Bug 1690037 - [RFE] Add utility to promote CA replica to CRL master
Summary: [RFE] Add utility to promote CA replica to CRL master
Alias: None
Product: Red Hat Enterprise Linux 7
Classification: Red Hat
Component: ipa
Version: 7.7
Hardware: Unspecified
OS: Unspecified
Target Milestone: rc
: ---
Assignee: IPA Maintainers
QA Contact: ipa-qe
Marc Muehlfeld
Depends On: 1326425 1683261
Blocks: 1550132 1644708
TreeView+ depends on / blocked
Reported: 2019-03-18 15:58 UTC by Florence Blanc-Renaud
Modified: 2019-08-06 13:09 UTC (History)
15 users (show)

Fixed In Version: ipa-4.6.5-1.el7
Doc Type: Enhancement
Doc Text:
.IdM now provides a utility to promote a CA to a CRL generation master With this enhancement, administrators can promote an existing Identity Management (IdM) certificate authority (CA) to a certificate revocation list (CRL) generation master or remove this feature from a CA. Previously, multiple manual steps were required to configure an IdM CA as CRL generation master, and the procedure was error-prone. As a result, administrators can now use the `ipa-crlgen-manage enable` and `ipa-crlgen-manage disable` commands to enable and disable CRL generation on an IdM CA.
Clone Of: 1326425
Last Closed: 2019-08-06 13:09:30 UTC
Target Upstream Version:

Attachments (Terms of Use)

System ID Private Priority Status Summary Last Updated
Red Hat Product Errata RHBA-2019:2241 0 None None None 2019-08-06 13:09:46 UTC

Comment 5 Sumedh Sidhaye 2019-05-07 06:36:46 UTC
Builds used for verification:


Since the tier 0 tests are passing, following scenarios are tested

1. test master enable crlgen already enabled

2. test master disable crlgen

3. test master disable crlgen already disabled

4. test master enable crlgen

5. test crlgen status on replica

6. test crlgen disable on caless replica

7. test crlgen enable on caless replica

8. test crlgen enable on ca replica

9. test crlgen enable on broken master

10. test crlgen disable on broken master

11. test crlgen enable on broken replica

12. test crlgen disable on broken replica

13. test uninstall without ignore last of role

14. test uninstall with ignore last of role

15. test uninstall last master does not require ignore last of role

Hence marking this bugzilla as verified.

Comment 6 Sumedh Sidhaye 2019-05-07 06:58:17 UTC

Tier 1 tests are passing

Comment 10 errata-xmlrpc 2019-08-06 13:09:30 UTC
Since the problem described in this bug report should be
resolved in a recent advisory, it has been closed with a
resolution of ERRATA.

For information on the advisory, and where to find the updated
files, follow the link below.

If the solution does not work for you, open a new bug report.


Note You need to log in before you can comment on or make changes to this bug.