Title: #5995: Catch and log errors when adding CA profiles
Rather than stopping the installer entirely, catch and report
errors adding new certificate profiles.
It was discovered that installing a newer IPA that has the
ACME profile which requires sanToCNDefault will fail when
installing a new server against a very old one that lacks
Deleting the LDAP profile in cn=certprofiles,cn=ca,$SUFFIX
and then running ipa-server-install on the newer server
will add the missing profile.
Signed-off-by: Rob Crittenden <rcritten(a)redhat.com>
To pull the PR as Git branch:
git remote add ghfreeipa https://github.com/freeipa/freeipa
git fetch ghfreeipa pull/5995/head:pr5995
git checkout pr5995