Bug#970880: [Pkg-freeipa-devel] Bug#970880: Bug#970880: freeipa-server: FreeIPA server installation fails with Certificate issuance failed (CA_REJECTED)

2021-10-10 Thread Spencer Olson
Did some more investigation. I downloaded the packages that are being used on centos stream 8. First I tried my test code with their version of libssl3.so preloaded: it failed in the same way as all the others failed--not surprisingly since its version is much later than the 3.39 version where

Bug#970880: [Pkg-freeipa-devel] Bug#970880: Bug#970880: freeipa-server: FreeIPA server installation fails with Certificate issuance failed (CA_REJECTED)

2021-10-09 Thread Spencer Olson
Cloned nss repo and did a git bisect: the first commit that causes problems is at the upstream merge of 3.39 (upstream/3.39). >From a very brief perusal of the upstream changes, I see there are some edits with respect to TLS1.3--perhaps this is the reason for our problems--I haven't yet looked

Bug#970880: [Pkg-freeipa-devel] Bug#970880: Bug#970880: freeipa-server: FreeIPA server installation fails with Certificate issuance failed (CA_REJECTED)

2021-10-09 Thread Spencer Olson
Since it doesn't look like any progress has been made on this, I've started to work through some debugging. Right now, it looks like the problem is probably actually due to a change in libnss3. In fact, the problem appears to be specifically in libssl3.so from the libnss3 package. The problem:

Bug#970880: [Pkg-freeipa-devel] Bug#970880: Bug#970880: freeipa-server: FreeIPA server installation fails with Certificate issuance failed (CA_REJECTED)

2021-01-06 Thread Жохов Александр
Hello. >> 2021-01-05 01:07:32 [main] WARNING: Failed to scan >> [file:/usr/share/java/el-api-3.0.jar] from classloader hierarchy >> java.io.IOException: >> >> Caused by: java.nio.file.NoSuchFileException: >> /usr/share/java/el-api-3.0.jar >Figure out which jar is trying to search that and

Bug#970880: [Pkg-freeipa-devel] Bug#970880: Bug#970880: freeipa-server: FreeIPA server installation fails with Certificate issuance failed (CA_REJECTED)

2021-01-06 Thread Timo Aaltonen
On 5.1.2021 9.29, Жохов Александр wrote: Good afternoon, sorry for the bad english. Faced a similar problem. Catalina ca logs 2021-01-05 01:07:32 [main] WARNING: Failed to scan [file:/usr/share/java/el-api-3.0.jar] from classloader hierarchy java.io.IOException: > Caused by: