Christian Heimes
94937424b1
Simplify and consolidate ipaca.ini
...
Fixes: https://pagure.io/freeipa/issue/5608
Signed-off-by: Christian Heimes <cheimes@redhat.com >
Reviewed-By: Fraser Tweedale <ftweedal@redhat.com >
Reviewed-By: Alexander Bokovoy <abokovoy@redhat.com >
2019-04-10 13:43:23 +02:00
Christian Heimes
dd47cfc75a
Add pki.ini override option
...
Allow to specify a pki.ini overlay file on the command line. The override
file can be used to override pkispawn settings.
Fixes: https://pagure.io/freeipa/issue/5608
Signed-off-by: Christian Heimes <cheimes@redhat.com >
Reviewed-By: Fraser Tweedale <ftweedal@redhat.com >
Reviewed-By: Alexander Bokovoy <abokovoy@redhat.com >
2019-04-10 13:43:23 +02:00
Christian Heimes
f847d7756f
Use new pki_ipaca.ini to spawn instances
...
Note: Some configuration stanzas are deprecated and have been replaced
with new stanzas, e.g. pki_cert_chain_path instead of
pki_external_ca_cert_chain_path.
Fixes: https://pagure.io/freeipa/issue/5608
Signed-off-by: Christian Heimes <cheimes@redhat.com >
Reviewed-By: Fraser Tweedale <ftweedal@redhat.com >
Reviewed-By: Alexander Bokovoy <abokovoy@redhat.com >
2019-04-10 13:43:23 +02:00
Christian Heimes
70beccada2
Add IPA specific vars to ipaca_default.ini
...
Common settings like "pki_*_signing_key_algorithm" now use an IPA
specific template variable. The approach makes it easier to change all
signing parameters to use a different algorithm.
Fixes: https://pagure.io/freeipa/issue/5608
Signed-off-by: Christian Heimes <cheimes@redhat.com >
Reviewed-By: Fraser Tweedale <ftweedal@redhat.com >
Reviewed-By: Alexander Bokovoy <abokovoy@redhat.com >
2019-04-10 13:43:23 +02:00
Christian Heimes
0a2b02fc62
Simplify and slim down ipaca_default.ini
...
* Remove internal stuff from DEFAULT section
* Remove all non-user modifiable paths
* Remove OCSP, RA, TKS, TPS sections
* Remove deprecated options and replace them with current options
Fixes: https://pagure.io/freeipa/issue/5608
Signed-off-by: Christian Heimes <cheimes@redhat.com >
Reviewed-By: Fraser Tweedale <ftweedal@redhat.com >
Reviewed-By: Alexander Bokovoy <abokovoy@redhat.com >
2019-04-10 13:43:23 +02:00
Christian Heimes
8c4d75fd2e
Add current default.cfg from Dogtag
...
base/server/etc/default.cfg from commit
https://github.com/dogtagpki/pki/commit/b93183406c0be6ce233eb4ed4c116aa858635cdf
Fixes: https://pagure.io/freeipa/issue/5608
Signed-off-by: Christian Heimes <cheimes@redhat.com >
Reviewed-By: Fraser Tweedale <ftweedal@redhat.com >
Reviewed-By: Alexander Bokovoy <abokovoy@redhat.com >
2019-04-10 13:43:23 +02:00
Christian Heimes