Imported Debian patch 4.0.5-6~numeezy
This commit is contained in:
committed by
Mario Fetka
parent
c44de33144
commit
10dfc9587b
14
debian/freeipa-client.postinst
vendored
14
debian/freeipa-client.postinst
vendored
@@ -2,15 +2,13 @@
|
||||
set -e
|
||||
|
||||
if [ "$1" = configure ]; then
|
||||
if [ ! -f /etc/ipa/nssdb/cert8.db ]; then
|
||||
python2 -c 'from ipapython.certdb import create_ipa_nssdb; create_ipa_nssdb()' >/dev/null 2>&1
|
||||
if [ ! -e /etc/pki/nssdb ]; then
|
||||
tmp=$(mktemp) || exit
|
||||
if certutil -L -d /etc/pki/nssdb -n 'IPA CA' -a >"$tmp" 2>/var/log/ipaupgrade.log; then
|
||||
certutil -A -d /etc/ipa/nssdb -n 'IPA CA' -t CT,C,C -a -i "$tmp" >/var/log/ipaupgrade.log 2>&1
|
||||
elif certutil -L -d /etc/pki/nssdb -n 'External CA cert' -a >"$tmp" 2>/var/log/ipaupgrade.log; then
|
||||
certutil -A -d /etc/ipa/nssdb -n 'External CA cert' -t C,, -a -i "$tmp" >/var/log/ipaupgrade.log 2>&1
|
||||
fi
|
||||
rm -f "$tmp"
|
||||
printf "\n" > $tmp
|
||||
mkdir -p /etc/pki/nssdb
|
||||
certutil -N -d /etc/pki/nssdb -f $tmp
|
||||
chmod 644 /etc/pki/nssdb/*
|
||||
rm $tmp
|
||||
fi
|
||||
fi
|
||||
|
||||
|
||||
Reference in New Issue
Block a user