Hi, you can use ipa-cert-fix to repair your IPA server. The guide *Managing certificates in IdM* has a chapter explaining how to use the tool: Chapter 13 <https://docs.redhat.com/en/documentation/Red_Hat_Enterprise_Linux/8/html/managing_certificates_in_idm/renewing-expired-system-certificates-when-idm-is-offline_working-with-idm-certificates#renewing-expired-system-certificates-when-idm-is-offline_working-with-idm-certificates> . *Renewing expired system certificates when IdM is offline*.
HTH, flo On Thu, Oct 10, 2024 at 1:34 AM Rowana Bejjani via FreeIPA-users < [email protected]> wrote: > I can't do anything with my ipa server, I need help > the certification is expired and pki-tomcat is not renewing it > pa-pki-wait-running: Connection failed: HTTPConnectionPool(host=' > ipa1.lesbg.com', port=8080): Max retries exceeded with url: > /ca/admin/ca/getStatus (Caused by > NewConnectionError('<urllib3.connection.HTTPConnection object at > 0x7fe4459bda00>: Failed to establish a new connection: [Errno 111] > Connection refused')) > pa-pki-wait-running[7492]: ipa-pki-wait-running: Created connection > http://ipa1.lesbg.com:8080/ca > Oct 08 21:14:39 ipa1.lesbg.com ipa-pki-wait-running[7492]: > ipa-pki-wait-running: Connection failed: HTTPConnectionPool(host=' > ipa1.lesbg.com', port=8080): Max retries exceeded with url: > /ca/admin/ca/getStatus (Caused by > NewConnectionError('<urllib3.connection.HTTPConnection object at > 0x7fe4459bda00>: Failed to establish a new connection: [Errno 111] > Connection refused')) > > my replication stopped when I create a new server and import my data I am > having the same problem > my firewall is disabled nothing on poer 8080 > -- > _______________________________________________ > FreeIPA-users mailing list -- [email protected] > To unsubscribe send an email to [email protected] > Fedora Code of Conduct: > https://docs.fedoraproject.org/en-US/project/code-of-conduct/ > List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines > List Archives: > https://lists.fedorahosted.org/archives/list/[email protected] > Do not reply to spam, report it: > https://pagure.io/fedora-infrastructure/new_issue >
-- _______________________________________________ FreeIPA-users mailing list -- [email protected] To unsubscribe send an email to [email protected] Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedorahosted.org/archives/list/[email protected] Do not reply to spam, report it: https://pagure.io/fedora-infrastructure/new_issue
