[Freeipa-devel] [PATCH] 0079 Set default OCSP URI on install and upgrade

[Martin Basti]

On 27.06.2016 14:10, Fraser Tweedale wrote:
> On Mon, Jun 27, 2016 at 02:02:15PM +0200, Martin Basti wrote:
>>
>> On 27.06.2016 13:58, Fraser Tweedale wrote:
>>> Hi all,
>>>
>>> The attached patch fixes the OCSP URI in the Dogtag CA and system
>>> certificates (https://fedorahosted.org/freeipa/ticket/5956).  It
>>> depends on a patch[1] for Dogtag which is expected to be released in
>>> v10.3.4.  In the meantime, you can test with the build of v10.3.4
>>> from my COPR[2].
>>>
>>> [1] https://www.redhat.com/archives/pki-devel/2016-June/msg00138.html
>>> [2] https://copr.fedorainfracloud.org/coprs/ftweedal/freeipa/
>>>
>>> Cheers,
>>> Fraser
>>>
>>>
>> Hello,
>>
>> this upgrade is executed always, is it on purpose?
>> If not please use sysupgrade and run upgrade only once
>>
> It is intentional; the directive only gets added if it is missing.
> I do not see any benefit in gating it with the sysupgrade mechanism.
>
> Thanks,
> Fraser
Ok