#187 ipa cert-show behavior difference between versions of dogtag
Closed: invalid 2 years ago by rcritten. Opened 3 years ago by rcritten.

In RHEL 7 and pki-ca-10.5.17:

$ ipa cert-show 9999
ipa: ERROR: Certificate operation cannot be completed: EXCEPTION (Certificate serial number 0x270f not found)

In F32 with IPA 4.10.0-dev and pki-ca-10.10.0 (also affects RHEL 8)

$ ipa cert-show 9999
ipa: ERROR: Certificate operation cannot be completed: Unable to communicate with CMS (404)

The difference seems to be that in the newer dogtag it returns what looks like JSON with a 404 (more REST-like):

{"Attributes":{"Attribute":[{"name":"certId","value":"9999"}]},"ClassName":"com.netscape.certsrv.cert.CertNotFoundException","Code":404,"Message":"Certificate ID 0x270f not found"}

and in the older version it returns XML and a 200:

<xml><header/><fixed><authorityName>Certificate Manager</authorityName><unexpectedError>Certificate serial number 0x270f not found</unexpectedError><requestStatus>7</requestStatus></fixed><records/></xml>

I meant to open this against IPA, not certmonger.

in any case, this seems resolved in F35:

ipa cert-show 9999
ipa: ERROR: Certificate operation cannot be completed: Request failed with status 404: Non-2xx response from CA REST API: 404. Certificate ID 0x270f not found (404)

Metadata Update from @rcritten:
- Issue close_status updated to: invalid
- Issue status updated to: Closed (was: Open)

2 years ago

Login to comment on this ticket.

Metadata