#7282 renew_ra_cert Certmonger hook fails to update people entry
Closed: fixed 6 years ago Opened 6 years ago by ftweedal.

Issue

Post-renewal hook for RA Agent certificate fails with error:

Nov 01 00:04:40 f27-3.ipa.local /dogtag-ipa-ca-renew-agent-submit[19602]: Forwarding request to dogtag-ipa-renew-agent                                                                                            
Nov 01 00:04:40 f27-3.ipa.local /dogtag-ipa-ca-renew-agent-submit[19602]: dogtag-ipa-renew-agent returned 0                                                                                                       
Nov 01 00:04:45 f27-3.ipa.local /renew_ra_cert[19949]: Caught unhandled exception: 'bytes' object has no attribute 'subject'                                                                                      
Nov 01 00:04:45 f27-3.ipa.local /renew_ra_cert[19949]: Update failed.                                    
Nov 01 00:04:45 f27-3.ipa.local certmonger[19956]: Certificate in file "/var/lib/ipa/ra-agent.pem" issued by CA and saved.                                                                                        

Steps to Reproduce

  1. resubmit Certmonger tracking request for RA Agent certificate

Actual behavior

Error in Certmonger journal and failure to properly update the ipara ou=People entry.
This causes subsequent operations against Dogtag to fail due to authentication failure.

Expected behavior

People entry gets updated properly. CA related operations continue to work.

Version/Release/Distribution

master and ipa-4-6.


Metadata Update from @ftweedal:
- Issue assigned to ftweedal

6 years ago

Metadata Update from @ftweedal:
- Custom field on_review adjusted to https://github.com/freeipa/freeipa/pull/1334

6 years ago

Metadata Update from @frenaud:
- Issue set to the milestone: FreeIPA 4.6

6 years ago

master:

  • 3eb3844 renew_ra_cert: fix update of IPA RA user entry

ipa-4-6:

  • 9d5e3d1 renew_ra_cert: fix update of IPA RA user entry

Metadata Update from @cheimes:
- Issue close_status updated to: fixed
- Issue status updated to: Closed (was: Open)

6 years ago

Login to comment on this ticket.

Metadata