Hello Scott,

Lots of fun things going on with the above. I experienced the same issue, and 
your thread was at the top of my search results when I first started 
investigating. Sadly, it does not appear that a solution was posted to it there 
yet, hence my reply below.

What I found:
https://access.redhat.com/solutions/4796941  This talks about disabling TLS 
1.3. I checked, and on our server 1.3 was disabled by default.

After a little more searching I found the thread below, which for me at least 
contained the solution:
https://lists.fedorahosted.org/archives/list/[email protected]/thread/NZLD5WHI4GCM2B437WPPD4HIHSCJT45F/

Reading through the thread it appears there is a conflict that can occur during 
updates that can cause secretRequired in /etc/pki/pki-tomcat/server.xml to not 
be set correctly. secretRequired should match secret in that file (it's in 2 
different spots, so make sure to update both).
_______________________________________________
FreeIPA-users mailing list -- [email protected]
To unsubscribe send an email to [email protected]
Fedora Code of Conduct: 
https://docs.fedoraproject.org/en-US/project/code-of-conduct/
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives: 
https://lists.fedorahosted.org/archives/list/[email protected]
Do not reply to spam on the list, report it: 
https://pagure.io/fedora-infrastructure

Reply via email to