From fa5675582caef6d0708c8ae392e170b44d9daf5b Mon Sep 17 00:00:00 2001 From: Fraser Tweedale Date: Thu, 27 Jun 2019 11:08:58 +1000 Subject: [PATCH] upgrade: fix spurious certmonger re-tracking The search for the HTTP Certmonger tracking request uses an incorrect parameter ('key-storage'), triggering removal and recreation of tracking requests on every upgrade. Replace 'key-storage' with the correct parameter, 'key-file'. Part of: https://pagure.io/freeipa/issue/7991 Reviewed-By: Rob Crittenden --- ipaserver/install/server/upgrade.py | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/ipaserver/install/server/upgrade.py b/ipaserver/install/server/upgrade.py index 50a6c99de..f259092a5 100644 --- a/ipaserver/install/server/upgrade.py +++ b/ipaserver/install/server/upgrade.py @@ -1012,7 +1012,7 @@ def certificate_renewal_update(ca, kra, ds, http): requests.append( { 'cert-file': paths.HTTPD_CERT_FILE, - 'key-storage': paths.HTTPD_KEY_FILE, + 'key-file': paths.HTTPD_KEY_FILE, 'ca-name': 'IPA', 'cert-postsave-command': template % 'restart_httpd', }