freeipa

#6759 replica prepare broken on KDC cert export
Closed: fixed Opened by stlaz.

Closed: fixed
Reopen Issue

Running ipa-replica-prepare shows

error exporting Server certificate: Command '/usr/bin/openssl pkcs12 -export -name KDC-Cert -in /tmp/tmpFS88zQipa/realm_info/kdc.pem -out /tmp/tmpFS88zQipa/realm_info/pkinitcert.p12 -passout file:/tmp/tmpFS88zQipa/realm_info/pkinit_pin.txt' returned non-zero exit status 1

This might have been broken for a long time, the logic of the file export is nonsensical in current IPA.

Metadata Update from @stlaz:
- Issue assigned to stlaz

Metadata Update from @stlaz:
- Custom field on_review adjusted to https://github.com/freeipa/freeipa/pull/580

master:

  • 46d4d534c08d14756b989e157e87a078d174ad5c Remove pkinit from ipa-replica-prepare

Metadata Update from @mbasti:
- Issue close_status updated to: fixed
- Issue set to the milestone: FreeIPA 4.5
- Issue status updated to: Closed (was: Open)
Metadata
None
None
None
None
Static archive. pagure.io was sunset in 2026; this is a read-only snapshot.
Red Hat Logo

Fedora is sponsored by Red Hat. Learn more about the relationship between Red Hat and Fedora »

© Red Hat, Inc. and others.