freeipa

Clone
Source Code
GIT

#5595 ipa-certupdate breaks Dogtag after CA-less to CA-full update
Closed: Fixed None Opened 8 years ago by jcholast.

Closed: Fixed
Reopen Issue

If ipa-certupdate is run after updating from CA-less to CA-full, it removes the CA-less CA certificate from the Dogtag NSS database, rendering Dogtag unable to connect to LDAP.

Fix ipa-certupdate to put all installed CA certificate to all relevant filesystem locations to avoid issues like this.

Linked to Bugzilla bug: https://bugzilla.redhat.com/show_bug.cgi?id=1301687 (Red Hat Enterprise Linux 7)

ipa-4-2:

  • 2314fa6 cert renewal: import all external CA certs on IPA CA cert renewal

ipa-4-3:

  • 659c5ae cert renewal: import all external CA certs on IPA CA cert renewal

Metadata Update from @jcholast:
- Issue assigned to jcholast
- Issue set to the milestone: FreeIPA 4.2.4
7 years ago

Login to comment on this ticket.

Metadata
None
None
None
important
None
None
None
None
defect
None
None
IPA
None
1
None
None
None
None
https://bugzilla.redhat.com/show_bug.cgi?id=1301687
None
None
None
Powered by Pagure 5.13.3
Documentation • File an Issue • About • SSH Hostkey/Fingerprint
© Red Hat, Inc. and others.