Anush Jayan wrote:
hi im getting duplicate certificate error
ipa: DEBUG: stderr= ipa: DEBUG: Starting external process ipa: DEBUG: args=/usr/bin/certutil -d /etc/dirsrv/slapd-MPGPSDC-COM/ -L ipa: DEBUG: Process finished, return code=0 ipa: DEBUG: stdout= Certificate Nickname Trust Attributes SSL,S/MIME,JAR/XPI
MPGPSDC.COM http://mpgpsdc.com/ IPA CA CT,C,C CN=DST Root CA X3,O=Digital Signature Trust Co. C,, CN=freeipa.do-blr.mpgpsdc.com http://ut-nagios01.do-blr.mpgpsdc.com/ u,u,u CN=Let's Encrypt Authority X3,O=Let's Encrypt,C=US ,,
ipa: DEBUG: stderr= ipa.ipaserver.install.ipa_server_certinstall.ServerCertInstall: DEBUG: File "/usr/lib/python2.7/dist-packages/ipapython/admintool.py", line 171, in execute return_value = self.run() File "/usr/lib/python2.7/dist-packages/ipaserver/install/ipa_server_certinstall.py", line 110, in run self.install_dirsrv_cert() File "/usr/lib/python2.7/dist-packages/ipaserver/install/ipa_server_certinstall.py", line 129, in install_dirsrv_cert 'restart_dirsrv %s' % serverid) File "/usr/lib/python2.7/dist-packages/ipaserver/install/ipa_server_certinstall.py", line 180, in import_cert command) File "/usr/lib/python2.7/dist-packages/ipaserver/install/certs.py", line 302, in track_server_cert request_id = certmonger.start_tracking(nickname, self.secdir, password_file, command) File "/usr/lib/python2.7/dist-packages/ipapython/certmonger.py", line 357, in start_tracking result = cm.obj_if.add_request(params) File "/usr/lib/python2.7/dist-packages/dbus/proxies.py", line 145, in __call__ **keywords) File "/usr/lib/python2.7/dist-packages/dbus/connection.py", line 651, in call_blocking message, timeout)
ipa.ipaserver.install.ipa_server_certinstall.ServerCertInstall: DEBUG: The ipa-server-certinstall command failed, exception: DBusException: org.fedorahosted.certmonger.duplicate: Certificate at same location is already used by request with nickname "20181011115500". ipa.ipaserver.install.ipa_server_certinstall.ServerCertInstall: ERROR: org.fedorahosted.certmonger.duplicate: Certificate at same location is already used by request with nickname "20181011115500". ipa.ipaserver.install.ipa_server_certinstall.ServerCertInstall: ERROR: The ipa-server-certinstall command failed.
You just need to tell certmonger to stop tracking the old one:
# getcert stop-tracking -i 20181011115500
rob
On Thu, Sep 27, 2018, 7:10 PM Rob Crittenden <rcritten@redhat.com mailto:rcritten@redhat.com> wrote:
Anush Jayan via FreeIPA-users wrote: > im currently using freeipa 4.3.1 on ubuntu 16.04 im having trouble installing letsencrypt ssl key for https can anyone help me fix this > It would help if you said what you tried and what you are seeing. rob