[Freeipa-devel] [freeipa PR#506][comment] added ssl verification

[tiran]

  URL: https://github.com/freeipa/freeipa/pull/506
Title: #506: added ssl verification

tiran commented:
"""
LGTM, but I want @simo5 to give the final ACK.

Since Custodia is only used during replica installation on an enrolled system, ipa-client-install has already provided the certificate. I don't see any issue in the proposed fix.

```ipaserver.secrets.client``` does not yet use Custodia's own client library. I'll keep the problem in mind once we have updated to recent Custodia version.

"""

See the full comment at https://github.com/freeipa/freeipa/pull/506#issuecomment-282272478