LHEUREUX Bernard via FreeIPA-users wrote:
> Hello to all of you,
>
>
>
> We have an infrastructure of 4 FreeIPA servers (replicas) and one of
> them reports this error message in ipa-healthcheck:
>
> ra.get_certificate(): Request failed with status 404: Non-2xx response
> from CA REST API: 404. Certificate ID 0x3a842545b not found (404)
>
> [
>
> {
>
> "source": "ipahealthcheck.ipa.certs",
>
> "check": "IPACertRevocation",
>
> "result": "ERROR",
>
> "uuid": "a0c94d44-8e26-444d-87d0-ba985250e6d4",
>
> "when": "20250623104349Z",
>
> "duration": "2.257779",
>
> "kw": {
>
> "key": "20250613075922",
>
> "serial": 15707821147,
>
> "error": "Request failed with status 404: Non-2xx response from CA
> REST API: 404. Certificate ID 0x3a842545b not found (404)",
>
> "msg": "Request for certificate serial number {serial} in request
> {key} failed: {error}"
>
> }
>
> }
>
> ]
>
>
>
> No problem apparently on this infrastructure, and this message is only
> reported on one of the 4 replicas
>
> How could I repair or clear this message ?
It tried to check the revocation status of a cert with serial number
15707821147 and the CA returned a 404, certificate not found.
It could point to replication issues of the CA LDAP backend.
On each CA server I'd verify that they all know about the cert by
running: ipa cert-show 15707821147
We know that at least one will fail.
rob
--
_______________________________________________
FreeIPA-users mailing list -- [email protected]
To unsubscribe send an email to [email protected]
Fedora Code of Conduct:
https://docs.fedoraproject.org/en-US/project/code-of-conduct/
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives:
https://lists.fedorahosted.org/archives/list/[email protected]
Do not reply to spam, report it:
https://pagure.io/fedora-infrastructure/new_issue
