Nice to know I'm not the only one.... I'll keep an eye on the Bugzilla.
Winfried . -----Oorspronkelijk bericht----- Van: Rob Crittenden via FreeIPA-users < [email protected]> Antwoord-naar: FreeIPA users list <[email protected] > Aan: FreeIPA users list <[email protected]> Cc: Winfried de Heiden <[email protected]>, Rob Crittenden < [email protected]> Onderwerp: [Freeipa-users] Re: getcert status: CA_REJECTED Datum: Thu, 20 Aug 2020 07:58:18 -0400 Winfried de Heiden via FreeIPA-users wrote: > Hi all, > For some reason, I messed up with several certificates > in FreeIPA,version: 4.8. One particular KRA cert seems problematic: > Request ID '20200820113800':status: CA_REJECTEDca-error: Server at > "<some server>:8080/ca/ee/ca/profileSubmit< > http://ipa.blabla.bla:8080/ca/ee/ca/profileSubmit>;" replied: > Missingcredential: sessionIDstuck: yeskey pair > storage:type=NSSDB,location='/etc/pki/pki- > tomcat/alias',nickname='cert-nickname=transportCertcert-pki- > kra',token='NSS Certificate DB',pin > setcertificate:type=NSSDB,location='/etc/pki/pki- > tomcat/alias',nickname='cert-nickname=transportCertcert-pki- > kra',token='NSS Certificate DB'CA: dogtag-ipa-ca-renew- > agentissuer: subject: expires: unknownpre-save command: > /usr/libexec/ipa/certmonger/stop_pkicadpost-save command: > /usr/libexec/ipa/certmonger/renew_ca_cert"transportCert cert-pki- > kra"track: yesauto-renew: yes > How to fix? We're seeing this on the IPA demo server as well, see BZ https://bugzilla.redhat.com/show_bug.cgi?id=1869605 rob_______________________________________________FreeIPA-users mailing list -- [email protected] To unsubscribe send an email to [email protected] Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedorahosted.org/archives/list/[email protected]
_______________________________________________ FreeIPA-users mailing list -- [email protected] To unsubscribe send an email to [email protected] Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedorahosted.org/archives/list/[email protected]
