Uploaded image for project: 'RHEL'
  1. RHEL
  2. RHEL-61636

Uninstall ACME separately during PKI uninstallation

    • ipa-4.12.2-6.el10
    • No
    • Important
    • 3
    • rhel-sst-idm-ipa
    • 10
    • 12
    • 2
    • QE ack, Dev ack
    • False
    • Hide

      None

      Show
      None
    • No
    • 2024-Q4-Bravo-S1, 2024-Q4-Bravo-S3, 2024-Q4-Bravo-S4
    • Release Note Not Required
    • None

      PKI 11.5.0 requires the ACME service to be removed separately from the CA service.

      To do so execute:

      pki-server acme-remove

      This will further change with 11.6.0 where pkispawn will handle the removal of ACME via

      pkidestroy -s ACME --remove-conf --remove-logs

      Therefore it is probably wise to implement this in DogtagInstance.uninstall. A special case will be required for ACME for 11.5.0 but for 11.6.0 we may be able to treat it as just another subsystem. This might involve creating a separate file acmeinstance.py with only an uninstall routine. That might be the clearest way.

      We can alternatively just bolt on calls to uninstall directly using "ACME" as the subsystem. It might be less elegant but could benefit from being clearer as ACME is still, at least for now, automatically deployed.

              rhn-engineering-rcrit Rob Crittenden
              rhn-engineering-rcrit Rob Crittenden
              Florence Renaud Florence Renaud
              Rizwan Shaikh Rizwan Shaikh
              Votes:
              0 Vote for this issue
              Watchers:
              8 Start watching this issue

                Created:
                Updated: