[Freeipa-devel] [freeipa PR#5292][opened] Always define the path DNSSEC_OPENSSL_CONF

[flo-renaud]

   URL: https://github.com/freeipa/freeipa/pull/5292
Author: flo-renaud
 Title: #5292: Always define the path DNSSEC_OPENSSL_CONF
Action: opened

PR body:
"""
The variable was None by default and set to /etc/ipa/dnssec/openssl.cnf
for fedora only because the code is specific to the support of pkcs11
engine for bind. As a consequence ipa-backup had a "None" value in the
list of files to backup and failed on Exception.

ipa-backup code is able to handle missing files, and the code using
the pkcs11 engine is called only when NAMED_OPENSSL_ENGINE is set
(only in fedora so far). It is safe to always define a value for
DNSSEC_OPENSSL_CONF even on os where it does not exist.

Fixes: https://pagure.io/freeipa/issue/8597
"""

To pull the PR as Git branch:
git remote add ghfreeipa https://github.com/freeipa/freeipa
git fetch ghfreeipa pull/5292/head:pr5292
git checkout pr5292