[freeipa PR#794][opened] ipa-ca-install: append CA cert chain into /etc/ipa/ca.crt

[flo-renaud]

   URL: https://github.com/freeipa/freeipa/pull/794
Author: flo-renaud
 Title: #794: ipa-ca-install: append CA cert chain into /etc/ipa/ca.crt
Action: opened

PR body:
"""
ipa-ca-install currently overwrites /etc/ipa/ca.crt with the CA chain
retrieved from Dogtag. It should instead append the new certs, otherwise
the CA that signed dirsrv and httpd certificates is removed and ipa tools
fail.
A consequence is that ipa-kra-install fails.
This is a regression introduced by 5ab85b36.

https://pagure.io/freeipa/issue/6925
"""

To pull the PR as Git branch:
git remote add ghfreeipa https://github.com/freeipa/freeipa
git fetch ghfreeipa pull/794/head:pr794
git checkout pr794

[freeipa PR#794][+blocker] ipa-ca-install: append CA cert chain into /etc/ipa/ca.crt

[stlaz]

  URL: https://github.com/freeipa/freeipa/pull/794
Title: #794: ipa-ca-install: append CA cert chain into /etc/ipa/ca.crt

Label: +blocker

[freeipa PR#794][comment] ipa-ca-install: append CA cert chain into /etc/ipa/ca.crt

[stlaz]

  URL: https://github.com/freeipa/freeipa/pull/794
Title: #794: ipa-ca-install: append CA cert chain into /etc/ipa/ca.crt

stlaz commented:
"""
Since without this patch IPA will be broken after CA-less to CA-full, I am adding the
"blocker" tag.
"""

See the full comment at
https://github.com/freeipa/freeipa/pull/794#issuecomment-302699460

[freeipa PR#794][comment] ipa-ca-install: append CA cert chain into /etc/ipa/ca.crt

[stlaz]

  URL: https://github.com/freeipa/freeipa/pull/794
Title: #794: ipa-ca-install: append CA cert chain into /etc/ipa/ca.crt

stlaz commented:
"""
Thank you for discovering this @flo-renaud, the patch is working nicely, ACK.
"""

See the full comment at
https://github.com/freeipa/freeipa/pull/794#issuecomment-302703223

[freeipa PR#794][+ack] ipa-ca-install: append CA cert chain into /etc/ipa/ca.crt

[stlaz]

  URL: https://github.com/freeipa/freeipa/pull/794
Title: #794: ipa-ca-install: append CA cert chain into /etc/ipa/ca.crt

Label: +ack

[freeipa PR#794][comment] ipa-ca-install: append CA cert chain into /etc/ipa/ca.crt

[MartinBasti]

  URL: https://github.com/freeipa/freeipa/pull/794
Title: #794: ipa-ca-install: append CA cert chain into /etc/ipa/ca.crt

MartinBasti commented:
"""
PR needs rebase
"""

See the full comment at
https://github.com/freeipa/freeipa/pull/794#issuecomment-302723214

[freeipa PR#794][synchronized] ipa-ca-install: append CA cert chain into /etc/ipa/ca.crt

[flo-renaud]

   URL: https://github.com/freeipa/freeipa/pull/794
Author: flo-renaud
 Title: #794: ipa-ca-install: append CA cert chain into /etc/ipa/ca.crt
Action: synchronized

To pull the PR as Git branch:
git remote add ghfreeipa https://github.com/freeipa/freeipa
git fetch ghfreeipa pull/794/head:pr794
git checkout pr794

[freeipa PR#794][comment] ipa-ca-install: append CA cert chain into /etc/ipa/ca.crt

[flo-renaud]

  URL: https://github.com/freeipa/freeipa/pull/794
Title: #794: ipa-ca-install: append CA cert chain into /etc/ipa/ca.crt

flo-renaud commented:
"""
Hi @MartinBasti ,
Thanks for the heads-up, I just rebased the PR.
"""

See the full comment at
https://github.com/freeipa/freeipa/pull/794#issuecomment-303038076

[freeipa PR#794][comment] ipa-ca-install: append CA cert chain into /etc/ipa/ca.crt

[martbab]

  URL: https://github.com/freeipa/freeipa/pull/794
Title: #794: ipa-ca-install: append CA cert chain into /etc/ipa/ca.crt

martbab commented:
"""
master:

* d93264247563937d6d8e3f030a2bffac10572612 ipa-ca-install: append CA cert chain into
/etc/ipa/ca.crt
ipa-4-5:

* 653d2f412012bcef04599b512938f06084d267b1 ipa-ca-install: append CA cert chain into
/etc/ipa/ca.crt
"""

See the full comment at
https://github.com/freeipa/freeipa/pull/794#issuecomment-303074268

[freeipa PR#794][closed] ipa-ca-install: append CA cert chain into /etc/ipa/ca.crt

[martbab]

   URL: https://github.com/freeipa/freeipa/pull/794
Author: flo-renaud
 Title: #794: ipa-ca-install: append CA cert chain into /etc/ipa/ca.crt
Action: closed

To pull the PR as Git branch:
git remote add ghfreeipa https://github.com/freeipa/freeipa
git fetch ghfreeipa pull/794/head:pr794
git checkout pr794

[freeipa PR#794][+pushed] ipa-ca-install: append CA cert chain into /etc/ipa/ca.crt

[martbab]

  URL: https://github.com/freeipa/freeipa/pull/794
Title: #794: ipa-ca-install: append CA cert chain into /etc/ipa/ca.crt

Label: +pushed