[Freeipa-devel] [freeipa PR#754][opened] ipa-server-install with external CA: fix pkinit cert issuance

[flo-renaud]

   URL: https://github.com/freeipa/freeipa/pull/754
Author: flo-renaud
 Title: #754: ipa-server-install with external CA: fix pkinit cert issuance
Action: opened

PR body:
"""
ipa-server-install with external CA fails to issue pkinit certs.
This happens because the installer calls
krb = krbinstance.KrbInstance(fstore)
then
krb.enable_ssl()
and in this code path self.config_pkinit is set to None, leading to a wrong
code path.

The fix initializes the required fields of the krbinstance before calling
krb.enable_ssl.

https://pagure.io/freeipa/issue/6921
"""

To pull the PR as Git branch:
git remote add ghfreeipa https://github.com/freeipa/freeipa
git fetch ghfreeipa pull/754/head:pr754
git checkout pr754
-------------- next part --------------
A non-text attachment was scrubbed...
Name: freeipa-pr-754.patch
Type: text/x-diff
Size: 2241 bytes
Desc: not available
URL: <http://listman.redhat.com/archives/freeipa-devel/attachments/20170503/989a1127/attachment.bin>