Issue #5612: `ipa-cacert-manage install ` fails for intermediate CA certs - freeipa

freeipa

#5612 `ipa-cacert-manage install ` fails for intermediate CA certs

Closed: Fixed None Opened 8 years ago by jcholast.

ipa-cacert-manage install fails for intermediate (i.e. not self-signed) CA certs with the following error:

Installing CA certificate, please wait
Not a valid CA certificate: (SEC_ERROR_UNKNOWN_ISSUER) Peer's Certificate issuer is not recognized. (visit http://www.freeipa.org/page/Troubleshooting for troubleshooting guide)
The ipa-cacert-manage command failed.

pvoborni commented 8 years ago

Use case: required for setting up let's encrypt cert.

jcholast commented 8 years ago

master:

ef91346 cacert install: fix trust chain validation

ipa-4-3:

4fa8d3b cacert install: fix trust chain validation

Metadata Update from @jcholast:
- Issue assigned to jcholast
- Issue set to the milestone: FreeIPA 4.3.1

7 years ago

Metadata

Assignee

jcholast

Tags

None

Blocking

None

Depending on

None

Priority

important

Milestone

FreeIPA 4.3.1

None

affects_doc

None

source

None

knownissue

None

type

defect

blockedby

None

test_case

None

component

IPA

blocking

None

on_review

keywords

None

test_coverage

None

reviewer

None

external_tracker

None

rhbz

todo

tester

None

changelog

None

design

None

freeipa

Source Code

#5612 `ipa-cacert-manage install ` fails for intermediate CA certs Closed: Fixed None Opened 8 years ago by jcholast.

Metadata

#5612 `ipa-cacert-manage install ` fails for intermediate CA certs

Closed: Fixed None Opened 8 years ago by jcholast.