freeipa

#7720 Wrong certmonger key used in tracking for mod_nss to mod_ssl upgrades
Opened by rcritten. Modified

Open
Close Issue

Issue

commit 4596674481dbbeb9026f0ff793699479e1cfb09d enabled upgrades from mod_nss to mod_ssl. A wrong value was used for the certmonger tracking, key-storage rather than key-file, for the Apache key file.

@rcritten what is the impact of this issue ; how was it discovered?

I haven't delved into it too deeply yet.

Creating the tracking works fine otherwise we'd have seen issues when testing upgrades. The impact is that searches which in clue the key as criteria will fail.

I noticed this while working on the cert checking tool I'm toying with.

@rcritten cool, thanks for clarifying.
Metadata
None
None
None
None
Low
Static archive. pagure.io was sunset in 2026; this is a read-only snapshot.
Red Hat Logo

Fedora is sponsored by Red Hat. Learn more about the relationship between Red Hat and Fedora »

© Red Hat, Inc. and others.