b720aa9 Update lightweight CA serial after renewal

2 files Authored by ftweedal 7 years ago, Committed by jcholast 7 years ago,
    Update lightweight CA serial after renewal
    
    For CA replicas to pick up renewed lightweight CA signing
    certificates, the authoritySerial attribute can be updated with the
    new serial number.
    
    Update the renew_ca_cert script, which is executed by Certmonger
    after writing a renewed CA certificate to the NSSDB, to update the
    authoritySerial attribute if the certificate belongs to a
    lightweight CA.
    
    Part of: https://fedorahosted.org/freeipa/ticket/4559
    
    Reviewed-By: Jan Cholasta <jcholast@redhat.com>
    
        
file modified
+71 -18