[Freeipa-devel] [PATCH] 0079 Set default OCSP URI on install and upgrade

[Martin Basti]

On 28.06.2016 12:31, Martin Basti wrote:
>
>
> On 27.06.2016 14:22, Martin Basti wrote:
>>
>>
>> On 27.06.2016 14:10, Fraser Tweedale wrote:
>>> On Mon, Jun 27, 2016 at 02:02:15PM +0200, Martin Basti wrote:
>>>>
>>>> On 27.06.2016 13:58, Fraser Tweedale wrote:
>>>>> Hi all,
>>>>>
>>>>> The attached patch fixes the OCSP URI in the Dogtag CA and system
>>>>> certificates (https://fedorahosted.org/freeipa/ticket/5956).  It
>>>>> depends on a patch[1] for Dogtag which is expected to be released in
>>>>> v10.3.4.  In the meantime, you can test with the build of v10.3.4
>>>>> from my COPR[2].
>>>>>
>>>>> [1] https://www.redhat.com/archives/pki-devel/2016-June/msg00138.html
>>>>> [2] https://copr.fedorainfracloud.org/coprs/ftweedal/freeipa/
>>>>>
>>>>> Cheers,
>>>>> Fraser
>>>>>
>>>>>
>>>> Hello,
>>>>
>>>> this upgrade is executed always, is it on purpose?
>>>> If not please use sysupgrade and run upgrade only once
>>>>
>>> It is intentional; the directive only gets added if it is missing.
>>> I do not see any benefit in gating it with the sysupgrade mechanism.
>>>
>>> Thanks,
>>> Fraser
>> Ok
>>
> ************* Module ipaserver.install.cainstance
> ipaserver/install/cainstance.py:465: [E0602(undefined-variable), 
> CAInstance.__spawn_instance] Undefined variable 'IPA_CA_RECORD')
>
> you need ipalib.constants.IPA_CA_RECORD
>
> Martin^2
>
Ahh nevermind, this is a clash of different patches, works on master :)