freeipa

#6288 ipa-certupdate fails with "CA is not configured"
Closed: Fixed Opened by frenaud.

Closed: Fixed
Reopen Issue

With a CA-less ipa server, ipa-certupdate always fails with the following error:

$ ipa-certupdate
trying https://vm-180.abc.idm.lab.eng.brq.redhat.com/ipa/session/json
Forwarding 'ca_is_enabled' to json server 'https://vm-180.abc.idm.lab.eng.brq.redhat.com/ipa/session/json'
Forwarding 'ca_find/1' to json server 'https://vm-180.abc.idm.lab.eng.brq.redhat.com/ipa/session/json'
CA is not configured
The ipa-certupdate command failed.

The code is calling ca_find but not catching the exception returned because the CA is not configured.

Ticket has been cloned to Bugzilla: https://bugzilla.redhat.com/show_bug.cgi?id=1373359

master:

  • b36ee723b77a2721f4200d5df02268a9bd6a60b5 Fix ipa-certupdate for CA-less installation

ipa-4-4:

  • 1b8f6ec58600ad4bbfb538ddcff659ea1ba2c324 Fix ipa-certupdate for CA-less installation

Fix was overriden by commit 08b768313020c45bfa82d67cd214afabf605f4b3

master:

  • cd75eb3b2557cbd97e93be3e1ceeef21b948a694 Fix regression introduced in ipa-certupdate

ipa-4-4:

  • 2eeab3acf43c8f33729b48779c12aea57e453075 Fix regression introduced in ipa-certupdate

Metadata Update from @frenaud:
- Issue assigned to frenaud
- Issue set to the milestone: FreeIPA 4.4.2
Metadata
None
None
None
Normal
defect
IPA
None
https://github.com/freeipa/freeipa/pull/71
Static archive. pagure.io was sunset in 2026; this is a read-only snapshot.
Red Hat Logo

Fedora is sponsored by Red Hat. Learn more about the relationship between Red Hat and Fedora »

© Red Hat, Inc. and others.