Hello, thank you very much for your reply. My situation is as follows:
1. root@fs-hiido-kerberos-server02:/home/liangrui# ipa config-show | grep CA
ipa: ERROR: cannot connect to
'https://fs-hiido-kerberos-server02.hiido.host.yydevops.com/ipa/json': [SSL:
CERTIFICATE_VERIFY_FAILED] certificate verify failed: certificate has expired
(_ssl.c:1108)
1. root@fs-hiido-kerberos-server02:/home/liangrui# getcert list | grep -B 1 -C 3 status
Request ID '20200528083036':
status: MONITORING
stuck: no
key pair storage:
type=NSSDB,location='/etc/dirsrv/slapd-YYDEVOPS-COM',nickname='Server-Cert',token='NSS
Certificate DB',pinfile='/etc/dirsrv/slapd-YYDEVOPS-COM/pwdfile.txt'
certificate:
type=NSSDB,location='/etc/dirsrv/slapd-YYDEVOPS-COM',nickname='Server-Cert'
--
Request ID '20200528083056':
status: CA_UNREACHABLE
ca-error: Server at
https://fs-hiido-kerberos-server02.hiido.host.yydevops.com/ipa/xml failed request, will
retry: -504 (libcurl failed to execute the HTTP POST transaction, explaining: SSL
certificate problem: certificate has expired).
stuck: no
key pair storage:
type=FILE,location='/var/lib/ipa/private/httpd.key',pinfile='/var/lib/ipa/passwds/fs-hiido-kerberos-server02.hiido.host.yydevops.com-443-RSA'
--
Request ID '20200528083117':
status: CA_WORKING
stuck: no
key pair storage: type=FILE,location='/var/lib/ipa/ra-agent.key'
certificate: type=FILE,location='/var/lib/ipa/ra-agent.pem'
--
Request ID '20200528083123':
status: MONITORING
stuck: no
key pair storage: type=FILE,location='/var/lib/ipa/certs/kdc.key'
certificate: type=FILE,location='/var/lib/ipa/certs/kdc.crt'
How can I fix the expired Request ID 20200528083056