[Freeipa-devel] [freeipa PR#367][comment] Remove nsslib from IPA

[HonzaCholasta]

  URL: https://github.com/freeipa/freeipa/pull/367
Title: #367: Remove nsslib from IPA

HonzaCholasta commented:
"""
`ipa-replica-install` with `--setup-ca` fails with:
```
2017-02-28T07:38:41Z DEBUG   File "/usr/lib/python2.7/site-packages/ipapython/admintool.py", line 172, in execute
    return_value = self.run()
  File "/usr/lib/python2.7/site-packages/ipapython/install/cli.py", line 336, in run
    cfgr.run()
  File "/usr/lib/python2.7/site-packages/ipapython/install/core.py", line 328, in run
    self.execute()
  File "/usr/lib/python2.7/site-packages/ipapython/install/core.py", line 352, in execute
    for _nothing in self._executor():
  File "/usr/lib/python2.7/site-packages/ipapython/install/core.py", line 394, in __runner
    exc_handler(exc_info)
  File "/usr/lib/python2.7/site-packages/ipapython/install/core.py", line 423, in _handle_execute_exception
    self._handle_exception(exc_info)
  File "/usr/lib/python2.7/site-packages/ipapython/install/core.py", line 413, in _handle_exception
    six.reraise(*exc_info)
  File "/usr/lib/python2.7/site-packages/ipapython/install/core.py", line 384, in __runner
    step()
  File "/usr/lib/python2.7/site-packages/ipapython/install/core.py", line 381, in <lambda>
    step = lambda: next(self.__gen)
  File "/usr/lib/python2.7/site-packages/ipapython/install/util.py", line 81, in run_generator_with_yield_from
    six.reraise(*exc_info)
  File "/usr/lib/python2.7/site-packages/ipapython/install/util.py", line 59, in run_generator_with_yield_from
    value = gen.send(prev_value)
  File "/usr/lib/python2.7/site-packages/ipapython/install/core.py", line 618, in _configure
    next(executor)
  File "/usr/lib/python2.7/site-packages/ipapython/install/core.py", line 394, in __runner
    exc_handler(exc_info)
  File "/usr/lib/python2.7/site-packages/ipapython/install/core.py", line 423, in _handle_execute_exception
    self._handle_exception(exc_info)
  File "/usr/lib/python2.7/site-packages/ipapython/install/core.py", line 481, in _handle_exception
    self.__parent._handle_exception(exc_info)
  File "/usr/lib/python2.7/site-packages/ipapython/install/core.py", line 413, in _handle_exception
    six.reraise(*exc_info)
  File "/usr/lib/python2.7/site-packages/ipapython/install/core.py", line 478, in _handle_exception
    super(ComponentBase, self)._handle_exception(exc_info)
  File "/usr/lib/python2.7/site-packages/ipapython/install/core.py", line 413, in _handle_exception
    six.reraise(*exc_info)
  File "/usr/lib/python2.7/site-packages/ipapython/install/core.py", line 384, in __runner
    step()
  File "/usr/lib/python2.7/site-packages/ipapython/install/core.py", line 381, in <lambda>
    step = lambda: next(self.__gen)
  File "/usr/lib/python2.7/site-packages/ipapython/install/util.py", line 81, in run_generator_with_yield_from
    six.reraise(*exc_info)
  File "/usr/lib/python2.7/site-packages/ipapython/install/util.py", line 59, in run_generator_with_yield_from
    value = gen.send(prev_value)
  File "/usr/lib/python2.7/site-packages/ipapython/install/common.py", line 63, in _install
    for _nothing in self._installer(self.parent):
  File "/usr/lib/python2.7/site-packages/ipaserver/install/server/__init__.py", line 595, in main
    replica_install(self)
  File "/usr/lib/python2.7/site-packages/ipaserver/install/server/replicainstall.py", line 398, in decorated
    func(installer)
  File "/usr/lib/python2.7/site-packages/ipaserver/install/server/replicainstall.py", line 1455, in install
    ca.install(False, config, options)
  File "/usr/lib/python2.7/site-packages/ipaserver/install/ca.py", line 203, in install
    install_step_0(standalone, replica_config, options)
  File "/usr/lib/python2.7/site-packages/ipaserver/install/ca.py", line 282, in install_step_0
    use_ldaps=standalone)
  File "/usr/lib/python2.7/site-packages/ipaserver/install/cainstance.py", line 478, in configure_instance
    self.start_creation(runtime=210)
  File "/usr/lib/python2.7/site-packages/ipaserver/install/service.py", line 423, in start_creation
    run_step(full_msg, method)
  File "/usr/lib/python2.7/site-packages/ipaserver/install/service.py", line 413, in run_step
    method()
  File "/usr/lib/python2.7/site-packages/ipaserver/install/cainstance.py", line 289, in wrapper
    ra_cert_retrieval(cls, *args)
  File "/usr/lib/python2.7/site-packages/ipaserver/install/cainstance.py", line 729, in __import_ra_key
    custodia.import_ra_key(self.master_host)
  File "/usr/lib/python2.7/site-packages/ipaserver/install/custodiainstance.py", line 119, in import_ra_key
    cli.fetch_key('ra/ipaCert')
  File "/usr/lib/python2.7/site-packages/ipaserver/secrets/client.py", line 100, in fetch_key
    r.raise_for_status()
  File "/usr/lib/python2.7/site-packages/requests/models.py", line 844, in raise_for_status
    raise HTTPError(http_error_msg, response=self)

2017-02-28T07:38:41Z DEBUG The ipa-replica-install command failed, exception: HTTPError: 404 Client Error: Not Found for url: https://vm-226.abc.idm.lab.eng.brq.redhat.com/ipa/keys/ra/ipaCert?type=kem&value=eyJhbGciOiJSU0EtT0FFUCIsImVuYyI6IkEyNTZDQkMtSFM1MTIiLCJraWQiOm51bGx9.UbDCRVumiqN3YDwxdfHGvkzDakB0Isbq3dTZ9tMVe5NK_wuvGmtBYGUfO46IQmBsqto0N28WJUcselfuY8Q3uSOEPb0HximzbmnJm-S1TrF9KMsHgozwhNjXDAXapXSmiFqyKiTPAvxLzx0OKq052oIbnUsprk3s6R_mQ5AWrP52DsVqM9EovOHa6RM3t4xasamhJ_at1eR647TGqS8pamulRkSilK-kxyPQnN7Rphz_cyr0yIlG93xnfQTsCJ9WcodWmVPrPgP3PvKh8OaINHqUsfT-gUR0IR3hXkN5slAYSxOdmNYwLVR-wtc6Yh3jf4LpRgbHhfmuNx8rTU3nuw.-xfhG2UGKLBU7D6UzO4d5g.zG5YCUsskbqiYRYEFGqDwbx0JghL2Yo-oioFM8KBVoxvfVNtrUzN96TU-aQn08WXS2GFvAdXo7-EpOMtrFwPEGiWfXhLDjYAhVCAmu69YYjptCDokSEY8PK1HtUJanVTb0LtcPlp78yNyM-ZGC42-PfMiiG66rlWMMpWtAWPHugxDa8EcV8AlTFdqtqFHwzRYxISXUbuiwGD_h8pht2irYGdSeJ6Aa6Fwk54ZQdQshb24njjBt-MIrgy1YKlTkF4nPhuPhH0o70IWFoQSQ24R7GVfofMc3xnoUCtPlv-QLnaOucnvCDZPUBx33JGRJP5Y7Acpp_MJTkWqmSWvmXlhNouWXtpe3oTakKNYqqurNieJtHaGmIyuyn0yzQcv4w1re8aEn9Zv2TIZvSfq5qxMqUvlhiyhej6ZCRQ1FdLaslPbFuullik95Ik-pF7BBtvn3d5LKnZJgYnQg2n3yzi73zdMdync_rovg5abmWKLAM_SrRVgeoJ9-TQrJ18HvuViIoz1n14-TQyGKaw8hsbNGJZE0vrPx0gVTl4-HJK9PLP8M1jUylSxtVRC-Xv1bny4LkLQotJuV0wbZDKHg77gk3xolAUAZ6ZrWD8xUVprdJlYW423NYyX_t-2-c6HUQBlmZqkv_lYrgaZ5WZ5mw2U1MwVxf_KU6SnwYM3kPQm3a13KkeoK9IdmnZv3YAvrKOjtekmUwCjaItX74FAg2IJA.eoL7I4gO67k_Ejt9ttgKFnw29RC3Uzz1Ykn6-mA4DsM
```
"""

See the full comment at https://github.com/freeipa/freeipa/pull/367#issuecomment-282966570