summaryrefslogtreecommitdiffstats
path: root/ipaserver/install/cainstance.py
diff options
context:
space:
mode:
Diffstat (limited to 'ipaserver/install/cainstance.py')
-rw-r--r--ipaserver/install/cainstance.py6
1 files changed, 6 insertions, 0 deletions
diff --git a/ipaserver/install/cainstance.py b/ipaserver/install/cainstance.py
index 6cb6e3c94..8f544ec1e 100644
--- a/ipaserver/install/cainstance.py
+++ b/ipaserver/install/cainstance.py
@@ -423,6 +423,8 @@ class CAInstance(DogtagInstance):
self.step("setting audit signing renewal to 2 years", self.set_audit_renewal)
self.step("restarting certificate server", self.restart_instance)
if not self.clone:
+ self.step("publishing the CA certificate",
+ self.__publish_ca_cert)
self.step("adding RA agent as a trusted user", self.__create_ca_agent)
self.step("authorizing RA to modify profiles", configure_profiles_acl)
self.step("authorizing RA to manage lightweight CAs",
@@ -744,6 +746,10 @@ class CAInstance(DogtagInstance):
conn.disconnect()
+ def __publish_ca_cert(self):
+ db = certs.CertDB(self.realm)
+ db.publish_ca_cert(paths.IPA_CA_CRT)
+
def __get_ca_chain(self):
try:
return dogtag.get_ca_certchain(ca_host=self.fqdn)