From c95617e71495fff4bf2352fdeb5089e3e02bd79b Mon Sep 17 00:00:00 2001
From: Stanislav Laznicka <slaznick@redhat.com>
Date: Jul 27 2017 14:55:21 +0000
Subject: cainstance: read cert file as bytes


https://pagure.io/freeipa/issue/4985

Reviewed-By: Stanislav Laznicka <slaznick@redhat.com>

---

diff --git a/ipaserver/install/cainstance.py b/ipaserver/install/cainstance.py
index d60093a..2eec33a 100644
--- a/ipaserver/install/cainstance.py
+++ b/ipaserver/install/cainstance.py
@@ -581,7 +581,7 @@ class CAInstance(DogtagInstance):
 
         elif self.external == 2:
             cert_file = tempfile.NamedTemporaryFile()
-            with open(self.cert_file) as f:
+            with open(self.cert_file, 'rb') as f:
                 ext_cert = x509.load_unknown_x509_certificate(f.read())
             cert_file.write(ext_cert.public_bytes(x509.Encoding.PEM))
             cert_file.flush()