[freeipa PR#1079][opened] ipa-server-upgrade: fix the logic for tracking certs

[flo-renaud]

   URL: https://github.com/freeipa/freeipa/pull/1079
Author: flo-renaud
 Title: #1079: ipa-server-upgrade: fix the logic for tracking certs
Action: opened

PR body:
"""
ipa-server-upgrade needs to configure certmonger with the right options
in order to track PKI, HTTP and LDAP certs (for instance the RA agent cert
location has changed from older releases).
The upgrade code looks for existing tracking requests with the expected
options by using criteria (location of the NSSDB, nickname, CA helper...)
If a tracking request is not found, it means that it is either using wrong
options or not configured. In this case, the upgrade stop tracking
all the certs, reconfigures the helpers, starts tracking the certs so that
the config is up-to-date.

The issue is that the criteria is using the keyword 'ca' instead of
'ca-name' and this leads to upgrade believing that the config needs to be
updated in all the cases.

https://pagure.io/freeipa/issue/7151
"""

To pull the PR as Git branch:
git remote add ghfreeipa https://github.com/freeipa/freeipa
git fetch ghfreeipa pull/1079/head:pr1079
git checkout pr1079

[freeipa PR#1079][closed] ipa-server-upgrade: fix the logic for tracking certs

[flo-renaud]

   URL: https://github.com/freeipa/freeipa/pull/1079
Author: flo-renaud
 Title: #1079: ipa-server-upgrade: fix the logic for tracking certs
Action: closed

To pull the PR as Git branch:
git remote add ghfreeipa https://github.com/freeipa/freeipa
git fetch ghfreeipa pull/1079/head:pr1079
git checkout pr1079