ExternalCA : cert in master ca.p12 backup file should be imported regardless of cert validity

[pki-bot]

This issue was migrated from Pagure Issue #2490. Originally filed by gkapoor (@geetikakay) on 2016-09-28 17:59:27:

• Closed at 2017-09-01 11:34:53 as invalid
• Assigned to nobody
• Associated bugzillas
  • https://bugzilla.redhat.com/show_bug.cgi?id=1379933

---

If master and clone machines clock are out of sync that we see these issues
wherein certificates won't get imported in nssdb and when during installation
we do a nickname validation installation failed.

Steps to Reproduce:

1.Try to do externalCA installation
2.Installation test files can be picked from
https://bugzilla.redhat.com/show_bug.cgi?id=1379542

Actual results:

Installation fails in step2.

Expected results:

installation should pass.

Additional info:

debug logs are attached to corresponding bug

[pki-bot]

Comment from mharmsen (@mharmsen) at 2016-10-04 22:43:05

Per CS/DS Meeting of 10/04/2016: 10.4

[pki-bot]

Comment from gkapoor (@geetikakay) at 2017-02-27 14:11:08

Metadata Update from @geetikakay:

• Issue set to the milestone: UNTRIAGED

[pki-bot]

Comment from mharmsen (@mharmsen) at 2017-09-01 11:34:57

edewata wrote:

clone's clock must be synchronized. server won't start with invalid cert even if it's imported successfully.

[pki-bot]

Comment from mharmsen (@mharmsen) at 2017-09-01 11:34:59

Metadata Update from @mharmsen:

• Custom field feature adjusted to None
• Custom field proposedmilestone adjusted to None
• Custom field proposedpriority adjusted to None
• Custom field reviewer adjusted to None
• Custom field version adjusted to None
• Issue close_status updated to: invalid
• Issue set to the milestone: 10.5 (was: UNTRIAGED)
• Issue status updated to: Closed (was: Open)

[pki-bot]

Comment from mharmsen (@mharmsen) at 2017-09-06 19:40:15

Metadata Update from @mharmsen:

• Issue set to the milestone: 10.5.0 (was: 10.5)