bugfix update in Fedora 28 for dogtag-pki, dogtag-pki-theme, & 5 more

Status: stable 2 years ago

Rebased packages for freeIPA, the dogtag CA, tomcat and tomcatjss. This update will:

  • Make dogtag and tomcatjss to work with tomcat 8.5
  • Fix compatibility issues found in freeIPA and dogtag since the NSS switch to sqlite as the database type
  • Switch FreeIPA from using mod_nss as the Apache TLS engine to mod_ssl
  • Drop i686 arch because 389-ds-base dropped it

Comments 12

This update has been submitted for testing by rcritten.

adamwill edited this update.

New build(s):

  • dogtag-pki-10.6.0-0.2.fc28
  • dogtag-pki-theme-10.6.0-0.2.fc28
  • pki-console-10.6.0-0.2.fc28
  • pki-core-10.6.0-0.2.fc28
  • tomcat-8.5.29-1.fc28

Karma has been reset.

adamwill edited this update.

New build(s):

  • tomcatjss-7.3.0-0.2.fc28

Karma has been reset.

So, the openQA tests are now running into a systemd/rolekit bug :/ (we already knew about this bug, it's affecting the postgres server role too, it's new in the latest systemd release). that certainly indicates progress over the previous versions, but until that is resolved or worked around, we can't be sure things are fully working. @sgallagh and I are working on that.

The rpmdeplint failure for dogtag-pki is valid, but not this update's fault: https://bugzilla.redhat.com/show_bug.cgi?id=1557597

Testing with a fixed systemd confirms that this works much, much better. Server deployment works, most client tests work. One client sub-test fails, I'm investigating that now. But this is clearly far better than before.

karma: +1

Fresh installation on F28 is working for me

karma: +1

adamwill edited this update.

This update has been pushed to testing.

This update has been submitted for batched by bodhi.

This update has been submitted for stable by adamwill.

This update has been pushed to stable.

Add Comment & Feedback

Please login to add feedback.

Content Type
Test Gating
Submitted by
Update Type
Update Severity
stable threshold: 2
unstable threshold: -3
Autopush (karma)
Autopush (time)
submitted 2 years ago
in testing 2 years ago
in stable 2 years ago
modified 2 years ago

Related Bugs 11

00 #1496562 freeipa tests in Fedora28+ shouldn't test for specific NSS database filenames, but should be flexible
00 #1520537 pki-core doesn't support SQL format of nssdb
00 #1542743 Unable to build 'dogtag-pki' meta package in Fedora rawhide
00 #1544386 freeipa-server removing i686 arch support in F28
00 #1547403 dogtag-pki-theme is violating Spec Maintenance and Canonicity
00 #1547405 dogtag-pki is violating Spec Maintenance and Canonicity
00 #1547406 pki-core is violating Spec Maintenance and Canonicity
00 #1547959 freeipa-server-dns has unnecessary dependency on python2
00 #1551677 FreeIPA server deployment fails with "This entry already exists" error
00 #1551830 FreeIPA client fails to fetch vault secrets
00 #1552318 Re-base Dogtag 10.5 to Dogtag 10.6

Automated Test Results