[Bug 297709] security/certmonger: look for the IPA configuration under ${PREFIX}

https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=297709

            Bug ID: 297709
           Summary: security/certmonger: look for the IPA configuration
                    under ${PREFIX}
           Product: Ports & Packages
           Version: Latest
          Hardware: Any
                OS: Any
            Status: New
          Severity: Affects Some People
          Priority: ---
         Component: Individual Port(s)
          Assignee: [email protected]
          Reporter: [email protected]
             Flags: maintainer-feedback?([email protected])
          Assignee: [email protected]

Created attachment 273962
  --> https://bugs.freebsd.org/bugzilla/attachment.cgi?id=273962&action=edit
patch

certmonger has the location of its IPA configuration hardcoded in three source
files:

src/dogtag-ipa.c:26  #define IPACONFIG "/etc/ipa/default.conf"
src/dogtag.c:406     cainfo = "/etc/ipa/ca.crt";
src/ipa.c:1091       stat("/etc/ipa/ca.crt", &st)
src/ipa.c:1097       read_config_file("/etc/ipa/default.conf")

On FreeBSD that configuration lives under ${PREFIX}/etc, so the files are never
found. ipa-getcert request fails with

ca-error: Unable to determine location of IPA LDAP server

and dogtag-ipa-renew-agent-submit carries the same paths, so certificate
renewal is affected as well.

The attached patch rewrites the three literals at post-patch time. Built in
poudriere (15.1 amd64); both helpers then contain
/usr/local/etc/ipa/default.conf and /usr/local/etc/ipa/ca.crt. Verified against
a running installation: the request reaches status: MONITORING.

-- 
You are receiving this mail because:
You are the assignee for the bug.