From 9e3c17c6ded868b4261aa76137c703a4fb866578 Mon Sep 17 00:00:00 2001 From: Florence Blanc-Renaud Date: Dec 07 2016 15:53:27 +0000 Subject: Increase the timeout waiting for certificate issuance in installer During the server installation, the installer requests certificates through certmonger. The current timeout is 60s and is too low. Increase this timeout to api.env.startup_timeout as done in ipa_cacert_manage or ipa_certupdate.py (the code checks the status each 5s up to the timeout value). https://fedorahosted.org/freeipa/ticket/6433 Reviewed-By: Martin Basti Reviewed-By: Martin Babinsky --- diff --git a/ipalib/install/certmonger.py b/ipalib/install/certmonger.py index 3ea900b..c79cf93 100644 --- a/ipalib/install/certmonger.py +++ b/ipalib/install/certmonger.py @@ -30,6 +30,7 @@ import dbus import shlex import subprocess import tempfile +from ipalib import api from ipapython.ipa_log_manager import root_logger from ipaplatform.paths import paths from ipaplatform import services @@ -309,7 +310,7 @@ def request_and_wait_for_cert( reqId = request_cert(nssdb, nickname, subject, principal, passwd_fname, dns, ca, profile, pre_command, post_command) - state = wait_for_request(reqId, timeout=60) + state = wait_for_request(reqId, api.env.startup_timeout) ca_error = get_request_value(reqId, 'ca-error') if state != 'MONITORING' or ca_error: raise RuntimeError("Certificate issuance failed ({})".format(state))