diff options
| author | Jan Cholasta <jcholast@redhat.com> | 2017-01-30 13:25:04 +0100 |
|---|---|---|
| committer | Jan Cholasta <jcholast@redhat.com> | 2017-01-31 07:18:39 +0100 |
| commit | 87400cdec1054971f50f90a0c63f18ab045f3833 (patch) | |
| tree | 9f6bc26411c79691e32c95f35c6bd8757ffdf255 /install/tools | |
| parent | 86f4a93fb3aeb6742acab5abaa1c17b525ea4223 (diff) | |
| download | freeipa-87400cdec1054971f50f90a0c63f18ab045f3833.tar.gz freeipa-87400cdec1054971f50f90a0c63f18ab045f3833.tar.xz freeipa-87400cdec1054971f50f90a0c63f18ab045f3833.zip | |
ipa-ca-install: do not fail without --subject-base and --ca-subject
When --subject-base and --ca-subject are not specified in ipa-ca-install,
default values are used. DN objects are used as the default values in
ipa-ca-install, but the CA installer expects the values to be strings. This
causes ipa-ca-install to fail unless both --subject-base and --ca-subject
are specified.
Convert the DN objects to strings to fix the issue.
https://fedorahosted.org/freeipa/ticket/2614
Reviewed-By: Fraser Tweedale <ftweedal@redhat.com>
Diffstat (limited to 'install/tools')
| -rwxr-xr-x | install/tools/ipa-ca-install | 7 |
1 files changed, 4 insertions, 3 deletions
diff --git a/install/tools/ipa-ca-install b/install/tools/ipa-ca-install index 0952d0088..5e425f827 100755 --- a/install/tools/ipa-ca-install +++ b/install/tools/ipa-ca-install @@ -216,10 +216,11 @@ def install_master(safe_options, options): options.host_name = api.env.host if not options.subject_base: - options.subject_base = installutils.default_subject_base(api.env.realm) + options.subject_base = str( + installutils.default_subject_base(api.env.realm)) if not options.ca_subject: - options.ca_subject = installutils.default_ca_subject_dn( - options.subject_base) + options.ca_subject = str( + installutils.default_ca_subject_dn(options.subject_base)) try: ca.subject_validator(ca.VALID_SUBJECT_BASE_ATTRS, options.subject_base) |