URL: https://github.com/freeipa/freeipa/pull/5823 Author: flo-renaud Title: #5823: CA-less install: non-ASCII chars in CA cert subject Action: opened

PR body: """ ### CA-less install: non-ASCII chars in CA cert subject In a CA-less install, if the CA cert subject contains non-ascii characters, ipa-server-install fails when configuring SSL for httpd.

The issue happens when calling ipautil.run to extract the keys from a p12file. The code is using the raw output of the command and doesn't need to specify capture_output=True, as this option breaks if the output contains non-ascii characters. The raw_output contains bytes, the output is a str built by decoding the raw_output and may fail if non-ascii characters are present.

Fixes: https://pagure.io/freeipa/issue/8880

### ipatests: use non-ascii chars in CA-less install

The CA-less installation creates an external CA with the subject CN=CA,O=Example Organization. In order to test non-ascii subjects, use CN=CA,O=Example Organization España instead.

Related: https://pagure.io/freeipa/issue/8880 """

To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/5823/head:pr5823 git checkout pr5823