URL: https://github.com/freeipa/freeipa/pull/367
Title: #367: Remove nsslib from IPA
HonzaCholasta commented:
"""
CA-less to CA-full `ipa-ca-install` fails with:
```
2017-02-28T07:24:47Z DEBUG File
"/usr/lib/python2.7/site-packages/ipaserver/install/installutils.py", line 892,
in run_script
return_value = main_function()
File "/sbin/ipa-ca-install", line 304, in main
promote(safe_options, options, filename)
File "/sbin/ipa-ca-install", line 270, in promote
install_master(safe_options, options)
File "/sbin/ipa-ca-install", line 235, in install_master
ca.install(True, None, options)
File "/usr/lib/python2.7/site-packages/ipaserver/install/ca.py", line 204, in
install
install_step_1(standalone, replica_config, options)
File "/usr/lib/python2.7/site-packages/ipaserver/install/ca.py", line 325, in
install_step_1
config_ipa=True, config_compat=True)
File "/usr/lib/python2.7/site-packages/ipalib/install/certstore.py", line
410, in put_ca_cert_nss
config_ipa, config_compat)
File "/usr/lib/python2.7/site-packages/ipalib/install/certstore.py", line
233, in put_ca_cert
config_ipa=config_ipa, config_compat=config_compat)
File "/usr/lib/python2.7/site-packages/ipalib/install/certstore.py", line
160, in update_ca_cert
subject, issuer_serial, public_key = _parse_cert(dercert)
File "/usr/lib/python2.7/site-packages/ipalib/install/certstore.py", line 39,
in _parse_cert
raise ValueError("failed to decode certificate: %s" % e)
2017-02-28T07:24:47Z DEBUG The ipa-ca-install command failed, exception:
ValueError: failed to decode certificate: Unable to load certificate
```
"""
See the full comment at
https://github.com/freeipa/freeipa/pull/367#issuecomment-282963327
--
Manage your subscription for the Freeipa-devel mailing list:
https://www.redhat.com/mailman/listinfo/freeipa-devel
Contribute to FreeIPA: http://www.freeipa.org/page/Contribute/Code
