summaryrefslogtreecommitdiffstats
diff options
context:
space:
mode:
authorStanislav Laznicka <slaznick@redhat.com>2017-03-13 14:25:36 +0100
committerMartin Basti <mbasti@redhat.com>2017-03-14 15:02:42 +0100
commit992e6ecd1ff33f4f872e8f174bd426507c55f5c4 (patch)
treefbfe4a6d0741ce6e32ceb3cc74e9da60261bb385
parent72de679eb445c975ec70cd265d37d4927823ce5b (diff)
downloadfreeipa-992e6ecd1ff33f4f872e8f174bd426507c55f5c4.tar.gz
freeipa-992e6ecd1ff33f4f872e8f174bd426507c55f5c4.tar.xz
freeipa-992e6ecd1ff33f4f872e8f174bd426507c55f5c4.zip
Fix ipa-replica-prepare server-cert creation
Fixes an issue introduced in 0a54fac0, we need to specify the current master's hostname so that we know to which CA we need to connect to create the other's server Server-Cert. https://pagure.io/freeipa/issue/6755 Reviewed-By: Martin Basti <mbasti@redhat.com>
-rw-r--r--ipaserver/install/ipa_replica_prepare.py3
1 files changed, 2 insertions, 1 deletions
diff --git a/ipaserver/install/ipa_replica_prepare.py b/ipaserver/install/ipa_replica_prepare.py
index da13e7407..f9f275884 100644
--- a/ipaserver/install/ipa_replica_prepare.py
+++ b/ipaserver/install/ipa_replica_prepare.py
@@ -603,7 +603,8 @@ class ReplicaPrepare(admintool.AdminTool):
try:
db = certs.CertDB(
- api.env.realm, nssdir=self.dir, subject_base=subject_base)
+ api.env.realm, nssdir=self.dir, subject_base=subject_base,
+ host_name=api.env.host)
db.create_passwd_file()
db.create_from_cacert()
db.create_server_cert(nickname, hostname)