-
Bug
-
Resolution: Unresolved
-
Critical
-
rhel-10.0
-
ipa-4.12.2-6.el10
-
No
-
Important
-
3
-
rhel-sst-idm-ipa
-
10
-
12
-
2
-
QE ack, Dev ack
-
False
-
-
No
-
2024-Q4-Bravo-S1, 2024-Q4-Bravo-S3, 2024-Q4-Bravo-S4
-
Pass
-
Automated
-
Release Note Not Required
-
None
PKI 11.5.0 requires the ACME service to be removed separately from the CA service.
To do so execute:
pki-server acme-remove
This will further change with 11.6.0 where pkispawn will handle the removal of ACME via
pkidestroy -s ACME --remove-conf --remove-logs
Therefore it is probably wise to implement this in DogtagInstance.uninstall. A special case will be required for ACME for 11.5.0 but for 11.6.0 we may be able to treat it as just another subsystem. This might involve creating a separate file acmeinstance.py with only an uninstall routine. That might be the clearest way.
We can alternatively just bolt on calls to uninstall directly using "ACME" as the subsystem. It might be less elegant but could benefit from being clearer as ACME is still, at least for now, automatically deployed.
- links to
-
RHBA-2024:139322 ipa bug fix and enhancement update