The Dogtag Certificate System is an enterprise-class Certificate Authority (CA) which supports all aspects of certificate lifecycle management, including key archival, OCSP and smartcard management.
This issue was migrated from Pagure Issue #3021. Originally filed by bbhavsar (@bhavikbhavsar) on 2018-05-16 08:13:05:
Assigned to nobody
Observation:
A notice appears as below when we run pkispawn:
"cmd": "pkispawn -s KRA -f /tmp/test_dir/kra.cfg", "delta": "0:00:52.418495", "end": "2018-05-15 08:31:27.685813", "rc": 0, "start": "2018-05-15 08:30:35.267318", "stderr": "Notice: Trust flag u is set automatically if the private key is present.
The unit files have no installation config (WantedBy, RequiredBy, Also, Alias
settings in the [Install] section, and DefaultInstance for template units).
This means they are not meant to be enabled using systemctl.
Possible reasons for having this kind of units are:
1) A unit may be statically enabled by being symlinked from another unit's
.wants/ or .requires/ directory.
2) A unit's purpose may be to act as a helper for some other unit which has
a requirement dependency on it.
3) A unit may be started when needed via activation (socket, path, timer,
D-Bus, udev, scripted systemctl call, ...).
4) In case of template units, the unit is meant to be enabled with some
instance name specified."
This issue was migrated from Pagure Issue #3021. Originally filed by bbhavsar (@bhavikbhavsar) on 2018-05-16 08:13:05:
Observation:
A notice appears as below when we run pkispawn:
"cmd": "pkispawn -s KRA -f /tmp/test_dir/kra.cfg", "delta": "0:00:52.418495", "end": "2018-05-15 08:31:27.685813", "rc": 0, "start": "2018-05-15 08:30:35.267318", "stderr": "Notice: Trust flag u is set automatically if the private key is present. The unit files have no installation config (WantedBy, RequiredBy, Also, Alias settings in the [Install] section, and DefaultInstance for template units). This means they are not meant to be enabled using systemctl. Possible reasons for having this kind of units are: 1) A unit may be statically enabled by being symlinked from another unit's .wants/ or .requires/ directory. 2) A unit's purpose may be to act as a helper for some other unit which has a requirement dependency on it. 3) A unit may be started when needed via activation (socket, path, timer, D-Bus, udev, scripted systemctl call, ...). 4) In case of template units, the unit is meant to be enabled with some instance name specified."
Build details:
[root@pki1 fedora]# rpm -qa | grep pki-* pki-base-java-10.6.1-3.20180514020012.517dca6f.fc28.noarch pki-console-10.6.1-3.20180514020012.517dca6f.fc28.noarch pki-kra-10.6.1-3.20180514020012.517dca6f.fc28.noarch pki-symkey-10.6.1-3.20180514020012.517dca6f.fc28.x86_64 pki-base-10.6.1-3.20180514020012.517dca6f.fc28.noarch pki-ca-10.6.1-3.20180514020012.517dca6f.fc28.noarch pki-tps-10.6.1-3.20180514020012.517dca6f.fc28.x86_64 python3-pki-10.6.1-3.20180514020012.517dca6f.fc28.noarch pki-server-10.6.1-3.20180514020012.517dca6f.fc28.noarch pki-tks-10.6.1-3.20180514020012.517dca6f.fc28.noarch dogtag-pki-10.6.1-3.20180514020012.517dca6f.fc28.noarch pki-tools-10.6.1-3.20180514020012.517dca6f.fc28.x86_64 dogtag-pki-console-theme-10.6.1-3.20180514020012.517dca6f.fc28.noarch pki-ocsp-10.6.1-3.20180514020012.517dca6f.fc28.noarch dogtag-pki-server-theme-10.6.1-3.20180514020012.517dca6f.fc28.noarch