freeipa

#7282 renew_ra_cert Certmonger hook fails to update people entry
Closed: fixed Opened by ftweedal.

Closed: fixed
Reopen Issue

Issue

Post-renewal hook for RA Agent certificate fails with error:

Nov 01 00:04:40 f27-3.ipa.local /dogtag-ipa-ca-renew-agent-submit[19602]: Forwarding request to dogtag-ipa-renew-agent                                                                                            
Nov 01 00:04:40 f27-3.ipa.local /dogtag-ipa-ca-renew-agent-submit[19602]: dogtag-ipa-renew-agent returned 0                                                                                                       
Nov 01 00:04:45 f27-3.ipa.local /renew_ra_cert[19949]: Caught unhandled exception: 'bytes' object has no attribute 'subject'                                                                                      
Nov 01 00:04:45 f27-3.ipa.local /renew_ra_cert[19949]: Update failed.                                    
Nov 01 00:04:45 f27-3.ipa.local certmonger[19956]: Certificate in file "/var/lib/ipa/ra-agent.pem" issued by CA and saved.

Steps to Reproduce

  1. resubmit Certmonger tracking request for RA Agent certificate

Actual behavior

Error in Certmonger journal and failure to properly update the ipara ou=People entry.
This causes subsequent operations against Dogtag to fail due to authentication failure.

Expected behavior

People entry gets updated properly. CA related operations continue to work.

Version/Release/Distribution

master and ipa-4-6.

Metadata Update from @ftweedal:
- Issue assigned to ftweedal

Metadata Update from @ftweedal:
- Custom field on_review adjusted to https://github.com/freeipa/freeipa/pull/1334

Metadata Update from @frenaud:
- Issue set to the milestone: FreeIPA 4.6

master:

  • 3eb3844353418cf69c140d407973a9a2ff731d47 renew_ra_cert: fix update of IPA RA user entry

ipa-4-6:

  • 9d5e3d199d8a05102805f8550f6fc649f29a985c renew_ra_cert: fix update of IPA RA user entry

Metadata Update from @cheimes:
- Issue close_status updated to: fixed
- Issue status updated to: Closed (was: Open)
Metadata
None
None
None
None
None
https://github.com/freeipa/freeipa/pull/1334
Static archive. pagure.io was sunset in 2026; this is a read-only snapshot.
Red Hat Logo

Fedora is sponsored by Red Hat. Learn more about the relationship between Red Hat and Fedora »

© Red Hat, Inc. and others.