<html> <head> <meta http-equiv="content-type" content="text/html; charset=ISO-8859-1"> </head> <body bgcolor="#FFFFFF" text="#000000"> <tt>This patch causes the 'sslserver' certificate for a CA clone to be signed by its associated master CA during configuration, and resolves the following bug:</tt><tt> </tt> <ul> <li><tt><a moz-do-not-send="true" href="https://fedorahosted.org/pki/ticket/816">Dogtag TRAC Ticket #816 - pki-tomcat cannot be started after installation of ipa replica with ca</a></tt><tt> </tt></li> </ul> <tt>This was necessary to avoid any changes which may have been made to the X500Name directory string encoding order (i. e. - creating a Cloned CA on Fedora 20 from a Master CA on Fedora 19).</tt><tt> This was also tested with an installation of IPA on Fedora 19, and a replica installation on Fedora 20 (after adding "|^/ca/ee/ca/profileSubmit" to the "/etc/httpd/conf.d/ipa-pki-proxy.conf" on the Fedora 19 master -- an IPA ticket will be filed for this issue). </tt> </body> </html>