freeipa

#7523 external CA installation: step two reports self-signed configuration
Closed: fixed Opened by ftweedal.

Closed: fixed
Reopen Issue

FreeIPA installation reports the CA configuration that will be used, including
whether the CA is self-signed or externally-signed, e.g.:

...
The CA will be configured with:                     
Subject DN:   CN=Certificate Authority,o=IPA.LOCAL 201805021017
Subject base: o=IPA.LOCAL 201805021017                         
Chaining:     externally signed (two-step installation)        
...

Installation with external CA takes two steps. The first step correctly reports
the externally signed configuration (like the above), but the second step reports
a self-signed configuration:

The CA will be configured with:                     
Subject DN:   CN=Certificate Authority,o=IPA.LOCAL 201805021017
Subject base: o=IPA.LOCAL 201805021017                         
Chaining:     self-signed

The CA is externally signed, but the configuration gets reported incorrectly at the
second step. This could confuse the administrator.

PR: https://github.com/freeipa/freeipa/pull/1894

Metadata Update from @ftweedal:
- Custom field on_review adjusted to https://github.com/freeipa/freeipa/pull/1894

Metadata Update from @cheimes:
- Issue set to the milestone: FreeIPA 4.6.4

master:

  • 6659392a0a5064b25f8d0b5a2fe805a172b7e586 install: fix reported external CA configuration

Metadata Update from @cheimes:
- Issue set to the milestone: FreeIPA 4.7 (was: FreeIPA 4.6.4)

Metadata Update from @cheimes:
- Issue close_status updated to: fixed
Metadata

bug easyfix

None
None
None
Static archive. pagure.io was sunset in 2026; this is a read-only snapshot.
Red Hat Logo

Fedora is sponsored by Red Hat. Learn more about the relationship between Red Hat and Fedora »

© Red Hat, Inc. and others.