From 29933c3f480344b7066554f3e66874c2aa4625a8 Mon Sep 17 00:00:00 2001
From: Florence Blanc-Renaud <flo@redhat.com>
Date: Fri, 9 Sep 2016 15:04:35 +0200
Subject: [PATCH] Fix regression introduced in ipa-certupdate

The fix for 6288 was overwritten by commit 08b768313020c45bfa82d67cd214afabf605f4b3.

https://fedorahosted.org/freeipa/ticket/6288

Reviewed-By: Martin Babinsky <mbabinsk@redhat.com>
---
 ipaclient/ipa_certupdate.py | 5 ++++-
 1 file changed, 4 insertions(+), 1 deletion(-)

diff --git a/ipaclient/ipa_certupdate.py b/ipaclient/ipa_certupdate.py
index 4b97b85b83c8b1a130d6db9cdcc7a76fc569af9e..52f73e196c8f18c9f944dd7eeaa442780e17cb7d 100644
--- a/ipaclient/ipa_certupdate.py
+++ b/ipaclient/ipa_certupdate.py
@@ -83,7 +83,10 @@ class CertUpdate(admintool.AdminTool):
             certs = certstore.get_ca_certs(ldap, api.env.basedn,
                                            api.env.realm, ca_enabled)
 
-            lwcas = api.Command.ca_find()['result']
+            if ca_enabled:
+                lwcas = api.Command.ca_find()['result']
+            else:
+                lwcas = []
 
             api.Backend.rpcclient.disconnect()
         finally:
-- 
2.9.3