freeipa

#9099 KRA GetStatus service blocked by IPA proxy
Closed: fixed by frenaud. Opened by edewata.

Closed: fixed
Reopen Issue

Currently IPA proxy does not provide access to KRA GetStatus service:
https://github.com/freeipa/freeipa/blob/master/install/share/ipa-pki-proxy.conf.template

Please provide access to /kra/admin/kra/getStatus. This is needed by pki-healthcheck tool in order to work properly in IPA environment.

Metadata Update from @frenaud:
- Issue assigned to frenaud

Metadata Update from @frenaud:
- Custom field on_review adjusted to https://github.com/freeipa/freeipa/pull/6156

Just FYI, the pki-healthcheck will be fixed by this PR:
https://github.com/dogtagpki/pki/pull/3901

The change in ipa-pki-proxy.conf.template is needed to utilize that fix in ipa-healthcheck.

master:

  • f3636c6afa75d9822a2fd1a535415b09f3fe1867 ipa-pki-proxy.conf: provide access to /kra/admin/kra/getStatus

ipa-4-9:

  • 9bae5492270d8b695999cd82831cbee62b04626b ipa-pki-proxy.conf: provide access to /kra/admin/kra/getStatus

Metadata Update from @frenaud:
- Issue close_status updated to: fixed
- Issue status updated to: Closed (was: Open)

Metadata Update from @frenaud:
- Custom field rhbz adjusted to https://bugzilla.redhat.com/show_bug.cgi?id=2049167

Metadata Update from @frenaud:
- Custom field rhbz adjusted to https://bugzilla.redhat.com/show_bug.cgi?id=2049167, https://bugzilla.redhat.com/show_bug.cgi?id=2049174 (was: https://bugzilla.redhat.com/show_bug.cgi?id=2049167)
Metadata
None
None
None
None
https://github.com/freeipa/freeipa/pull/6156
Static archive. pagure.io was sunset in 2026; this is a read-only snapshot.
Red Hat Logo

Fedora is sponsored by Red Hat. Learn more about the relationship between Red Hat and Fedora »

© Red Hat, Inc. and others.