From 88ec82165561af0d14ec07a82f37156c5d2fa0da Mon Sep 17 00:00:00 2001 From: Jan Cholasta Date: Thu, 8 Jan 2015 16:01:42 +0000 Subject: [PATCH] Fix CA certificate renewal syslog alert https://fedorahosted.org/freeipa/ticket/4820 Reviewed-By: David Kupka --- install/certmonger/dogtag-ipa-ca-renew-agent-submit | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/install/certmonger/dogtag-ipa-ca-renew-agent-submit b/install/certmonger/dogtag-ipa-ca-renew-agent-submit index c63c0c2c5f863e05cafad293a60d9157c732e7ad..3c6e8175c337f65046f8631f4393aecfbf207f4d 100755 --- a/install/certmonger/dogtag-ipa-ca-renew-agent-submit +++ b/install/certmonger/dogtag-ipa-ca-renew-agent-submit @@ -403,7 +403,7 @@ def renew_ca_cert(): if state == 'retrieve': result = call_handler(retrieve_cert) - if result[0] == WAIT_WITH_DELAY and not is_self_signed: + if result[0] == REJECTED and not is_self_signed: syslog.syslog(syslog.LOG_ALERT, "IPA CA certificate is about to expire, " "use ipa-cacert-manage to renew it") -- 2.1.0