On ma, 28 helmi 2022, Julien Rische via FreeIPA-users wrote:
Hello Ville,
Could you please check which hashing algorithm was used to generate the signature of your
KDC certificate?
To do so, please run this command:
openssl x509 -in /var/kerberos/krb5kdc/kdc.crt -noout -text | grep -Fi 'Signature
Algorithm'
Folks from OpenStack side did open a bug
https://bugzilla.redhat.com/show_bug.cgi?id=2060798 for the same issue.
I've done a bit of investigation to where this issue might be, please
see in the bug.
--
/ Alexander Bokovoy
Sr. Principal Software Engineer
Security / Identity Management Engineering
Red Hat Limited, Finland