freeipa

#8105 getcert with -F option returns before cacert file is created
Closed: fixed by rcritten. Opened by rcritten.

Closed: fixed
Reopen Issue

Ticket was cloned from Red Hat Bugzilla (product Red Hat Enterprise Linux 8): Bug 1759281

Description of problem:
When getcert is invoked with the -F option, it is supposed to store the CA cert
in a file.
When invoked with the -w option, it will wait until the cert is issued.  But it
will occasionally also return before the CA cert file is written.
This causes issues when trying to invoke certmonger from puppet-certmonger for
instance, because subsequent calls that rely on the existence of that file (to
change its permissions for instance) will fail.
Version-Release number of selected component (if applicable):
How reproducible:
Steps to Reproduce:
1.
2.
3.
Actual results:
Expected results:
Additional info:

Metadata Update from @rcritten:
- Custom field rhbz adjusted to https://bugzilla.redhat.com/show_bug.cgi?id=1759281

Metadata Update from @rcritten:
- Issue assigned to rcritten

https://github.com/freeipa/freeipa/pull/3826

master:

  • 1e3de172696a98914f77e50fd64bc8b63360cd27 Add conditional restart (try-restart) capability to services
  • 3593e5362206fd9287e97fe2cee229a1117811ff Conditionally restart certmonger after client installation

ipa-4-8:

  • 24e882f1daa149b89180ba93fc02e6d4a7fd3109 Add conditional restart (try-restart) capability to services
  • 6bac58ca5c32be4302707c1fb6f992faca84b77b Conditionally restart certmonger after client installation

Metadata Update from @rcritten:
- Issue close_status updated to: fixed
- Issue status updated to: Closed (was: Open)

master:

  • 6739d8722c4a3e84cdcf1e058c6fd15317ac0ca4 Move wait_for_request() method to tasks.py
  • 9bcc57d9e01625a122811a50f78acde247b5791d Test if getcert creates cacert file with -F option

ipa-4-8:

  • 5d8d9198ce1ddfd44eb7c0268c397359e6239fca Move wait_for_request() method to tasks.py
  • 937fb1d9518c54bf9c05bc0b7d6f43b29971eb3c Test if getcert creates cacert file with -F option

Metadata Update from @frenaud:
- Custom field test_case adjusted to ipatests/test_integration/test_cert.py::TestInstallMasterClient::test_cacert_file_appear_with_option_F
Metadata
None
None
None
None
ipatests/test_integration/test_cert.py::TestInstallMasterClient::test_cacert_file_appear_with_option_F
Static archive. pagure.io was sunset in 2026; this is a read-only snapshot.
Red Hat Logo

Fedora is sponsored by Red Hat. Learn more about the relationship between Red Hat and Fedora »

© Red Hat, Inc. and others.