diff options
| author | Jan Cholasta <jcholast@redhat.com> | 2015-09-16 09:05:20 +0200 |
|---|---|---|
| committer | Jan Cholasta <jcholast@redhat.com> | 2015-10-08 13:42:58 +0200 |
| commit | b035a2a11442c190dc68d9e653b98ef396332c8e (patch) | |
| tree | 54c10b7959d98bd1955e1e70d0905eb0d6b9be76 /install/restart_scripts | |
| parent | 110e85cc74051b02556ca2c43176c9ded40e75aa (diff) | |
| download | freeipa-b035a2a11442c190dc68d9e653b98ef396332c8e.tar.gz freeipa-b035a2a11442c190dc68d9e653b98ef396332c8e.tar.xz freeipa-b035a2a11442c190dc68d9e653b98ef396332c8e.zip | |
install: always export KRA agent PEM file
Export the file even when KRA is not installed locally so that vault commands
work on all IPA replicas.
https://fedorahosted.org/freeipa/ticket/5302
Reviewed-By: Martin Basti <mbasti@redhat.com>
Diffstat (limited to 'install/restart_scripts')
| -rw-r--r-- | install/restart_scripts/renew_ra_cert | 3 |
1 files changed, 1 insertions, 2 deletions
diff --git a/install/restart_scripts/renew_ra_cert b/install/restart_scripts/renew_ra_cert index 57cfd92ad..cf770a94c 100644 --- a/install/restart_scripts/renew_ra_cert +++ b/install/restart_scripts/renew_ra_cert @@ -61,8 +61,7 @@ def _main(): # Load it into dogtag cainstance.update_people_entry(dercert) - kra = krainstance.KRAInstance(api.env.realm) - if kra.is_installed(): + if api.Command.kra_is_enabled()['result']: krainstance.export_kra_agent_pem() finally: shutil.rmtree(tmpdir) |