Yogeshwaran via FreeIPA-users wrote: > Hi Team, > > I am also facing below issues. Can you guide as to fix this issue? > > Error: > > idm.domain.io <http://idm.domain.io> ipa-pki-wait-running[8217]: > pki.client: /usr/libexec/ipa/ipa-pki-wait-running:63: The subsystem in > PKIConnection.__init__() has been deprecated (https:/> Feb 02 15:22:16 > idm.domain.io <http://idm.domain.io> ipa-pki-wait-running[8217]: > ipa-pki-wait-running: Created connection http://idm.domain.io:8080/caFeb > 02 15:22:16 idm.domain.io <http://idm.domain.io> > ipa-pki-wait-running[8217]: ipa-pki-wait-running: Connection failed: > HTTPConnectionPool(host='idm.domain.io <http://idm.domain.io>', > port=8080): Max retries exceeded with url: /> Feb 02 15:22:17 > idm.domain.io <http://idm.domain.io> ipa-pki-wait-running[8217]: > ipa-pki-wait-running: Connection failed: > HTTPConnectionPool(host='idm.domain.io <http://idm.domain.io>', > port=8080): Max retries exceeded with url: /> Feb 02 15:22:18 > idm.domain.io <http://idm.domain.io> server[8216]: WARNING: Some of the > specified [protocols] are not supported by the SSL engine and have been > skipped: [[TLSv1, TLSv1.1]]
This means that the CA did not start for some reason and the tool timed out waiting for it. You'll need to examine the debug log in /var/log/pki/pki-tomcat/ca to see why it failed to start. rob -- _______________________________________________ FreeIPA-users mailing list -- [email protected] To unsubscribe send an email to [email protected] Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedorahosted.org/archives/list/[email protected] Do not reply to spam, report it: https://pagure.io/fedora-infrastructure/new_issue
