[Freeipa-devel] [freeipa PR#50] Add cert checks in ipa-server-certinstall (comment)

[jcholast]

jcholast commented on a pull request

"""
Functional ACK, but please don't use newlines in exception messages. If you want the original error on a separate line, you can use the logger to log it, but I think it would be preferable to use this format:

```
Peer's certificate issuer is not trusted ((SEC_ERROR_UNKNOWN_ISSUER) Peer's Certificate issuer is not recognized). Please run ipa-cacert-manage install and ipa-certupdate to install the CA certificate.
```
"""

See the full comment at https://github.com/freeipa/freeipa/pull/50#issuecomment-247299454