From f6bd4b03346c660a1ff1c4d079e73365662bd759 Mon Sep 17 00:00:00 2001
From: Rob Crittenden <rcritten@redhat.com>
Date: Oct 15 2012 10:57:07 +0000
Subject: Use TLS for CA replication


https://fedorahosted.org/freeipa/ticket/3162

---

diff --git a/ipaserver/install/cainstance.py b/ipaserver/install/cainstance.py
index aabbba3..f2ac840 100644
--- a/ipaserver/install/cainstance.py
+++ b/ipaserver/install/cainstance.py
@@ -640,7 +640,7 @@ class CAInstance(service.Service):
                 "pki_security_domain_hostname": self.master_host,
                 "pki_security_domain_https_port": "443",
                 "pki_security_domain_password": self.admin_password,
-                "pki_clone_replication_security": "SSL",
+                "pki_clone_replication_security": "TLS",
                 "pki_clone_uri": \
                     "https://%s" % ipautil.format_netloc(self.master_host, 443)
             }