From a9ee2adec38b23d7d957d503d79e20b2174cc512 Mon Sep 17 00:00:00 2001
From: Endi S. Dewata <edewata@redhat.com>
Date: Aug 11 2023 07:58:17 +0000
Subject: Remove non-existent default pki_cert_chain_path


In the future pkispawn will validate all path params so the
default value for pki_cert_chain_path needs to be removed
since it points to a non-existent file. When the param is
actually used (e.g. for installing with an external CA)
CAInstance.__spawn_instance() will configure the param to
point to the actual cert chain.

Signed-off-by: Endi Sukma Dewata <edewata@redhat.com>
Reviewed-By: Alexander Bokovoy <abokovoy@redhat.com>

---

diff --git a/install/share/ipaca_default.ini b/install/share/ipaca_default.ini
index 058796e..497f7c6 100644
--- a/install/share/ipaca_default.ini
+++ b/install/share/ipaca_default.ini
@@ -94,7 +94,7 @@ pki_group=pkiuser
 pki_user=pkiuser
 pki_existing=False
 
-pki_cert_chain_path=%(pki_instance_configuration_path)s/external_ca_chain.cert
+pki_cert_chain_path=
 pki_cert_chain_nickname=caSigningCert External CA
 
 pki_pkcs12_path=