New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
installation of IPA with (embedded) CA fails #3287
Comments
Comment from dmoluguw (@SilleBille) at 2020-04-06 11:26:38 Hello @fcami Thanks for filing the issue. We saw this issue last week and is due to From the provided Log URL, following version is being pulled from @pki/master COPR repo:
The issue is related to SSLEngine changes that were introduced in JSS. @cipherboy has been working on fixing it. PS: we have turned off pulling latest JSS in PKI's official CI. |
Comment from dmoluguw (@SilleBille) at 2020-04-06 11:26:39 Metadata Update from @SilleBille:
|
Comment from frenaud (@flo-renaud) at 2020-04-13 04:35:40 During last weekly test, the ipa-server-install command failed at the same point but with a different error:
Version of jss: |
Comment from cipherboy (@cipherboy) at 2020-04-13 09:33:12 @flo-renaud Fixed here:
Later branches of Dogtag don't yet have RSA/PSS support. |
Comment from frenaud (@flo-renaud) at 2020-05-28 11:19:42 The latest run shows that the issue was fixed: PR 207 @cipherboy you can close this issue. |
Comment from cipherboy (@cipherboy) at 2020-06-15 14:38:42 Metadata Update from @cipherboy:
|
This issue was migrated from Pagure Issue #3170. Originally filed by fcami (@fcami) on 2020-04-06 08:54:55:
Installation fails at:
"requesting RA certificate from CA"
with the following logs:
Certificate issuance failed (CA_REJECTED: Server at "https://master.ipa.test:8443/ca/agent/ca//profileProcess" replied: 1: You did not provide a valid certificate for this operation)
Full logs:
This is visible in the nightly PR 4498.
Sample logs: 1, 2, 3, 4.
For worker logs, please remove the "report.html" part of the URL.
The text was updated successfully, but these errors were encountered: