diff options
| author | Fraser Tweedale <ftweedal@redhat.com> | 2016-06-14 01:22:41 +1000 |
|---|---|---|
| committer | Jan Cholasta <jcholast@redhat.com> | 2016-06-15 07:13:38 +0200 |
| commit | f0915e61986f545ad9b282fa90a4b1d0538829c5 (patch) | |
| tree | 70b94389a65bc10630f2a10c755179495cac6ca3 /ipaserver/install | |
| parent | 08e0aa23b0d2c7226472670b4d29d3cc5c5242d6 (diff) | |
| download | freeipa-f0915e61986f545ad9b282fa90a4b1d0538829c5.tar.gz freeipa-f0915e61986f545ad9b282fa90a4b1d0538829c5.tar.xz freeipa-f0915e61986f545ad9b282fa90a4b1d0538829c5.zip | |
replica-install: configure key retriever before starting Dogtag
After installing a replica, Dogtag's Lightweight CA key retrieval
fails until Dogtag is restarted, because the already-running
instance doesn't pick up the changes to CS.cfg. Configure the key
retriever before the instance is started.
Part of: https://fedorahosted.org/freeipa/ticket/4559
Reviewed-By: Jan Cholasta <jcholast@redhat.com>
Reviewed-By: Martin Babinsky <mbabinsk@redhat.com>
Diffstat (limited to 'ipaserver/install')
| -rw-r--r-- | ipaserver/install/cainstance.py | 4 |
1 files changed, 2 insertions, 2 deletions
diff --git a/ipaserver/install/cainstance.py b/ipaserver/install/cainstance.py index c7f3116f6..8dfb71528 100644 --- a/ipaserver/install/cainstance.py +++ b/ipaserver/install/cainstance.py @@ -1344,6 +1344,8 @@ class CAInstance(DogtagInstance): self.enable_pkix) self.step("set up client auth to db", self.__client_auth_to_db) self.step("destroying installation admin user", self.teardown_admin) + self.step("Configure lightweight CA key retrieval", + self.setup_lightweight_ca_key_retrieval) self.step("starting instance", self.start_instance) self.step("importing CA chain to RA certificate database", @@ -1362,8 +1364,6 @@ class CAInstance(DogtagInstance): self.step("updating IPA configuration", update_ipa_conf) self.step("Restart HTTP server to pick up changes", self.__restart_http_instance) - self.step("Configure lightweight CA key retrieval", - self.setup_lightweight_ca_key_retrieval) self.step("enabling CA instance", self.__enable_instance) |