From a9ee2adec38b23d7d957d503d79e20b2174cc512 Mon Sep 17 00:00:00 2001 From: "Endi S. Dewata" Date: Tue, 8 Aug 2023 12:25:06 -0500 Subject: [PATCH] Remove non-existent default pki_cert_chain_path In the future pkispawn will validate all path params so the default value for pki_cert_chain_path needs to be removed since it points to a non-existent file. When the param is actually used (e.g. for installing with an external CA) CAInstance.__spawn_instance() will configure the param to point to the actual cert chain. Signed-off-by: Endi Sukma Dewata Reviewed-By: Alexander Bokovoy --- install/share/ipaca_default.ini | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/install/share/ipaca_default.ini b/install/share/ipaca_default.ini index 058796e59..497f7c6ff 100644 --- a/install/share/ipaca_default.ini +++ b/install/share/ipaca_default.ini @@ -94,7 +94,7 @@ pki_group=pkiuser pki_user=pkiuser pki_existing=False -pki_cert_chain_path=%(pki_instance_configuration_path)s/external_ca_chain.cert +pki_cert_chain_path= pki_cert_chain_nickname=caSigningCert External CA pki_pkcs12_path=