#8879 IPA server installation fails when cert contains non-ASCII character
Closed: fixed 2 years ago by frenaud. Opened 2 years ago by frenaud.

Ticket was cloned from Red Hat Bugzilla: Bug 1956550

Please note that this Bug is private and may not be accessible as it contains confidential Red Hat customer information.

Description of problem:
IPA installation fails when cert contains non-ASCII character

Version-Release number of selected component (if applicable):
RHEL 7.9
ipa-server-4.6.8-5.el7.x86_64

How reproducible:

$ ipa-server-install \
--hostname=... \
--domain=... \
--realm=... \
--http-cert-name=httpd-cert \
--http-cert-file=idm-cert.pem \
--http-cert-file=idm-key.pem \
--http-pin="" \
--dirsrv-cert-name=dirsrv-cert \
--dirsrv-cert-file=idm-cert.pem \
--dirsrv-cert-file=idm-key.pem \
--dirsrv-pin="" \
--ca-cert-file=ca.pem \
--no-pkinit \
--no-ntp \
--no-dns-sshfp \
--verbose
..
..
ERROR 'ascii' codec can't encode character u'\xd1' in position 16: ordinal not
in range(128)



Actual results:
IPA installation fails with above error

Expected results:
IPA installation should be successful.

The ca certificate contains a subject with non-ascii characters like for instance cn=EspaƱa CA,O=Org,C=ES


Metadata Update from @frenaud:
- Custom field rhbz adjusted to https://bugzilla.redhat.com/show_bug.cgi?id=1956550

2 years ago

Metadata Update from @frenaud:
- Issue assigned to frenaud

2 years ago

Metadata Update from @frenaud:
- Custom field on_review adjusted to https://github.com/freeipa/freeipa/pull/5822

2 years ago

Note: the issue happens with python2 on RHEL7.

ipa-4-6:

  • 82b4e88 CA less installation: non ASCII chars in CA subject
  • f99067f ipatests: use non-ascii chars in CA-less install

Metadata Update from @frenaud:
- Issue close_status updated to: fixed
- Issue status updated to: Closed (was: Open)

2 years ago

ipa-4-6:

  • 86a3070 Switch to external ca: fix certmonger script

Login to comment on this ticket.

Metadata