[Freeipa-devel] [PATCH] fix replica-install to use SSL connections early on

[Martin Nagy]

Stephen Gallagher wrote:
> -----BEGIN PGP SIGNED MESSAGE-----
> Hash: SHA1
> 
> Simo Sorce wrote:
>> This patch install the ca.crt file early on and enforce the use of SSL
>> to set up the replication agreement.
>>
>>
>> ------------------------------------------------------------------------
> 
> I don't like the use of the hard-coded CACERT variable. We're trying to
> eliminate the use of hard-coded paths. See Bugzilla #430000 for more
> details.

No worries about that. I have a list of the hard-coded paths and am 
maintaining it, watching every commit. This is just for a short time, 
I'm planning to address the bug soon.

Martin