Ty zang via FreeIPA-users wrote: > Hi all, > > I am very very green at understanding/supporting FreeIPA so bare with me > please. I tried to update my Red Hat 8.7 in December and part of that update > was trying to install IPA 4.6.8. So after updating my server, I tried to > start IPA but it said it needed an upgrade. > > The upgrades have been failing and the ipaupgrade log shows one error near > the end.. "certutil: Could not find cert: ipaCert". I think it is looking at > /etc/httpd/alias and when I run certutil -d /etc/httpd/alias -L, I see: > > Server-Cert u,u,u > acme.com IPA CA CT,C,C > > I googled around but found no real answer. Would it just be a case of my > certificate being called Server-Cert and not ipaCert? Am I missing a > certificate? Does anyone have any suggestions on how to troubleshoot this?
This is likely not related. Older versions of IPA stored the RA certificate used for communication with the CA in an NSS database. It was migrated to separate PEM files. What you're seeing is likely the upgrader noticing there is no ipaCert so there is nothing to migrate. This should not be causing a failure. rob _______________________________________________ FreeIPA-users mailing list -- [email protected] To unsubscribe send an email to [email protected] Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedorahosted.org/archives/list/[email protected] Do not reply to spam, report it: https://pagure.io/fedora-infrastructure/new_issue
