freeipa

#6315 ipa cert-find doesn't show that certificate is issued by external CA
Closed: wontfix by rcritten. Opened by pvoborni.

Closed: wontfix
Reopen Issue

Ticket was cloned from Red Hat Bugzilla (product Red Hat Enterprise Linux 7): Bug 1372091

Description of problem:
ipa cert-show does not show the certificate issued by an external CA assigned
to an ipa user
Version-Release number of selected component (if applicable):
ipa-server-4.4.0-7.el7.x86_64
How reproducible:
always
Steps to Reproduce:
1. A signing certificate issued by RHCS CA is assigned to an ipa user using ipa
user-add-cert.
2.[root@qe-blade-06 ~]# ipa cert-find --users=ipasmartcarduser2
---------------------
1 certificate matched
---------------------
  Subject: UID=ipasmartcarduser2,O=Token Key User
  Issuer: CN=CA Signing Certificate,O=idmqe.lab.eng.bos.redhat.com Security
Domain
  Serial number: 28
  Serial number (hex): 0x1C
----------------------------
Number of entries returned 1
----------------------------
Actual results:
[root@qe-blade-06 ~]# ipa cert-show 28
ipa: ERROR: Certificate operation cannot be completed: EXCEPTION (Certificate
serial number 0x1c not found)
Expected results:
If ipa cert-find lists the certificate then ipa cert-show is expected to do so
too
Additional info:

triage notes:

  • H: this is expected, cert-show without --ca shows certificates issued by the IPA CA, but external CA != IPA CA
  • H: not a bug
  • pv: usability can be improved, e.g. by mentioning that it's external

Metadata Update from @pvoborni:
- Issue assigned to someone
- Issue set to the milestone: FreeIPA 4.5 backlog

Thank you taking time to submit this request for FreeIPA. Unfortunately this bug was not given priority and the team lacks the capacity to work on it at this time.

Given that we are unable to fulfil this request I am closing the issue as wontfix. To request re-consideration of this decision please reopen this issue and provide additional technical details about its importance to you.

Metadata Update from @rcritten:
- Issue close_status updated to: wontfix
- Issue status updated to: Closed (was: Open)
Metadata
None
None
None
Normal
defect
IPA
None
Static archive. pagure.io was sunset in 2026; this is a read-only snapshot.
Red Hat Logo

Fedora is sponsored by Red Hat. Learn more about the relationship between Red Hat and Fedora »

© Red Hat, Inc. and others.