freeipa

#5612 `ipa-cacert-manage install ` fails for intermediate CA certs
Closed: Fixed Opened by jcholast.

Closed: Fixed
Reopen Issue

ipa-cacert-manage install fails for intermediate (i.e. not self-signed) CA certs with the following error:

Installing CA certificate, please wait
Not a valid CA certificate: (SEC_ERROR_UNKNOWN_ISSUER) Peer's Certificate issuer is not recognized. (visit http://www.freeipa.org/page/Troubleshooting for troubleshooting guide)
The ipa-cacert-manage command failed.

Use case: required for setting up let's encrypt cert.

master:

  • ef9134640795b736731bfbdb6fe0badb3e817552 cacert install: fix trust chain validation

ipa-4-3:

  • 4fa8d3bca44b02b81783673dd14954b94ed49efa cacert install: fix trust chain validation

Metadata Update from @jcholast:
- Issue assigned to jcholast
- Issue set to the milestone: FreeIPA 4.3.1
Metadata
None
None
None
Low
defect
IPA
None
1
None
Static archive. pagure.io was sunset in 2026; this is a read-only snapshot.
Red Hat Logo

Fedora is sponsored by Red Hat. Learn more about the relationship between Red Hat and Fedora »

© Red Hat, Inc. and others.