Fedora Updates System

Comments

109 Comments

frenaud commented & provided feedback on freeipa-4.13.0-2.fc43 3 months ago

karma

Tested server + replica installation, works well

frenaud commented & provided feedback on sscg-4.0.3-1.fc43 3 months ago

karma

I tested the following command, which is now working:

sscg -q \
     --cert-file           /etc/pki/tls/certs/localhost.crt         \
     --cert-key-file       /etc/pki/tls/private/localhost.key       \
     --ca-file             /etc/pki/tls/certs/localhost.crt         \
     --no-dhparams-file                                             \
     --lifetime            365                                      \
     --hostname            $FQDN                                    \
     --email               root@$FQDN

Also tested with FreeIPA and a client using mod_ssl and mod_md, works well. Thanks for the patch!

BZ#2416497 sscg-4.0.1 is available

frenaud commented & provided feedback on sscg-4.0.1-1.fc43 4 months ago

karma

With this version, IPA fails to obtain an ACME certificate using mod_md and mod_ssl. Mod_ssl is launching the service httpd-init (Unit file stored in /usr/lib/systemd/system/httpd-init.service) which calls /usr/libexec/httpd-ssl-gencerts. This command in turn calls sscg with the following arguments:

sscg -q \
     --cert-file           /etc/pki/tls/certs/localhost.crt         \
     --cert-key-file       /etc/pki/tls/private/localhost.key       \
     --ca-file             /etc/pki/tls/certs/localhost.crt         \
     --no-dhparams-file                                             \
     --lifetime            365                                      \
     --hostname            $FQDN                                    \
     --email               root@$FQDN

With sscg-4.0.0-1.fc43.x86_64, there is no issue. With sscg-4.0.1-1.fc43, the command fails, likely because we provide the same file for the cert and the CA.

frenaud commented & provided feedback on dogtag-pki-11.8.0-1.fc43 4 months ago

karma

I tested the scenarios from IDM-3799 and they are now fixed, thanks

frenaud commented & provided feedback on freeipa-4.12.5-3.fc43 5 months ago

karma

Tested the installation, works well.

frenaud commented & provided feedback on freeipa-4.12.5-3.fc42 5 months ago

karma

Tested new installation and upgrade, works well

frenaud commented & provided feedback on dogtag-pki-11.7.0-5.fc42 5 months ago

karma

Test in PR https://github.com/freeipa/freeipa/pull/7977, works well