On 03/17/2017 10:02 AM, Lukas Slebodnik wrote:
On (17/03/17 12:14), Martin Babinsky wrote:
> A new update for Dogtag PKI (pki-core-10.4.0-1.fc25) landed it Fedora 25
> updates-testing yesterday.[1]
>
It was also pushed to fedora26
https://bodhi.fedoraproject.org/updates/FEDORA-2017-9cc27242c1
> I have already provided negative karma as the update broke CA clone deployment
> on FreeIPA replica install.
>
> It would be nice if you could test it and provide +1/-1 ASAP so that we can
> push it out before it hits stable and give Matthew a change to privode fixes.
>
The fastest will be if it will be unpushed by fedora maintainer
Adding mharmsen to CC.
LS
Lukas and Martin,
After speaking with some members of the PKI team, I have unpushed both
the F25 and F26 builds from Bodhi.
The following unresolved issues on cloning were documented in:
* dogtagpki Pagure Issue #2336 - IPA Replica CA configuration failed
Clone does not have all the required certificates
<
https://pagure.io/dogtagpki/issue/2336>
Was this the same cloning failure that you were seeing?
If not, please file a detailed Pagure Issue describing the failure
complete with log attachment.
As for the vault issue, we may have an idea on this as the code in that
area has been changing.
Thanks,
-- Matt