diff options
| author | Jan Cholasta <jcholast@redhat.com> | 2016-03-10 13:16:41 +0100 |
|---|---|---|
| committer | Martin Basti <mbasti@redhat.com> | 2016-03-16 09:35:44 +0100 |
| commit | 54a59475f301267c7263a649df1b992e9b3e08aa (patch) | |
| tree | c931e984b7e3317227d87ecbd0867d949939700b /ipapython/kernel_keyring.py | |
| parent | fb3a5d5a9cad4355c3d7db5a789d1f6342cccaa0 (diff) | |
certdb: never use the -r option of certutil
The -r option makes certutil output certificates in DER. If there are
multiple certificates sharing the same nickname, certutil will output
them concatenated into a single blob. The blob is not a valid DER
anymore and causes failures further in the code.
Use the -a option instead to output the certificates in PEM and convert
them to DER on demand.
https://fedorahosted.org/freeipa/ticket/5117
https://fedorahosted.org/freeipa/ticket/5720
Reviewed-By: David Kupka <dkupka@redhat.com>
Diffstat (limited to 'ipapython/kernel_keyring.py')
0 files changed, 0 insertions, 0 deletions