freeipa

#6304 cert-find --certificate does not work for certificates not in LDAP
Closed: Fixed Opened by jcholast.

Closed: Fixed
Reopen Issue

With the --certificate option, cert-find should always return a result, but it currently doesn't if the provided certificate is not found in LDAP:

$ ipa cert-find --certificate=... --all
---------------------
1 certificate matched
---------------------
...
  Owner service: test/test.example.com@EXAMPLE.COM
----------------------------
Number of entries returned 1
----------------------------
$ ipa service-mod test/test.example.com --certificate=
-----------------------------------------------------------------------
Modified service "test/test.example.com@EXAMPLE.COM"
-----------------------------------------------------------------------
...
$ ipa cert-find --certificate=... --all
----------------------
0 certificates matched
----------------------
----------------------------
Number of entries returned 0
----------------------------

The second cert-find should return the same certificate as the first one.

Linked to Bugzilla bug: https://bugzilla.redhat.com/show_bug.cgi?id=1370519 (Red Hat Enterprise Linux 7)

master:

  • b7b6faf14aaa8ac677ab9ebc2bcbf87e6b2a1146 cert: fix cert-find --certificate when the cert is not in LDAP

ipa-4-4:

  • 5d4f7b78bc4d179544810419f73ec4d48b0a2a76 cert: fix cert-find --certificate when the cert is not in LDAP

Metadata Update from @jcholast:
- Issue assigned to jcholast
- Issue set to the milestone: FreeIPA 4.4.2
Metadata
None
None
None
Normal
defect
IPA
Static archive. pagure.io was sunset in 2026; this is a read-only snapshot.
Red Hat Logo

Fedora is sponsored by Red Hat. Learn more about the relationship between Red Hat and Fedora »

© Red Hat, Inc. and others.