[Freeipa] [Bug 1813919] Re: Incorrect trust flags in NSSDB when renewing subsystem certificates

2019-01-30 Thread travis armstrong
** Description changed: OS: ubuntu 18.04 Dogtag: 10.6.0 When renewing subsystem certificates in dogtag (by following the process described here: https://www.dogtagpki.org/wiki/System_Certificate_Renewal), OCSP will break due to incorrect trust flags in NSS. The certificate IDs

[Freeipa] [Bug 1813919] [NEW] Incorrect trust flags in NSSDB when renewing subsystem certificates

2019-01-30 Thread travis armstrong
Public bug reported: OS: ubuntu 18.04 Dogtag: 10.6.0 When renewing subsystem certificates in dogtag (by following the process described here: https://www.dogtagpki.org/wiki/System_Certificate_Renewal), OCSP will break due to incorrect trust flags in NSS. The certificate IDs are: 'ocsp_signing'

[Freeipa] [Bug 1813916] [NEW] incorrect classpath in pki/cli/main.py

2019-01-30 Thread travis armstrong
Public bug reported: Ubuntu 18.04 Running the 'pki' command will fail when python executes java. The cmd array on line 101 in pki/cli/main.py has an incorrect classpath. Instead of '-Djava.ext.dirs=' + pki_lib, it needs to be: '-Djava.ext.dirs=' + pki_lib + ':/usr/share/java', ** Affects:

[Freeipa] [Bug 1772745] Re: Dogtag needs jboss-annotations-1.2-api

2019-01-30 Thread Timo Aaltonen
can use libgeronimo-annotation-1.3-spec-java instead ** Changed in: dogtag-pki (Ubuntu) Status: New => Invalid -- You received this bug notification because you are a member of FreeIPA, which is subscribed to dogtag-pki in Ubuntu. https://bugs.launchpad.net/bugs/1772745 Title: Dogtag