[Freeipa-devel] [freeipa PR#5823][opened] CA-less install: non-ASCII chars in CA cert subject

[flo-renaud]

   URL: https://github.com/freeipa/freeipa/pull/5823
Author: flo-renaud
 Title: #5823: CA-less install: non-ASCII chars in CA cert subject 
Action: opened

PR body:
"""
### CA-less install: non-ASCII chars in CA cert subject 
In a CA-less install, if the CA cert subject contains
non-ascii characters, ipa-server-install fails when
configuring SSL for httpd.

The issue happens when calling ipautil.run to extract the keys
from a p12file. The code is using the raw output of the command
and doesn't need to specify capture_output=True, as this option
breaks if the output contains non-ascii characters.
The raw_output contains bytes, the output is a str built by decoding
the raw_output and may fail if non-ascii characters are present.

Fixes: https://pagure.io/freeipa/issue/8880


### ipatests: use non-ascii chars in CA-less install

The CA-less installation creates an external CA with the
subject CN=CA,O=Example Organization.
In order to test non-ascii subjects, use
CN=CA,O=Example Organization España
instead.

Related: https://pagure.io/freeipa/issue/8880
"""

To pull the PR as Git branch:
git remote add ghfreeipa https://github.com/freeipa/freeipa
git fetch ghfreeipa pull/5823/head:pr5823
git checkout pr5823