Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Don't error in DogtagCertsConnectivityCheck with external CAs #286

Merged
merged 1 commit into from
Jul 19, 2023

Commits on Jul 18, 2023

  1. Don't error in DogtagCertsConnectivityCheck with external CAs

    The purpose of the check is to validate that communication
    with the CA works. In the past we looked up serial number 1
    for this check. The problem is that if the server was
    installed with RSNv3 so had no predictable CA serial number.
    
    It also was broken with externally-issued CA certificate which
    cannot be looked up in IPA.
    
    Instead use the IPA RA agent certificate which should definitely
    have a serial number in the IPA CA if one is configured.
    
    Fixes: freeipa#285
    
    Signed-off-by: Rob Crittenden <rcritten@redhat.com>
    rcritten committed Jul 18, 2023
    Configuration menu
    Copy the full SHA
    ed4a370 View commit details
    Browse the repository at this point in the history