|
 |
beb795 |
From accc490a5f1db734c94e739d9b9638d44d60d21c Mon Sep 17 00:00:00 2001
|
|
|
beb795 |
From: Aleksei Slaikovskii <aslaikov@redhat.com>
|
|
|
beb795 |
Date: Mon, 23 Oct 2017 11:17:32 +0200
|
|
|
beb795 |
Subject: [PATCH] Add a notice to restart ipa services after certs are
|
|
|
beb795 |
installed
|
|
|
beb795 |
|
|
|
beb795 |
Adding notice for user to restart services after
|
|
|
beb795 |
ipa-server-certinstall.
|
|
|
beb795 |
|
|
|
beb795 |
https://pagure.io/freeipa/issue/7016
|
|
|
beb795 |
|
|
|
beb795 |
Reviewed-By: Florence Blanc-Renaud <frenaud@redhat.com>
|
|
|
beb795 |
Reviewed-By: Rob Crittenden <rcritten@redhat.com>
|
|
|
beb795 |
Reviewed-By: Alexander Bokovoy <abokovoy@redhat.com>
|
|
|
beb795 |
---
|
|
|
beb795 |
install/tools/man/ipa-server-certinstall.1 | 3 ++-
|
|
|
beb795 |
ipaserver/install/ipa_server_certinstall.py | 5 +++++
|
|
|
beb795 |
2 files changed, 7 insertions(+), 1 deletion(-)
|
|
|
beb795 |
|
|
|
beb795 |
diff --git a/install/tools/man/ipa-server-certinstall.1 b/install/tools/man/ipa-server-certinstall.1
|
|
|
beb795 |
index 35cd8c6c711119d7c782c6a89ac78b4894cec073..00fd03b6bc2184ec2bbc099fd9799551c07d2390 100644
|
|
|
beb795 |
--- a/install/tools/man/ipa-server-certinstall.1
|
|
|
beb795 |
+++ b/install/tools/man/ipa-server-certinstall.1
|
|
|
beb795 |
@@ -28,7 +28,8 @@ PKCS#12 is a file format used to safely transport SSL certificates and public/pr
|
|
|
beb795 |
|
|
|
beb795 |
They may be generated and managed using the NSS pk12util command or the OpenSSL pkcs12 command.
|
|
|
beb795 |
|
|
|
beb795 |
-The service(s) are not automatically restarted. In order to use the newly installed certificate(s) you will need to manually restart the Directory and/or Apache servers.
|
|
|
beb795 |
+The service(s) are not automatically restarted. In order to use the newly installed certificate(s) you will need to manually restart the Directory, Apache and/or Krb5kdc servers.
|
|
|
beb795 |
+
|
|
|
beb795 |
.SH "OPTIONS"
|
|
|
beb795 |
.TP
|
|
|
beb795 |
\fB\-d\fR, \fB\-\-dirsrv\fR
|
|
|
beb795 |
diff --git a/ipaserver/install/ipa_server_certinstall.py b/ipaserver/install/ipa_server_certinstall.py
|
|
|
beb795 |
index 9c8f6e81a802e1a87bab1fd15f729e10676fe3a3..ec283705a4038239ddf0c6bacaac200936ed04e8 100644
|
|
|
beb795 |
--- a/ipaserver/install/ipa_server_certinstall.py
|
|
|
beb795 |
+++ b/ipaserver/install/ipa_server_certinstall.py
|
|
|
beb795 |
@@ -17,6 +17,7 @@
|
|
|
beb795 |
# You should have received a copy of the GNU General Public License
|
|
|
beb795 |
# along with this program. If not, see <http://www.gnu.org/licenses/>.
|
|
|
beb795 |
#
|
|
|
beb795 |
+from __future__ import print_function
|
|
|
beb795 |
|
|
|
beb795 |
import os
|
|
|
beb795 |
import os.path
|
|
|
beb795 |
@@ -121,6 +122,10 @@ class ServerCertInstall(admintool.AdminTool):
|
|
|
beb795 |
if self.options.kdc:
|
|
|
beb795 |
self.install_kdc_cert()
|
|
|
beb795 |
|
|
|
beb795 |
+ print(
|
|
|
beb795 |
+ "Please restart ipa services after installing certificate "
|
|
|
beb795 |
+ "(ipactl restart)")
|
|
|
beb795 |
+
|
|
|
beb795 |
api.Backend.ldap2.disconnect()
|
|
|
beb795 |
|
|
|
beb795 |
def install_dirsrv_cert(self):
|
|
|
beb795 |
--
|
|
|
beb795 |
2.14.3
|
|
|
beb795 |
|