[Freeipa-devel] [freeipa PR#526][edited] server install: properly handle PKINIT-related options

[HonzaCholasta]

   URL: https://github.com/freeipa/freeipa/pull/526
Author: HonzaCholasta
 Title: #526: server install: properly handle PKINIT-related options
Action: edited

 Changed field: body
Original value:
"""
Do not ignore --no-pkinit. If --http-cert-file or --dirsrv-cert-file is
specified, require that either --pkinit-cert-file or --no-pkinit is
specified as well.

This prevents the PKINIT cert from being requested via certmonger in
CA-less install.

https://pagure.io/freeipa/issue/5678
"""