64702b2 Try to pull the entire CA chain from IPA

Authored and Committed by rcritten 6 months ago
1 file changed. 9 lines added. 1 lines removed.
    Try to pull the entire CA chain from IPA
    
    IPA originally stored a single cert in cn=cacert which is
    what certmonger has always retrieved in fetch_roots. It was
    replaced to store cn=certificates as separate entries in order
    to more easily support chains and to include additional
    metadata about certificates.
    
    Try to pull the chain from that location first and fall back
    to cn=cacert if no entries are found.
    
    https://bugzilla.redhat.com/show_bug.cgi?id=1710632
    
        
file modified
+9 -1