7b278b6 CA-less install: non-ASCII chars in CA cert subject

Authored and Committed by frenaud 2 years ago
    CA-less install: non-ASCII chars in CA cert subject
    
    In a CA-less install, if the CA cert subject contains
    non-ascii characters, ipa-server-install fails when
    configuring SSL for httpd.
    
    The issue happens when calling ipautil.run to extract the keys
    from a p12file. The code is using the raw output of the command
    and doesn't need to specify capture_output=True, as this option
    breaks if the output contains non-ascii characters.
    The raw_output contains bytes, the output is a str built by decoding
    the raw_output and may fail if non-ascii characters are present.
    
    Fixes: https://pagure.io/freeipa/issue/8880
    Signed-off-by: Florence Blanc-Renaud <flo@redhat.com>
    Reviewed-By: Rob Crittenden <rcritten@redhat.com>
    Reviewed-By: Francois Cami <fcami@redhat.com>
    
        
file modified
+1 -1