From 98fde54c170eb7974afe80403d54747563c8e3be Mon Sep 17 00:00:00 2001
From: Rob Crittenden <rcritten@redhat.com>
Date: Fri, 12 Oct 2012 14:35:43 -0400
Subject: [PATCH] Use TLS for CA replication

https://fedorahosted.org/freeipa/ticket/3162
---
 ipaserver/install/cainstance.py | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/ipaserver/install/cainstance.py b/ipaserver/install/cainstance.py
index aabbba3..f2ac840 100644
--- a/ipaserver/install/cainstance.py
+++ b/ipaserver/install/cainstance.py
@@ -640,7 +640,7 @@ class CAInstance(service.Service):
                 "pki_security_domain_hostname": self.master_host,
                 "pki_security_domain_https_port": "443",
                 "pki_security_domain_password": self.admin_password,
-                "pki_clone_replication_security": "SSL",
+                "pki_clone_replication_security": "TLS",
                 "pki_clone_uri": \
                     "https://%s" % ipautil.format_netloc(self.master_host, 443)
             }
-- 
1.7.11.4