dogtagpki / pki

The Dogtag Certificate System is an enterprise-class Certificate Authority (CA) which supports all aspects of certificate lifecycle management, including key archival, OCSP and smartcard management.
https://www.dogtagpki.org
GNU General Public License v2.0
373 stars 137 forks source link

pkispawn failure due to certiifcate nickname mismatch should show proper error message #2533

Open pki-bot opened 4 years ago

pki-bot commented 4 years ago

This issue was migrated from Pagure Issue #2413. Originally filed by rpattath (@rpattath) on 2016-07-20 22:35:32:


pkispawn failure due to certiifcate nickname mismatch should show proper error message

Steps to Reproduce:

1. Follow instructions in
http://pki.fedoraproject.org/wiki/Migrating_a_CA_using_existing_CA_mechanism
for non-hsm migration
2. pkispawn -s CA -f ca.cfg

Actual results:

Fails with the following message

[root@auto-hv-02-guest02 ~]# pkispawn -s CA -f /tmp/newca.cfg
Log file: /var/log/pki/pki-ca-spawn.20160718152024.log
Loading deployment configuration from /tmp/newca.cfg.
Installing CA into /var/lib/pki/pki-ca-July12.
Storing deployment configuration into
/etc/sysconfig/pki/tomcat/pki-ca-July12/ca/deployment.cfg.
---------------
Import complete
---------------
certutil: Could not find cert: caSigningCert cert-pki-ca-July12 CA
: PR_FILE_NOT_FOUND_ERROR: File not found
pkispawn    : ERROR    ....... pki-server subsystem-cert-validate return code:
1
pkispawn    : ERROR    .......   Cert ID: signing
  Nickname: caSigningCert cert-pki-ca-July12 CA
  Usage: SSLCA
  Token: Internal Key Storage Token
  Status: INVALID
-----------------
Validation failed
-----------------

Installation failed: Command '['pki-server', 'subsystem-cert-validate', '-i',
'pki-ca-July12', 'ca', 'signing']' returned non-zero exit status 1

Expected results:

Should fail with the error message "Cert not found"
pki-bot commented 4 years ago

Comment from mharmsen (@mharmsen) at 2016-07-21 23:10:14

Per PKI Bug Council of 07/21/2016: 10.3.5

pki-bot commented 4 years ago

Comment from vakwetu (@vakwetu) at 2016-08-02 21:49:19

Moved to 10.4. All the information is present, albeit not as nice as could be.

certutil: Could not find cert: caSigningCert cert-pki-ca-July12 CA : PR_FILE_NOT_FOUND_ERROR: File not found

pki-bot commented 4 years ago

Comment from rpattath (@rpattath) at 2017-02-27 14:09:13

Metadata Update from @rpattath:

pki-bot commented 4 years ago

Comment from mharmsen (@mharmsen) at 2017-08-31 01:09:59

Metadata Update from @mharmsen:

pki-bot commented 4 years ago

Comment from mharmsen (@mharmsen) at 2018-04-10 22:06:03

Per 10.5.x/10.6 Triage: FUTURE

edewata: negative case