From 4c761108e871ae029b5e1a16aaf35f9e78a3c02e Mon Sep 17 00:00:00 2001 From: Jan Cholasta Date: Tue, 23 Jul 2013 10:19:42 +0000 Subject: Fix certificate renewal scripts to work with separate CA DS instance. https://fedorahosted.org/freeipa/ticket/3805 Reviewed-By: Petr Viktorin --- install/restart_scripts/renew_ca_cert | 4 +--- install/restart_scripts/renew_ra_cert | 2 +- 2 files changed, 2 insertions(+), 4 deletions(-) (limited to 'install/restart_scripts') diff --git a/install/restart_scripts/renew_ca_cert b/install/restart_scripts/renew_ca_cert index 2ae869db9..b05369cbe 100644 --- a/install/restart_scripts/renew_ca_cert +++ b/install/restart_scripts/renew_ca_cert @@ -90,9 +90,7 @@ def main(): # Done withing stopped_service context, CA restarted here update_cert_config(nickname, cert) - - if nickname == 'subsystemCert cert-pki-ca': - update_people_entry('pkidbuser', cert) + update_people_entry(cert) if nickname == 'auditSigningCert cert-pki-ca': # Fix trust on the audit cert diff --git a/install/restart_scripts/renew_ra_cert b/install/restart_scripts/renew_ra_cert index 0d731144b..7628e9b9e 100644 --- a/install/restart_scripts/renew_ra_cert +++ b/install/restart_scripts/renew_ra_cert @@ -43,7 +43,7 @@ def main(): dercert = db.get_cert_from_db('ipaCert', pem=False) # Load it into dogtag - update_people_entry('ipara', dercert) + update_people_entry(dercert) attempts = 0 updated = False -- cgit