freeipa

#5611 ipa-ca-install fails when installing CA master
Closed: Fixed Opened by jcholast.

Closed: Fixed
Reopen Issue

When installing new CA master, ipa-ca-install fails with:

  [23/26]: restarting certificate server
  [24/26]: migrating certificate profiles to LDAP
  [error] IOError: [Errno 2] No such file or directory: '/var/lib/pki-ca/conf/CS.cfg'
Your system may be partly configured.
Run /usr/sbin/ipa-server-install --uninstall to clean up.

This happens because the dogtag_version option is not set to 10 on API initialization, so Dogtag 9 paths are used.

Does this apply only to 4.2? As in 4.3 in #5197, the support for Dogtag 9 was removed.

Yes, this is a 4.2 only bug.

Ticket has been cloned to Bugzilla: https://bugzilla.redhat.com/show_bug.cgi?id=1301687

ipa-4-2:

  • 7c78a1f1a4637d0b736b976822646f51926aa214 CA install: explicitly set dogtag_version to 10

Metadata Update from @jcholast:
- Issue assigned to jcholast
- Issue set to the milestone: FreeIPA 4.2.4
Metadata
None
None
None
Low
defect
IPA
1
Static archive. pagure.io was sunset in 2026; this is a read-only snapshot.
Red Hat Logo

Fedora is sponsored by Red Hat. Learn more about the relationship between Red Hat and Fedora »

© Red Hat, Inc. and others.