On Wed, Sep 7, 2016 at 2:10 PM, Natxo Asenjo <natxo.ase...@gmail.com> wrote:

> hi,
> using centos 6.8 (server and client), when trying to view some hosts we
> get this error:
> $ ipa host-find host-1920.sub.domain.tld
> ipa: ERROR: Certificate format error: (SEC_ERROR_LEGACY_DATABASE) The
> certificate/key database is in an old, unsupported format.

this is happening wih all the host objects (all enrolled with
certificates). I don't usually look at the hosts objects that much, but
yesterday patches were applied and the ipa-server package was updated
(among other things):

Updated ipa-server-3.0.0-50.el6.centos.1.i686
Update             3.0.0-50.el6.centos.2.i686

So it looks like this is the culprit?

Manage your subscription for the Freeipa-users mailing list:
Go to http://freeipa.org for more info on the project

Reply via email to