Simo Sorce wrote: > We use the new proxy code for dogtag now, so we do not need to open all > the CA ports as all connections go through the standard https port. > > Fixes https://fedorahosted.org/freeipa/ticket/1745 > > Simo. nack. dogtag replication still takes place over 7389. rob