From a24e50c8a183d8a8e5a6ab184b4139aa67a99686 Mon Sep 17 00:00:00 2001
From: Christian Heimes <cheimes@redhat.com>
Date: Tue, 20 Aug 2019 16:58:14 +0200
Subject: [PATCH] Fix ca_initialize_hsm_state

Fixup for commit eb2313920e20bb4a74fc0abc52c496ccf2822dab.
configparser's set() method does not convert boolean to string
automatically. Use string '"False"', which is then interpreted as
boolean 'False' by getboolean().

Related: https://pagure.io/freeipa/issue/5608
Signed-off-by: Christian Heimes <cheimes@redhat.com>
---
 ipaserver/install/server/upgrade.py | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/ipaserver/install/server/upgrade.py b/ipaserver/install/server/upgrade.py
index 0d0469a423..d2d24164cd 100644
--- a/ipaserver/install/server/upgrade.py
+++ b/ipaserver/install/server/upgrade.py
@@ -480,7 +480,7 @@ def ca_initialize_hsm_state(ca):
         section_name = ca.subsystem.upper()
         config = SafeConfigParser()
         config.add_section(section_name)
-        config.set(section_name, 'pki_hsm_enable', False)
+        config.set(section_name, 'pki_hsm_enable', 'False')
         ca.set_hsm_state(config)
 
 
