We were still using the caRAserverCert profile when installing IPA and
replicas resulting in 6 month server certs. Use the IPA profile instead
to get 2 year certs.
Pushed as a one-liner to master and ipa-2-1
rob
>From a71e38ea6ed1166bd637770a1c5f00867cb520be Mon Sep 17 00:00:00 2001
From: Rob Crittenden <rcrit...@redhat.com>
Date: Wed, 31 Aug 2011 13:22:33 -0400
Subject: [PATCH] Use the IPA server cert profile in the installer.
We were still using the caRAserverCert profile during installation.
https://fedorahosted.org/freeipa/ticket/1744
---
ipaserver/install/certs.py | 2 +-
1 files changed, 1 insertions(+), 1 deletions(-)
diff --git a/ipaserver/install/certs.py b/ipaserver/install/certs.py
index d3df168..ead9c81 100644
--- a/ipaserver/install/certs.py
+++ b/ipaserver/install/certs.py
@@ -622,7 +622,7 @@ class CertDB(object):
# We just want the CSR bits, make sure there is nothing else
csr = pkcs10.strip_header(csr)
- params = {'profileId': 'caRAserverCert',
+ params = {'profileId': 'caIPAserviceCert',
'cert_request_type': 'pkcs10',
'requestor_name': 'IPA Installer',
'cert_request': csr,
--
1.7.6
_______________________________________________
Freeipa-devel mailing list
Freeipa-devel@redhat.com
https://www.redhat.com/mailman/listinfo/freeipa-devel
