Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Set the certmonger subject with a string, not an object #5084

Closed
wants to merge 2 commits into from

Conversation

rcritten
Copy link
Contributor

@rcritten rcritten commented Sep 8, 2020

ipa-server-certinstall goes through a slightly different code path
if the replacement certificate is issued by IPA. This was setting
the subject using cert.subject which is a Name object and not the
string representation of that object. This was failing in the
dbus call to certmonger.

https://pagure.io/freeipa/issue/8204

Signed-off-by: Rob Crittenden rcritten@redhat.com

ipa-server-certinstall takes a slightly different code path if
the replacement certificate is IPA-issued so exercise that path.

This replaces the Apache cert with itself which is a bit of a no-op
but it still goes through the motions.

https://pagure.io/freeipa/issue/8204

Signed-off-by: Rob Crittenden <rcritten@redhat.com>
ipa-server-certinstall goes through a slightly different code path
if the replacement certificate is issued by IPA. This was setting
the subject using cert.subject which is a Name object and not the
string representation of that object. This was failing in the
dbus call to certmonger.

https://pagure.io/freeipa/issue/8204

Signed-off-by: Rob Crittenden <rcritten@redhat.com>
@rcritten rcritten added the ipa-4-8 Mark for backport to ipa 4.8 label Sep 8, 2020
@frasertweedale frasertweedale added ack Pull Request approved, can be merged and removed ack Pull Request approved, can be merged labels Sep 9, 2020
@frasertweedale
Copy link
Contributor

ACK from me, when temp commit removed and CI green.

PRCI temp_commit job (succeeded): http://freeipa-org-pr-ci.s3-website.eu-central-1.amazonaws.com/jobs/f6503fc0-f225-11ea-8d4d-fa163e19313f

@rcritten
Copy link
Contributor Author

rcritten commented Sep 9, 2020

Thanks. Temp commit removed.

@frasertweedale frasertweedale added the ack Pull Request approved, can be merged label Sep 9, 2020
@flo-renaud flo-renaud added the pushed Pull Request has already been pushed label Sep 10, 2020
@flo-renaud
Copy link
Contributor

master:

  • 040d48f ipatests: test ipa_server_certinstall with an IPA-issued cert
  • f249c51 Set the certmonger subject with a string, not an object

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
ack Pull Request approved, can be merged ipa-4-8 Mark for backport to ipa 4.8 pushed Pull Request has already been pushed
Projects
None yet
3 participants