freeipa

#7245 Custom ca-subject logging
Closed: fixed Opened by rcritten.

Closed: fixed
Reopen Issue

Logging is a bit incomplete when using a custom CA subject passed in via --ca-subject.

If there is a problem finding the IPA CA certificate then the installer will log:

ERROR IPA CA certificate not found in /tmp/servercert.pem, /tmp/cacert.pem

It should include the subject that is being looked for.

Metadata Update from @rcritten:
- Issue tagged with: easyfix

@rcritten can you please provide a bit more context. e.g. what command causes the error mentioned above?

Metadata Update from @pvoborni:
- Issue tagged with: debugging

This is from a second stage ipa-server-install with an external CA.

This message will be seen if none of the certificates passed in has a subject which matches what IPA is expecting it to be. The log message doesn't show what IPA is expecting, just that it doesn't match "something".

PR:https://github.com/freeipa/freeipa/pull/1447

master:

  • fc8c130b976d93167c51e0cdaa34682e3d46f2b8 Custom ca-subject logging

ipa-4-6:

  • f8ebd6e231d8b7c618c2949f9949090f79c6dfde Custom ca-subject logging

Metadata Update from @cheimes:
- Issue close_status updated to: fixed
- Issue status updated to: Closed (was: Open)
Metadata
None

debugging easyfix

None
None
None
Static archive. pagure.io was sunset in 2026; this is a read-only snapshot.
Red Hat Logo

Fedora is sponsored by Red Hat. Learn more about the relationship between Red Hat and Fedora »

© Red Hat, Inc. and others.