From 2ddf2551f3a57d142c10a4be91e052f66f1e64c4 Mon Sep 17 00:00:00 2001
From: Tomas Krizek <tkrizek@redhat.com>
Date: Mon, 29 Aug 2016 13:27:58 +0200
Subject: [PATCH] Enable LDAPS in replica promotion

With CA-less master and CA-less replica, attempting to install CA on replica
would fail. LDAPS has to be enabled during replica promotion, because it is
required by Dogtag.

https://fedorahosted.org/freeipa/ticket/6226
---
 ipaserver/install/dsinstance.py | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/ipaserver/install/dsinstance.py b/ipaserver/install/dsinstance.py
index 26cd246..0c011fb 100644
--- a/ipaserver/install/dsinstance.py
+++ b/ipaserver/install/dsinstance.py
@@ -388,7 +388,7 @@ def create_replica(self, realm_name, master_fqdn, fqdn,
         self.promote = promote
         self.api = api
 
-        self.__common_setup(enable_ssl=(not self.promote))
+        self.__common_setup(enable_ssl=True)
         self.step("restarting directory server", self.__restart_instance)
 
         if self.promote:
