From 36532031cfef893aa2f95d709efd807729de79f7 Mon Sep 17 00:00:00 2001 From: Felipe Volpone Date: Wed, 14 Jun 2017 18:19:41 -0300 Subject: [PATCH] Changing cert-find to go through the proxy instead of using the port 8080 The cert-find command now uses the proxy to reach Dogtag, instead of using the port 8080. In order to accomplish that, it's necessary to change the proxy configuration including the URL called. https://pagure.io/freeipa/issue/6966 Reviewed-By: Fraser Tweedale --- install/conf/ipa-pki-proxy.conf | 4 ++-- ipaserver/plugins/dogtag.py | 2 +- 2 files changed, 3 insertions(+), 3 deletions(-) diff --git a/install/conf/ipa-pki-proxy.conf b/install/conf/ipa-pki-proxy.conf index b48a3020d..106ddc4fa 100644 --- a/install/conf/ipa-pki-proxy.conf +++ b/install/conf/ipa-pki-proxy.conf @@ -1,4 +1,4 @@ -# VERSION 10 - DO NOT REMOVE THIS LINE +# VERSION 11 - DO NOT REMOVE THIS LINE ProxyRequests Off @@ -27,7 +27,7 @@ ProxyRequests Off # matches for CA REST API - + NSSOptions +StdEnvVars +ExportCertData +StrictRequire +OptRenegotiate NSSVerifyClient optional ProxyPassMatch ajp://localhost:$DOGTAG_PORT diff --git a/ipaserver/plugins/dogtag.py b/ipaserver/plugins/dogtag.py index bddaab58a..0e68de621 100644 --- a/ipaserver/plugins/dogtag.py +++ b/ipaserver/plugins/dogtag.py @@ -1903,7 +1903,7 @@ class ra(rabase.rabase, RestClient): self.debug('%s.find(): request: %s', type(self).__name__, payload) url = 'http://%s/ca/rest/certs/search?size=%d' % ( - ipautil.format_netloc(self.ca_host, 8080), + ipautil.format_netloc(self.ca_host, 80), options.get('sizelimit', 0x7fffffff)) opener = urllib.request.build_opener()