On Fri, 2013-03-15 at 16:07 -0400, John Dennis wrote: > On 03/15/2013 12:56 PM, Alexander Bokovoy wrote: > > Hi! > > > > I was investigating why installing master fails on F18 + > > updates-testing and found out that install fails with > > freeipa-server-3.1.99-0.20130313T1838Zgit158bf45.fc18.x86_64 from > > ipa-devel repo > > > > 2013-03-15T16:17:40Z DEBUG args=/usr/bin/certutil -d /etc/httpd/alias > > -R -s CN=jano.ipa.team,O=IPA.TEAM -o > > /var/lib/ipa/ipa-aza7Wg/tmpcertreq -k rsa -g 2048 -z > > /etc/httpd/alias/noise.txt -f /etc/httpd/alias/pwdfile.txt -a > > 2013-03-15T16:17:41Z DEBUG Process finished, return code=0 > > 2013-03-15T16:17:41Z DEBUG stdout= 2013-03-15T16:17:41Z DEBUG > > stderr= > > > > Generating key. This may take a few moments... > > I believe this is a known problem in certutil where it writes data to > the wrong file descriptor. The problem was fixed upstream about 10 days > ago, I'm not sure if Fedora has the fix yet or not. Kai would know, I've > added him on the cc list.
Hi John, in the above cited message, you didn't include the failure you were seeing, so I have to guess. This one is the only functional patch to certutil during the last 8-9 weeks that I could find. Do you refer to this one? Bug 840714 - certutil -a does not produce ASCII output https://bugzilla.mozilla.org/show_bug.cgi?id=840714 It was a regression in NSS 3.14.2, and it got fixed in 3.14.3. Fedora 18 apparently received that update on Feb 24. http://tinyurl.com/bym4rlh If the above didn't help, please send more details or ping me on IRC. Regards Kai _______________________________________________ Freeipa-devel mailing list Freeipa-devel@redhat.com https://www.redhat.com/mailman/listinfo/freeipa-devel