3eb8 (patch) | |
| tree | 4f2358c77d91ee0369c094523f235421d90a1cee /freeipa.spec.in | |
| parent | 5693d195501611c6abe9dbdf1370b898ffa6b3c7 (diff) | |
| download | freeipa-45daffa22fcc6c481a8302f1947a5e0ded0b3eb8.tar.gz freeipa-45daffa22fcc6c481a8302f1947a5e0ded0b3eb8.tar.xz freeipa-45daffa22fcc6c481a8302f1947a5e0ded0b3eb8.zip | |
Set default OCSP URI on install and upgrade
Dogtag has been updated to support a default OCSP URI when the
profile includes AuthInfoAccess with URI method but does not specify
the URI (instead of constructing one based on Dogtag's hostname and
port).
Add the pkispawn config to ensure that the OCSP URI is set before
issuing CA and system certificates, and add the config to existing
CA instances on upgrade.
Fixes: https://fedorahosted.org/freeipa/ticket/5956
Reviewed-By: Martin Basti <mbasti@redhat.com>
Diffstat (limited to 'freeipa.spec.in')
| -rw-r--r-- | freeipa.spec.in | 6 |
1 files changed, 3 insertions, 3 deletions
diff --git a/freeipa.spec.in b/freeipa.spec.in index c86fc3157..a4d3c067c 100644 --- a/freeipa.spec.in +++ b/freeipa.spec.in @@ -94,7 +94,7 @@ BuildRequires: libunistring-devel BuildRequires: python-lesscpy BuildRequires: python-yubico >= 1.2.3 BuildRequires: openssl-devel -BuildRequires: pki-base >= 10.3.3 +BuildRequires: pki-base >= 10.3.4 BuildRequires: python-pytest-multihost >= 0.5 BuildRequires: python-pytest-sourceorder BuildRequires: python-kdcproxy >= 0.3 @@ -155,8 +155,8 @@ Requires(post): systemd-units Requires: selinux-policy >= %{selinux_policy_version} Requires(post): selinux-policy-base >= %{selinux_policy_version} Requires: slapi-nis >= 0.56.0 -Requires: pki-ca >= 10.3.3 -Requires: pki-kra >= 10.3.3 +Requires: pki-ca >= 10.3.4 +Requires: pki-kra >= 10.3.4 Requires(preun): python systemd-units Requires(postun): python systemd-units Requires: zip |