[Freeipa-devel] [PATCH] 35 Fix external CA install

[Rob Crittenden]

Jan Cholasta wrote:
> This patch contains several small fixes of external CA install.
>
> https://fedorahosted.org/freeipa/ticket/1523
>

This is a good start at simplifying things but needs a bit more work. 
One thing I was bending over backwards for was to handle whatever 
options were thrown at us. Here is a situation this does not handle very 
gracefully:

# ipa-server-install --external_cert_file=/home/rcrit/cadb/sub/ipa.crt 
--external_ca_file=/home/rcrit/cadb/sub/ca.crt --external-ca
The following operations may take some minutes to complete.
Please wait until the prompt is returned.

Configuring ntpd
   [1/4]: stopping ntpd
   [2/4]: writing configuration
   [3/4]: configuring ntpd to start on boot
   [4/4]: starting ntpd
done configuring ntpd.
Configuring directory server for the CA: Estimated time 30 seconds
   [1/3]: creating directory server user
   [2/3]: creating directory server instance
   [3/3]: restarting directory server
done configuring pkids.
CA is not installed yet. To install with an external CA is a two-stage 
process.
First run the installer with --external-ca.

rob