Z D via FreeIPA-users wrote:
Hi Kees, I've been also looking to Rob's blog as part of
working on my problem ("ipa.service "fails" to start").
In my case, when running the curl command (with -v), I do see
* About to connect() to ca-ldap03 port 8443 (#0)
* Trying x.x.x..x ...
* Connected to ca-ldap03 port 8443 (#0)
* Initializing NSS with certpath: sql:/etc/pki/nssdb
* CAfile: /etc/ipa/ca.crt
CApath: none
* NSS: client certificate not found (nickname not specified)
... but then I see :
< HTTP/1.1 500 Internal Server Error
.. finally command's exit status is 0, hence I understand no need to modify trust
flag.
You need to see why the CA is failing to respond to the request with a
non-500 response.
rob