[Freeipa-devel] [PATCH] 0208 make-testcert: Add better messages for errors with CA-less

[Petr Viktorin]

On 03/18/2013 12:58 PM, Petr Viktorin wrote:
> Hello,
> While the work is not complete, these patches allowed me to install an
> IPA server without a CA, using PKCS#12 files for the server certs.
>
> The patches don't break normal installation.
> The --selfsign option (but not yet the code behind it) is removed.
>
> The absence of a CA is indicated by `enable_ra=False` in the IPA config.
>
> ipa-replica-install will still refuse to run; I'll look into that next.
>
> I removed some unused code that got in my way: Dogtag 9 installation (we
> can run a Dogtag 9-style CA, but we never *install* it), and
> ipapython.certdb.CertDB (unused, not to be confused with ipaserver's
> CertDB).


Hello,

This improves a developer testing tool. Details inside.

Submitting separately so any problems don't hold back the big batch of 
CA-less patches.

-- 
Petr³
-------------- next part --------------
A non-text attachment was scrubbed...
Name: freeipa-pviktori-0208-make-testcert-Add-better-messages-for-errors-with-CA.patch
Type: text/x-patch
Size: 2044 bytes
Desc: not available
URL: <http://listman.redhat.com/archives/freeipa-devel/attachments/20130402/141326fc/attachment.bin>