[Freeipa-devel] [freeipa PR#69] Fix ipa-replica-install with RHEL 6.8 master (opened)

[flo-renaud]

flo-renaud's pull request #69: "Fix ipa-replica-install with RHEL 6.8 master" was opened

PR body:
"""
ipa-replica-prepare creates a gpg file containing realm_info/cacert.p12 with
the certificates.
When run on a RHEL 6.8 instance, cacert.p12 contains twice the same cert
(for caSigningCert cert-pki-ca), once with the nickname and once without.

ipa-replica-install passes this file to pkispawn and makes pkispawn fail.
The fix exports the pkcs12 file into a temp nsddb then re-creates a pkcs12
file from the nssdb (this process removes the duplicate cert).

https://fedorahosted.org/freeipa/ticket/6310
"""

See the full pull-request at https://github.com/freeipa/freeipa/pull/69
... or pull the PR as Git branch:
git remote add ghfreeipa https://github.com/freeipa/freeipa
git fetch ghfreeipa pull/69/head:pr69
git checkout pr69
-------------- next part --------------
A non-text attachment was scrubbed...
Name: freeipa-pr-69.patch
Type: text/x-diff
Size: 2410 bytes
Desc: not available
URL: <http://listman.redhat.com/archives/freeipa-devel/attachments/20160908/ff3a2b2d/attachment.bin>