From 56326828c7ccf75bd867330606c83a621affab9a Mon Sep 17 00:00:00 2001

From: Rob Crittenden <rcritten@redhat.com>

Date: Mon, 26 Feb 2018 16:13:58 -0500

Subject: [PATCH] Don't try to backup CS.cfg during upgrade if CA is not

 configured

https://pagure.io/freeipa/issue/7409

Signed-off-by: Rob Crittenden <rcritten@redhat.com>

Reviewed-By: Fraser Tweedale <ftweedal@redhat.com>

Reviewed-By: Alexander Bokovoy <abokovoy@redhat.com>

Reviewed-By: Fraser Tweedale <ftweedal@redhat.com>

---

 ipaserver/install/server/upgrade.py | 3 ++-

 1 file changed, 2 insertions(+), 1 deletion(-)

diff --git a/ipaserver/install/server/upgrade.py b/ipaserver/install/server/upgrade.py

index c55242a4af990c3218d8451fac7b082066a23be3..bf603acb5f931a4194320795874859f5bdc94647 100644

--- a/ipaserver/install/server/upgrade.py

+++ b/ipaserver/install/server/upgrade.py

@@ -1630,7 +1630,8 @@ def upgrade_configuration():

     with installutils.stopped_service('pki-tomcatd', 'pki-tomcat'):

         # Dogtag must be stopped to be able to backup CS.cfg config

-        ca.backup_config()

+        if ca.is_configured():

+            ca.backup_config()

         # migrate CRL publish dir before the location in ipa.conf is updated

         ca_restart = migrate_crl_publish_dir(ca)

-- 

2.14.3