URL:
https://github.com/freeipa/freeipa/pull/5995
Author: rcritten
Title: #5995: Catch and log errors when adding CA profiles
Action: opened
PR body:
"""
Rather than stopping the installer entirely, catch and report
errors adding new certificate profiles.
It was discovered that installing a newer IPA that has the
ACME profile which requires sanToCNDefault will fail when
installing a new server against a very old one that lacks
this class.
Deleting the LDAP profile in cn=certprofiles,cn=ca,$SUFFIX
and then running ipa-server-install on the newer server
will add the missing profile.
https://pagure.io/freeipa/issue/8974
Signed-off-by: Rob Crittenden <rcritten(a)redhat.com>
"""
To pull the PR as Git branch:
git remote add ghfreeipa
https://github.com/freeipa/freeipa
git fetch ghfreeipa pull/5995/head:pr5995
git checkout pr5995