[Freeipa-devel] [freeipa PR#531][comment] httpinstance: disable system trust module in /etc/httpd/alias

[HonzaCholasta]

  URL: https://github.com/freeipa/freeipa/pull/531
Title: #531: httpinstance: disable system trust module in /etc/httpd/alias

HonzaCholasta commented:
"""
The conflict between master and replica exists because on the master, client install is executed last, but on (domain level 1+) replica it is executed first, so on the master `/etc/httpd/alias` is populated first and `/etc/pki/ca-trust/source/ipa.p11-kit` is created later, but on (domain level 1+) replica it is done the other way around.
"""

See the full comment at https://github.com/freeipa/freeipa/pull/531#issuecomment-284626499