On 25.9.2020 7.12, Timo Aaltonen wrote:
On 25.9.2020 0.30, Ferran Obón wrote:
Package: freeipa-server
Version: 4.8.8-2
Severity: important
X-Debbugs-Cc: [email protected]
Dear Maintainer,
On a fresh install of Debian, the command ipa-server-install ends with
the following error:
RuntimeError: Certificate issuance failed (CA_REJECTED: Server at
"https://debian.test.lan:8443/ca/agent/ca//profileProcess" replied:
1: You did not provide a valid certificate for this operation).
Yes, this is probably related to jdk11, so could you test if installing
openjdk-8-jre and linking /usr/share/pki/java-home to
/usr/lib/jvm/java-8-openjdk-amd64 helps? AIUI dogtag is built with
support for java8.
Well, I finally tested it myself, and it won't help. So the failure is
caused by something else than dogtag java11 migration.
--
t