diff options
| author | Fraser Tweedale <ftweedal@redhat.com> | 2016-12-14 13:23:11 +1000 |
|---|---|---|
| committer | Jan Cholasta <jcholast@redhat.com> | 2017-01-11 15:26:20 +0100 |
| commit | f54df62abae4a15064bf297634558eb9be83ce33 (patch) | |
| tree | 4af2b9fed2087e5c9662f3395720c99edf75ba99 /install | |
| parent | 46bf0e89ae054b34adc66d08f205a5155e6f3fd6 (diff) | |
| download | freeipa-f54df62abae4a15064bf297634558eb9be83ce33.tar.gz freeipa-f54df62abae4a15064bf297634558eb9be83ce33.tar.xz freeipa-f54df62abae4a15064bf297634558eb9be83ce33.zip | |
dsinstance: extract function for writing certmap.conf
For full customisability of the IPA CA subject DN, we will need the
ability to update DS `certmap.conf' when upgrading a deployment from
CA-less to CA-ful.
Extract the existing behaviour, which is private to DsInstance, to
the `write_certmap_conf' top-level function.
Also update `certmap.conf.template' for substition of the whole CA
subject DN (not just the subject base).
Part of: https://fedorahosted.org/freeipa/ticket/2614
Reviewed-By: Jan Cholasta <jcholast@redhat.com>
Diffstat (limited to 'install')
| -rw-r--r-- | install/share/certmap.conf.template | 2 |
1 files changed, 1 insertions, 1 deletions
diff --git a/install/share/certmap.conf.template b/install/share/certmap.conf.template index e76bf3c65..d59b095fa 100644 --- a/install/share/certmap.conf.template +++ b/install/share/certmap.conf.template @@ -41,6 +41,6 @@ certmap default default #default:InitFn <Init function's name> default:DNComps default:FilterComps uid -certmap ipaca CN=Certificate Authority,$SUBJECT_BASE +certmap ipaca $ISSUER_DN ipaca:CmapLdapAttr seeAlso ipaca:verifycert on |