[Freeipa-devel] [freeipa PR#355][comment] Set up DS TLS on replica in CA-less topology

[mbasti-rh]

  URL: https://github.com/freeipa/freeipa/pull/355
Title: #355: Set up DS TLS on replica in CA-less topology

mbasti-rh commented:
"""
> @tomaskrizek FYI, the current documentation states that ipa-certupdate must be run after ipa-ca-install (see https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/7/html/Linux_Domain_Identity_Authentication_and_Policy_Guide/CA-less-to-CA.html).

Bad UX, please open a RFE ticket for ipa-ca-install to execute certupdate automatically when needed
"""

See the full comment at https://github.com/freeipa/freeipa/pull/355#issuecomment-268561239