When adding a new profile using pki ca-profile-add , it report PKIException error. Profile gets added but it reports PKIException error
pki -d /opt/rhqa_pki/certs_db/ -n CA_agentV -c redhat123 ca-profile-show caCACert --output /tmp/caCAcert1.out
-<Profile xmlns:ns2="http://www.w3.org/2005/Atom" id="caCACert"> +<Profile xmlns:ns2="http://www.w3.org/2005/Atom" id="caCACertTemp1"> -<link href="https://dhcp207-176.lab.eng.pnq.redhat.com:8443/ca/rest/profiles /caCACert" rel="self"/> +<link href="https://dhcp207-176.lab.eng.pnq.redhat.com:8443/ca/rest/profiles/caCACertTemp1" rel="self"/>
[root@dhcp207-176 setup]# pki -d /opt/rhqa_pki/certs_db/ -n CA_adminV -c redhat123 ca-profile-add /tmp/caCAcert1.out PKIException: Error changing profile data
[root@dhcp207-176 setup]# pki -d /opt/rhqa_pki/certs_db/ -n CA_adminV -c redhat123 ca-profile-show caCACertTemp1 ----------------------- Profile "caCACertTemp1" ----------------------- Profile ID: caCACertTemp1 Name: Manual Certificate Manager Signing Certificate Enrollment Description: This certificate profile is for enrolling Certificate Authority certificates. Input ID: i1 Name: Certificate Request Input Class: certReqInputImpl Attribute Name: cert_request_type Attribute Description: Certificate Request Type Attribute Syntax: cert_request_type Attribute Name: cert_request Attribute Description: Certificate Request Attribute Syntax: cert_request Input ID: i2 Name: Requestor Information Class: submitterInfoInputImpl Attribute Name: requestor_name Attribute Description: Requestor Name Attribute Syntax: string Attribute Name: requestor_email Attribute Description: Requestor Email Attribute Syntax: string Attribute Name: requestor_phone Attribute Description: Requestor Phone Attribute Syntax: string Output ID: o1 Name: Certificate Output Class: certOutputImpl Attribute Name: pretty_cert Attribute Description: Certificate Pretty Print Attribute Syntax: pretty_print Attribute Name: b64_cert Attribute Description: Certificate Base-64 Encoded Attribute Syntax: pretty_print
Per email discussions, propose Milestone 10.2.1.
Proposed Milestone: 10.2.1 (per CS Meeting of 09/17/2014)
Per Dogtag 10.2.3 Triage meeting of 09/24/2014 - proposed Milestone: 10.2.2
NOTE: It is fine to address this issue earlier (in 10.2.1) if enough cycles exist.
proposed fix pki-ftweedal-0016-Fix-BasicConstraints-min-max-path-length-check.patch
attachment pki-ftweedal-0016-2-Fix-BasicConstraints-min-max-path-length-check.patch
attachment pki-ftweedal-0016-3-Fix-BasicConstraints-min-max-path-length-check.patch
Pushed:
Metadata Update from @mrniranjan: - Issue assigned to ftweedal - Issue set to the milestone: 10.2.2
Dogtag PKI is moving from Pagure issues to GitHub issues. This means that existing or new issues will be reported and tracked through Dogtag PKI's GitHub Issue tracker.
This issue has been cloned to GitHub and is available here: https://github.com/dogtagpki/pki/issues/1600
If you want to receive further updates on the issue, please navigate to the GitHub issue and click on Subscribe button.
Subscribe
Thank you for understanding, and we apologize for any inconvenience.
Login to comment on this ticket.