[Freeipa-devel] [freeipa PR#355][comment] Set up DS TLS on replica in CA-less topology

[mbasti-rh]

  URL: https://github.com/freeipa/freeipa/pull/355
Title: #355: Set up DS TLS on replica in CA-less topology

mbasti-rh commented:
"""
@jcholast anyway I still see ways how to improve UX
- print big fat message to user at the end of ipa-ca-install to run ipa-certupdate everywhere when needed (instead of finding solution in the darkest corners in docs)
- automatically run it at least on the current replica

Still worth ticket IMO

@pvoborni +1
"""

See the full comment at https://github.com/freeipa/freeipa/pull/355#issuecomment-268785240