On (17/03/17 12:14), Martin Babinsky wrote:

A new update for Dogtag PKI (pki-core-10.4.0-1.fc25) landed it Fedora 25
updates-testing yesterday.[1]

It was also pushed to fedora26
https://bodhi.fedoraproject.org/updates/FEDORA-2017-9cc27242c1

I have already provided negative karma as the update broke CA clone deployment
on FreeIPA replica install.

It would be nice if you could test it and provide +1/-1 ASAP so that we can
push it out before it hits stable and give Matthew a change to privode fixes.

The fastest will be if it will be unpushed by fedora maintainer
Adding mharmsen to CC.

LS

Lukas and Martin,

After speaking with some members of the PKI team, I have unpushed both the F25 and F26 builds from Bodhi.

The following unresolved issues on cloning were documented in:

• dogtagpki Pagure Issue #2336 - IPA Replica CA configuration failed Clone does not have all the required certificates

Was this the same cloning failure that you were seeing?

If not, please file a detailed Pagure Issue describing the failure complete with log attachment.

As for the vault issue, we may have an idea on this as the code in that area has been changing.

Thanks,
-- Matt