Bug 1690037 - [RFE] Add utility to promote CA replica to CRL master
Summary: [RFE] Add utility to promote CA replica to CRL master
Keywords:
Status: CLOSED ERRATA
Alias: None
Product: Red Hat Enterprise Linux 7
Classification: Red Hat
Component: ipa
Version: 7.7
Hardware: Unspecified
OS: Unspecified
unspecified
unspecified
Target Milestone: rc
: ---
Assignee: IPA Maintainers
QA Contact: ipa-qe
Marc Muehlfeld
URL:
Whiteboard:
Depends On: 1326425 1683261
Blocks: 1644708 1550132
TreeView+ depends on / blocked
 
Reported: 2019-03-18 15:58 UTC by Florence Blanc-Renaud
Modified: 2019-08-06 13:09 UTC (History)
15 users (show)

Fixed In Version: ipa-4.6.5-1.el7
Doc Type: Enhancement
Doc Text:
.IdM now provides a utility to promote a CA to a CRL generation master With this enhancement, administrators can promote an existing Identity Management (IdM) certificate authority (CA) to a certificate revocation list (CRL) generation master or remove this feature from a CA. Previously, multiple manual steps were required to configure an IdM CA as CRL generation master, and the procedure was error-prone. As a result, administrators can now use the `ipa-crlgen-manage enable` and `ipa-crlgen-manage disable` commands to enable and disable CRL generation on an IdM CA.
Clone Of: 1326425
Environment:
Last Closed: 2019-08-06 13:09:30 UTC
Target Upstream Version:

Attachments (Terms of Use)
Add an attachment (proposed patch, testcase, etc.)


Links
System ID Private Priority Status Summary Last Updated
Red Hat Product Errata RHBA-2019:2241 0 None None None 2019-08-06 13:09:46 UTC

Comment 2 François Cami 2019-03-19 15:12:58 UTC 
Fixed upstream
ipa-4-6:
https://pagure.io/freeipa/c/af5abe0d743155953aa91c8e49f9d0199e5fe78a
https://pagure.io/freeipa/c/8fa3e9bf55062bbb6bcf255cc2a0142946adf5c2
https://pagure.io/freeipa/c/52e259b3fe9b6b07cafb7e1b2eea5d7e201a2878
Comment 5 Sumedh Sidhaye 2019-05-07 06:36:46 UTC 
Builds used for verification:

pki-base-10.5.16-2.el7.noarch
389-ds-base-1.3.9.1-5.el7.x86_64
sssd-1.16.4-13.el7.x86_64
ipa-server-4.6.5-6.el7.x86_64


Since the tier 0 tests are passing, following scenarios are tested

1. test master enable crlgen already enabled

2. test master disable crlgen

3. test master disable crlgen already disabled

4. test master enable crlgen

5. test crlgen status on replica

6. test crlgen disable on caless replica

7. test crlgen enable on caless replica

8. test crlgen enable on ca replica

9. test crlgen enable on broken master

10. test crlgen disable on broken master

11. test crlgen enable on broken replica

12. test crlgen disable on broken replica

13. test uninstall without ignore last of role

14. test uninstall with ignore last of role

15. test uninstall last master does not require ignore last of role

Hence marking this bugzilla as verified.
Comment 6 Sumedh Sidhaye 2019-05-07 06:58:17 UTC 
Correction:

Tier 1 tests are passing
Comment 10 errata-xmlrpc 2019-08-06 13:09:30 UTC 
Since the problem described in this bug report should be
resolved in a recent advisory, it has been closed with a
resolution of ERRATA.

For information on the advisory, and where to find the updated
files, follow the link below.

If the solution does not work for you, open a new bug report.

https://access.redhat.com/errata/RHBA-2019:2241
Note You need to log in before you can comment on or make changes to this bug.