Florence Blanc-Renaud d932642475 ipa-ca-install: append CA cert chain into /etc/ipa/ca.crt ...

ipa-ca-install currently overwrites /etc/ipa/ca.crt with the CA chain
retrieved from Dogtag. It should instead append the new certs, otherwise
the CA that signed dirsrv and httpd certificates is removed and ipa tools
fail.
A consequence is that ipa-kra-install fails.
This is a regression introduced by 5ab85b36.

https://pagure.io/freeipa/issue/6925

Reviewed-By: Stanislav Laznicka <slaznick@redhat.com>

2017-05-22 13:28:40 +02:00

..

plugins

install: trust IPA CA for PKINIT

2017-05-19 12:31:24 +02:00

server

replica install: respect --pkinit-cert-file

2017-05-19 12:31:24 +02:00

__init__.py

Remove __all__ specifications in ipaclient and ipaserver.install

2013-09-06 15:42:33 +02:00

adtrust.py

Make a doctext more clear

2017-05-19 16:49:04 +02:00

adtrustinstance.py

adtrust: make sure that runtime hostname result is consistent with the configuration

2017-03-30 13:17:21 +02:00

bindinstance.py

py3: create DNS zonefile: use textual mode

2017-02-10 14:03:04 +01:00

ca.py

certdb: add named trust flag constants

2017-05-19 12:31:24 +02:00

cainstance.py

ipa-ca-install: append CA cert chain into /etc/ipa/ca.crt

2017-05-22 13:28:40 +02:00

certs.py

certs: do not export CA certs in install_pem_from_p12

2017-05-19 12:31:24 +02:00

conncheck.py

install: introduce installer class hierarchy

2016-11-11 12:17:25 +01:00

custodiainstance.py

Make sure remote hosts have our keys

2017-05-03 16:37:21 +02:00

dns.py

install: re-introduce option groups

2017-03-13 10:12:40 +01:00

dnskeysyncinstance.py

Fix PKCS11 helper

2017-04-12 09:54:10 +02:00

dogtag.py

install: introduce installer class hierarchy

2016-11-11 12:17:25 +01:00

dogtaginstance.py

ipa-server-install: fix uninstall

2017-05-16 11:44:08 +00:00

dsinstance.py

install: trust IPA CA for PKINIT

2017-05-19 12:31:24 +02:00

httpinstance.py

certdb, certs: make trust flags argument mandatory

2017-05-19 12:31:24 +02:00

installutils.py

server install: fix KDC certificate validation in CA-less

2017-05-19 12:31:24 +02:00

ipa_backup.py

client install: fix client PKINIT configuration

2017-05-19 12:31:24 +02:00

ipa_cacert_manage.py

cacert manage: support PKINIT

2017-05-19 12:31:24 +02:00

ipa_kra_install.py

ca, kra install: validate DM password

2017-05-17 12:50:42 +02:00

ipa_ldap_updater.py

Set explicit confdir option for global contexts

2016-12-02 09:14:35 +01:00

ipa_otptoken_import.py

Finish port to PyCA cryptography

2017-03-01 12:51:50 +01:00

ipa_replica_install.py

install: re-introduce option groups

2017-03-13 10:12:40 +01:00

ipa_replica_prepare.py

Fix RA cert import during DL0 replication

2017-04-19 12:36:01 +00:00

ipa_restore.py

restore: restart/reload gssproxy after restore

2017-04-28 14:56:02 +02:00

ipa_server_certinstall.py

server certinstall: support PKINIT

2017-05-19 12:31:24 +02:00

ipa_server_install.py

install: re-introduce option groups

2017-03-13 10:12:40 +01:00

ipa_server_upgrade.py

Set explicit confdir option for global contexts

2016-12-02 09:14:35 +01:00

ipa_winsync_migrate.py

Set explicit confdir option for global contexts

2016-12-02 09:14:35 +01:00

kra.py

Don't allow standalone KRA uninstalls

2017-03-13 16:27:23 +01:00

krainstance.py

ipa-kra-install: fix pkispawn setting for pki_security_domain_hostname

2017-05-18 17:01:38 +02:00

krbinstance.py

server install: fix KDC PKINIT configuration

2017-05-19 12:31:24 +02:00

ldapupdate.py

py3: ldapupdate: fix logging str(bytes) issue

2017-02-08 18:09:49 +01:00

ntpinstance.py

installer: Stop adding distro-specific NTP servers into ntp.conf

2017-01-05 10:45:30 +01:00

odsexporterinstance.py

services: replace admin_conn with api.Backend.ldap2

2016-11-22 16:17:27 +01:00

opendnssecinstance.py

Fix PKCS11 helper

2017-04-12 09:54:10 +02:00

otpdinstance.py

Enable pylint missing-final-newline check

2015-12-23 07:59:22 +01:00

replication.py

ipa-replica-manage del (dl 0): remove server from defaultServerList

2017-05-19 19:00:48 +02:00

schemaupdate.py

Remove unused variables in the code

2016-09-27 13:35:58 +02:00

service.py

installer service: fix typo in service entry

2017-05-05 18:55:41 +02:00

sysupgrade.py

ipapython: move certmonger and sysrestore to ipalib.install

2016-11-29 14:50:51 +01:00

upgradeinstance.py

installer: update time estimates

2017-03-10 15:46:34 +01:00