URL: https://github.com/freeipa/freeipa/pull/367 Title: #367: Remove nsslib from IPA
HonzaCholasta commented: """ CA-less to CA-full `ipa-ca-install` fails with: ``` 2017-02-28T07:24:47Z DEBUG File "/usr/lib/python2.7/site-packages/ipaserver/install/installutils.py", line 892, in run_script return_value = main_function() File "/sbin/ipa-ca-install", line 304, in main promote(safe_options, options, filename) File "/sbin/ipa-ca-install", line 270, in promote install_master(safe_options, options) File "/sbin/ipa-ca-install", line 235, in install_master ca.install(True, None, options) File "/usr/lib/python2.7/site-packages/ipaserver/install/ca.py", line 204, in install install_step_1(standalone, replica_config, options) File "/usr/lib/python2.7/site-packages/ipaserver/install/ca.py", line 325, in install_step_1 config_ipa=True, config_compat=True) File "/usr/lib/python2.7/site-packages/ipalib/install/certstore.py", line 410, in put_ca_cert_nss config_ipa, config_compat) File "/usr/lib/python2.7/site-packages/ipalib/install/certstore.py", line 233, in put_ca_cert config_ipa=config_ipa, config_compat=config_compat) File "/usr/lib/python2.7/site-packages/ipalib/install/certstore.py", line 160, in update_ca_cert subject, issuer_serial, public_key = _parse_cert(dercert) File "/usr/lib/python2.7/site-packages/ipalib/install/certstore.py", line 39, in _parse_cert raise ValueError("failed to decode certificate: %s" % e) 2017-02-28T07:24:47Z DEBUG The ipa-ca-install command failed, exception: ValueError: failed to decode certificate: Unable to load certificate ``` """ See the full comment at https://github.com/freeipa/freeipa/pull/367#issuecomment-282963327
-- Manage your subscription for the Freeipa-devel mailing list: https://www.redhat.com/mailman/listinfo/freeipa-devel Contribute to FreeIPA: http://www.freeipa.org/page/Contribute/Code