From 9bae5492270d8b695999cd82831cbee62b04626b Mon Sep 17 00:00:00 2001 From: Florence Blanc-Renaud Date: Fri, 28 Jan 2022 16:58:42 +0100 Subject: [PATCH] ipa-pki-proxy.conf: provide access to /kra/admin/kra/getStatus The access to /kra/admin/kra/getStatus will be needed in order to fix pki-healthcheck. Note that this commit is a pre-requisite for the fix to be done on PKI side. No test added since the full integration test already exists in test_replica_promotion.py, in TestHiddenReplicaPromotion::test_ipahealthcheck_hidden_replica Fixes: https://pagure.io/freeipa/issue/9099 Related: https://pagure.io/freeipa/issue/8582 Signed-off-by: Florence Blanc-Renaud Reviewed-By: Rob Crittenden --- install/share/ipa-pki-proxy.conf.template | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/install/share/ipa-pki-proxy.conf.template b/install/share/ipa-pki-proxy.conf.template index 96708482c..7a46f20b9 100644 --- a/install/share/ipa-pki-proxy.conf.template +++ b/install/share/ipa-pki-proxy.conf.template @@ -1,4 +1,4 @@ -# VERSION 16 - DO NOT REMOVE THIS LINE +# VERSION 17 - DO NOT REMOVE THIS LINE ProxyRequests Off @@ -11,7 +11,7 @@ ProxyRequests Off # matches for admin port and installer - + SSLOptions +StdEnvVars +ExportCertData +StrictRequire +OptRenegotiate SSLVerifyClient none ProxyPassMatch ajp://localhost:$DOGTAG_PORT $DOGTAG_AJP_SECRET -- 2.34.1