summaryrefslogtreecommitdiffstats
path: root/ipalib/install/certmonger.py
diff options
context:
space:
mode:
Diffstat (limited to 'ipalib/install/certmonger.py')
-rw-r--r--ipalib/install/certmonger.py5
1 files changed, 5 insertions, 0 deletions
diff --git a/ipalib/install/certmonger.py b/ipalib/install/certmonger.py
index 951ca9ab8..812fa0455 100644
--- a/ipalib/install/certmonger.py
+++ b/ipalib/install/certmonger.py
@@ -32,6 +32,7 @@ import subprocess
import tempfile
from ipalib import api
from ipapython.ipa_log_manager import root_logger
+from ipapython.dn import DN
from ipaplatform.paths import paths
from ipaplatform import services
@@ -329,6 +330,10 @@ def request_cert(
"""
if storage == 'FILE':
certfile, keyfile = certpath
+ # This is a workaround for certmonger having different Subject
+ # representation with NSS and OpenSSL
+ # https://pagure.io/certmonger/issue/62
+ subject = str(DN(*reversed(DN(subject))))
else:
certfile = certpath
keyfile = certpath