Browse Source

Workaround https://bugzilla.redhat.com/show_bug.cgi?id=1624606

This is a workaround for a nss-3.40/certmonger/389-ds/p11-proxy
issue in Fedora.

Change-Id: I3ff7324d4878b64c2e2af75b3a465710a33655b5
Grzegorz Grasza 4 months ago
parent
commit
22a90c2508
1 changed files with 13 additions and 0 deletions
  1. 13
    0
      roles/configure-freeipa/tasks/main.yaml

+ 13
- 0
roles/configure-freeipa/tasks/main.yaml View File

@@ -51,6 +51,19 @@
51 51
     state: stopped
52 52
   become: true
53 53
 
54
+- name: Workaround https://bugzilla.redhat.com/show_bug.cgi?id=1624606
55
+  file:
56
+    path: /etc/crypto-policies/local.d/nss-p11-kit.config
57
+    state: absent
58
+  register: nss_policy_workaround
59
+  ignore_errors: yes
60
+  become: true
61
+
62
+- name: Update crypto policies
63
+  command: update-crypto-policies
64
+  become: true
65
+  when: nss_policy_workaround.changed
66
+
54 67
 - name: Configure FreeIPA
55 68
   command: >
56 69
     ipa-server-install -U -r EXAMPLE.TEST

Loading…
Cancel
Save