ipa/ba4386599331cf81d222687d658f5ce54e923478.patch

30 lines
923 B
Diff

From ba4386599331cf81d222687d658f5ce54e923478 Mon Sep 17 00:00:00 2001
From: Stanislav Laznicka <slaznick@redhat.com>
Date: Sep 13 2017 10:41:36 +0000
Subject: client: fix retrieving certs from HTTP
We're applying bytes regex on the result of a command but were
using decoded stdout instead of raw.
https://pagure.io/freeipa/issue/7131
Reviewed-By: Florence Blanc-Renaud <frenaud@redhat.com>
---
diff --git a/ipaclient/install/client.py b/ipaclient/install/client.py
index e971aea..8d70519 100644
--- a/ipaclient/install/client.py
+++ b/ipaclient/install/client.py
@@ -1615,7 +1615,7 @@ def get_ca_certs_from_http(url, warn=True):
result = run([paths.BIN_CURL, "-o", "-", url], capture_output=True)
except CalledProcessError:
raise errors.NoCertificateError(entry=url)
- stdout = result.output
+ stdout = result.raw_output
try:
certs = x509.load_certificate_list(stdout)