hello Rob.
I restarted the pki-cad service
###
# service pki-cad restart
Stopping pki-ca: waiting for processes 56678 to exit
killing 56678 which did not stop after 30 seconds [WARNING]
[ OK ]
Starting pki-ca: [ OK ]
###
Then I restarted certmonger :
###
service certmonger restart
Stopping certmonger: [ OK ]
Starting certmonger: [ OK ]
###
Then I tried tu resubmit the three certificates :
###
ipa-getcert resubmit -i 20160321140609
Resubmitting "20160321140609" to "IPA".
ipa-getcert resubmit -i 20160321140642
Resubmitting "20160321140642" to "IPA".
ipa-getcert resubmit -i 20160321140750
Resubmitting "20160321140750" to "IPA".
###
But when I do an ipa-getcert list, I still have the same expiration date :
###
ipa-getcert list
Number of certificates and requests being tracked: 8.
Request ID '20160321140609':
status: CA_UNREACHABLE
ca-error: Server at https://<HOST>/ipa/xml failed request, will retry: 4301 (RPC failed at server. Certificate operation cannot be completed: Unable to communicate with CMS (Not Found)).
stuck: no
key pair storage: type=NSSDB,location='/etc/dirsrv/slapd-<REALM>',nickname='Server-Cert',token='NSS Certificate DB',pinfile='/etc/dirsrv/slapd-<REALM>/pwdfile.txt'
certificate: type=NSSDB,location='/etc/dirsrv/slapd-<REALM>',nickname='Server-Cert',token='NSS Certificate DB'
CA: IPA
issuer: CN=Certificate Authority,O=<REALM>
subject: CN=<HOST>,O=<REALM>
expires: 2018-03-22 14:06:09 UTC
key usage: digitalSignature,nonRepudiation,keyEncipherment,dataEncipherment
eku: id-kp-serverAuth,id-kp-clientAuth
pre-save command:
post-save command:
track: yes
auto-renew: yes
Request ID '20160321140642':
status: CA_UNREACHABLE
ca-error: Server at https://<HOST>/ipa/xml failed request, will retry: 4301 (RPC failed at server. Certificate operation cannot be completed: Unable to communicate with CMS (Not Found)).
stuck: no
key pair storage: type=NSSDB,location='/etc/dirsrv/slapd-PKI-IPA',nickname='Server-Cert',token='NSS Certificate DB',pinfile='/etc/dirsrv/slapd-PKI-IPA/pwdfile.txt'
certificate: type=NSSDB,location='/etc/dirsrv/slapd-PKI-IPA',nickname='Server-Cert',token='NSS Certificate DB'
CA: IPA
issuer: CN=Certificate Authority,O=<REALM>
subject: CN=<HOST>,O=<REALM>
expires: 2018-03-22 14:06:41 UTC
key usage: digitalSignature,nonRepudiation,keyEncipherment,dataEncipherment
eku: id-kp-serverAuth,id-kp-clientAuth
pre-save command:
post-save command:
track: yes
auto-renew: yes
Request ID '20160321140750':
status: CA_UNREACHABLE
ca-error: Server at https://<HOST>/ipa/xml failed request, will retry: 4301 (RPC failed at server. Certificate operation cannot be completed: Unable to communicate with CMS (Not Found)).
stuck: no
key pair storage: type=NSSDB,location='/etc/httpd/alias',nickname='Server-Cert',token='NSS Certificate DB',pinfile='/etc/httpd/alias/pwdfile.txt'
certificate: type=NSSDB,location='/etc/httpd/alias',nickname='Server-Cert',token='NSS Certificate DB'
CA: IPA
issuer: CN=Certificate Authority,O=<REALM>
subject: CN=<HOST>,O=<REALM>
expires: 2018-03-22 14:07:50 UTC
key usage: digitalSignature,nonRepudiation,keyEncipherment,dataEncipherment
eku: id-kp-serverAuth,id-kp-clientAuth
pre-save command:
post-save command:
track: yes
auto-renew: yes
###
Best regards.
Lune