Nice to know I'm not the only one....
I'll keep an eye on the Bugzilla.
Winfried
.
-----Oorspronkelijk bericht-----
Van: Rob Crittenden via FreeIPA-users <
freeipa-users(a)lists.fedorahosted.org
Antwoord-naar: FreeIPA users list <freeipa-users(a)lists.fedorahosted.org
Aan: FreeIPA users list
<freeipa-users(a)lists.fedorahosted.org
Cc:
Winfried de Heiden <wdh(a)dds.nl>, Rob Crittenden <
rcritten(a)redhat.com
Onderwerp: [Freeipa-users] Re:
getcert status: CA_REJECTED
Datum: Thu, 20 Aug 2020 07:58:18 -0400
Winfried de Heiden via FreeIPA-users wrote:
Hi all,
For some reason, I messed up with several certificates
in FreeIPA,version: 4.8. One particular KRA cert seems problematic:
Request ID '20200820113800':status: CA_REJECTEDca-error: Server at
"<some server>:8080/ca/ee/ca/profileSubmit<
http://ipa.blabla.bla:8080/ca/ee/ca/profileSubmit>;" replied:
Missingcredential: sessionIDstuck: yeskey pair
storage:type=NSSDB,location='/etc/pki/pki-
tomcat/alias',nickname='cert-nickname=transportCertcert-pki-
kra',token='NSS Certificate DB',pin
setcertificate:type=NSSDB,location='/etc/pki/pki-
tomcat/alias',nickname='cert-nickname=transportCertcert-pki-
kra',token='NSS Certificate DB'CA: dogtag-ipa-ca-renew-
agentissuer: subject: expires: unknownpre-save command:
/usr/libexec/ipa/certmonger/stop_pkicadpost-save command:
/usr/libexec/ipa/certmonger/renew_ca_cert"transportCert cert-pki-
kra"track: yesauto-renew: yes
How to fix?
We're seeing this on the IPA demo server as well, see BZ
https://bugzilla.redhat.com/show_bug.cgi?id=1869605
rob_______________________________________________FreeIPA-users mailing
list -- freeipa-users(a)lists.fedorahosted.org
To unsubscribe send an email to
freeipa-users-leave(a)lists.fedorahosted.org
Fedora Code of Conduct:
https://docs.fedoraproject.org/en-US/project/code-of-conduct/
List Guidelines:
https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives:
https://lists.fedorahosted.org/archives/list/freeipa-users@lists.fedoraho...