Re: [Freeipa-users] certificates not renewing CA_UNREACHEABLE

2016-09-20 Thread Natxo Asenjo
ok, so all certs are renewed (dogldap and http). On Tue, Sep 20, 2016 at 11:49 AM, Natxo Asenjo wrote: > > > On Mon, Sep 19, 2016 at 5:27 PM, Rob Crittenden > wrote: > >> Natxo Asenjo wrote: >> >>> hi, >>> >>> >>> On Fri, Sep 16, 2016 at 4:22 PM,

Re: [Freeipa-users] certificates not renewing CA_UNREACHEABLE

2016-09-20 Thread Natxo Asenjo
On Mon, Sep 19, 2016 at 5:27 PM, Rob Crittenden wrote: > Natxo Asenjo wrote: > >> hi, >> >> >> On Fri, Sep 16, 2016 at 4:22 PM, Rob Crittenden > > Ok, how about we work around the problem. > Gladly ;-) > Since it is failing on the revocation what you

Re: [Freeipa-users] certificates not renewing CA_UNREACHEABLE

2016-09-19 Thread Rob Crittenden
Natxo Asenjo wrote: hi, On Fri, Sep 16, 2016 at 4:22 PM, Rob Crittenden > wrote: The 3 certs you list are the ones that are renewed via the IPA API (as opposed to the subsystem certs renewed directly by dogtag). I think the failures

Re: [Freeipa-users] certificates not renewing CA_UNREACHEABLE

2016-09-16 Thread Petr Vobornik
On 09/16/2016 04:22 PM, Rob Crittenden wrote: > Natxo Asenjo wrote: >> hi, >> >> >> On Fri, Sep 16, 2016 at 10:34 AM, Martin Basti > > wrote: >> >> >> >> On 16.09.2016 09:38, Natxo Asenjo wrote: >>> hi, >>> >>> >>> On Thu, Sep 15, 2016 at

Re: [Freeipa-users] certificates not renewing CA_UNREACHEABLE

2016-09-16 Thread Rob Crittenden
Natxo Asenjo wrote: hi, On Fri, Sep 16, 2016 at 10:34 AM, Martin Basti > wrote: On 16.09.2016 09:38, Natxo Asenjo wrote: hi, On Thu, Sep 15, 2016 at 1:03 PM, Natxo Asenjo

Re: [Freeipa-users] certificates not renewing CA_UNREACHEABLE

2016-09-16 Thread Natxo Asenjo
hi, On Fri, Sep 16, 2016 at 10:34 AM, Martin Basti wrote: > > > On 16.09.2016 09:38, Natxo Asenjo wrote: > > hi, > > > On Thu, Sep 15, 2016 at 1:03 PM, Natxo Asenjo >> >> On Thu, Sep 15, 2016 at 12:49 PM, Martin Basti

Re: [Freeipa-users] certificates not renewing CA_UNREACHEABLE

2016-09-16 Thread Martin Basti
On 16.09.2016 09:38, Natxo Asenjo wrote: hi, On Thu, Sep 15, 2016 at 1:03 PM, Natxo Asenjo On Thu, Sep 15, 2016 at 12:49 PM, Martin Basti > wrote: On 15.09.2016 12:44,

Re: [Freeipa-users] certificates not renewing CA_UNREACHEABLE

2016-09-16 Thread Natxo Asenjo
hi, On Thu, Sep 15, 2016 at 1:03 PM, Natxo Asenjo > > On Thu, Sep 15, 2016 at 12:49 PM, Martin Basti wrote: > >> >> >> On 15.09.2016 12:44, Natxo Asenjo wrote: >> >> hi, >> >> On Thu, Sep 15, 2016 at 12:33 PM, Martin Basti

Re: [Freeipa-users] certificates not renewing CA_UNREACHEABLE

2016-09-15 Thread Natxo Asenjo
On Thu, Sep 15, 2016 at 12:49 PM, Martin Basti wrote: > > > On 15.09.2016 12:44, Natxo Asenjo wrote: > > hi, > > On Thu, Sep 15, 2016 at 12:33 PM, Martin Basti wrote: > >> >> Hello, >> >> usually the most information can be found here >>

Re: [Freeipa-users] certificates not renewing CA_UNREACHEABLE

2016-09-15 Thread Martin Basti
On 15.09.2016 12:44, Natxo Asenjo wrote: hi, On Thu, Sep 15, 2016 at 12:33 PM, Martin Basti > wrote: Hello, usually the most information can be found here /var/log/pki/pki-tomcat/ca/debug mmm, in this centos 6.8 system that does

Re: [Freeipa-users] certificates not renewing CA_UNREACHEABLE

2016-09-15 Thread Natxo Asenjo
hi, On Thu, Sep 15, 2016 at 12:33 PM, Martin Basti wrote: > > Hello, > > usually the most information can be found here > /var/log/pki/pki-tomcat/ca/debug > mmm, in this centos 6.8 system that does not exist: # ls -l /var/log/pki/pki-tomcat/ca/debug ls: cannot access

Re: [Freeipa-users] certificates not renewing CA_UNREACHEABLE

2016-09-15 Thread Martin Basti
On 15.09.2016 11:29, Natxo Asenjo wrote: hi, one of our master servers has a problem with its certificates: # getcert list Number of certificates and requests being tracked: 8. Request ID '20121107212513': status: CA_UNREACHABLE ca-error: Server failed request, will retry: