[Freeipa-devel] [PATCH] 322 Fix CA CRL migration crash in ipa-upgradeconfig

Martin Kosek mkosek at redhat.com
Wed Oct 10 12:16:57 UTC 2012


On 10/10/2012 02:13 PM, Petr Viktorin wrote:
> On 10/10/2012 01:05 PM, Martin Kosek wrote:
>> CRL migrate procedure did not check if a CA was actually configured
>> on an updated master/replica. This caused ipa-upgradeconfig to
>> crash on replicas without a CA.
>>
>> Make sure that CRL migrate procedure is not run when CA is not
>> configured on given master. Also add few try..except clauses to
>> make the procedure more robust. There is also a small refactoring of
>> "<service> is not configured" log messages, so that they have matching
>> log level and message.
>>
>> dogtag.py constants were updated to have a correct path to new CRL
>> directory on Fedora 18 (dogtag 10).
>>
>> https://fedorahosted.org/freeipa/ticket/3159
>>
> 
> ACK, I no longer get the upgrade errors.
> 

Pushed to master, ipa-3-0.

Martin





More information about the Freeipa-devel mailing list