#4626 Reorganize PKCS #12 files
Opened 9 years ago by edewata. Modified 7 years ago

Currently the IPA installer will generate the following files:

  • /root/cacert.p12
  • /root/kracert.p12
  • /root/ca-agent.p12

These files are cluttering root's home directory so there's a chance the root user might want to move/rename the files. Also, the "ca-agent" name is incorrect because it actually contains the CA admin's certificate.

The files should be moved into an IPA-owned directory and renamed more consistently so IPA services can rely on them to exist on a fixed location with a certain name.

  • /root/.ipa/ca.p12
  • /root/.ipa/kra.p12
  • /root/.ipa/ca-admin.p12

The IPA code should be modified to use the new location/names. An upgrade script can be written to move and rename the files and update any configuration files referring to these files.


Maybe even a better place would be /var/lib/ipa/... to not clutter root directory at all...

Yes, I was going to suggest the same thing.

Right. This should be done during installer refactoring.

Too late to do such changes before 4.2 GA, I am postponing it to later version.

Metadata Update from @edewata:
- Issue assigned to jcholast
- Issue set to the milestone: FreeIPA 4.5 backlog

7 years ago

Login to comment on this ticket.

Metadata