Originally, the location of a serverCertNick.conf template was defined in default.cfg:

[DEFAULT]
pki_source_server_path=/usr/share/pki/server/conf
[Tomcat]
pki_source_servercertnick_conf=%(pki_source_server_path)s/serverCertNick.conf

and contained the following single line:

[PKI_SSL_SERVER_NICKNAME]

This template was copied via the slot_substitution.py scriptlet during pkidaemon installation to its selected place within an instance:

deployer.file.copy_with_slot_substitution(
                deployer.mdict['pki_source_servercertnick_conf'],
                deployer.mdict['pki_target_servercertnick_conf'],
                overwrite_flag=True)

During the course of correcting PKI TRAC Ticket #1370 - pkispawn: installation with HSM from external CA should hold off prepending token name in serverCertNick.conf till phase 2 for Dogtag 10.2.4, it was determined that under certain circumstances, the value contained within this file would differ between scenarios which required a two-pass installation (e. g. - an HSM using an External CA). To fix this issue, a new ServerCertNickConf Python class was created and called during the finalization.py scriptlet.

This ticket proposes consolidating all of this various logic, encapsulating it within the ServerCertNickConf class, and re-factoring the pkidaemon installation code to utilize these methods.

Proposed Milestone: 10.2.5