[Freeipa-devel] [freeipa PR#5876][opened] [ipa-4-6] Switch to external ca: fix certmonger script

[flo-renaud]

   URL: https://github.com/freeipa/freeipa/pull/5876
Author: flo-renaud
 Title: #5876: [ipa-4-6] Switch to external ca: fix certmonger script 
Action: opened

PR body:
"""
The script renew_ca_cert produces a Traceback when switching
from self-signed to external CA:
Traceback (most recent call last):
  File "/usr/libexec/ipa/certmonger/renew_ca_cert", line 224, in
<module>
    main()
  File "/usr/libexec/ipa/certmonger/renew_ca_cert", line 218, in main
    _main()
  File "/usr/libexec/ipa/certmonger/renew_ca_cert", line 184, in _main
     ca_flags = dict(cc[1:] for cc in ca_certs)[ca_nick]
KeyError: 'CN=Cert Auth,O=FloAuth.

It is trying to find a cert in a dict using a str as key,
while the keys are bytes.

Related: https://pagure.io/freeipa/issue/8879
Fixes: https://pagure.io/freeipa/issue/8893


"""

To pull the PR as Git branch:
git remote add ghfreeipa https://github.com/freeipa/freeipa
git fetch ghfreeipa pull/5876/head:pr5876
git checkout pr5876