URL: https://github.com/freeipa/freeipa/pull/5292 Author: flo-renaud Title: #5292: Always define the path DNSSEC_OPENSSL_CONF Action: opened

PR body: """ The variable was None by default and set to /etc/ipa/dnssec/openssl.cnf for fedora only because the code is specific to the support of pkcs11 engine for bind. As a consequence ipa-backup had a "None" value in the list of files to backup and failed on Exception.

ipa-backup code is able to handle missing files, and the code using the pkcs11 engine is called only when NAMED_OPENSSL_ENGINE is set (only in fedora so far). It is safe to always define a value for DNSSEC_OPENSSL_CONF even on os where it does not exist.

Fixes: https://pagure.io/freeipa/issue/8597 """

To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/5292/head:pr5292 git checkout pr5292