[Freeipa-devel] Problem with ipa installation: certutil

[Rob Crittenden]

Martin Nagy wrote:
> Hi,
> I'm trying to install ipa and am getting a python traceback (attached).
> It seems that running certutil didn't succeed so I added a debugging
> print before it's execution and tried to run it manually. This is what I
> get:
> 
> # /usr/bin/certutil -d /etc/httpd/alias -S -n 'CA certificate' -s
> 'cn=IPA Test Certificate Authority' -x -t 'CT,,C' -1 -2 -5 -m 1056 -v
> 120 -z /etc/httpd/alias/noise.txt -f /etc/httpd/alias/pwdfile.txt
> certutil -o: unable to open "tempcertreq" for writing (-5950, 2)
> Exit 255
> 
> (The "Exit 255" is from my shell saying that certutil exited returning
> 255). I did a git grep tempcertreq in freeipa git tree but didn't find
> anything, so I'm assuming we weren't creating it or anything. Does
> anyone know what might be causing this error?
> 
> Martin

This message comes directly from certutil itself. It tries to open the 
file "tempcertreq" in the cwd.

Odd since you are installing this as root, right? Perhaps you are in a 
directory that no longer exists?

I seem to recall running into this in v1 as well and though we did a 
chdir(). Maybe we do that in some places and not others.

rob