<div dir="ltr">hi,<br><div><div class="gmail_extra"><br><div class="gmail_quote">On Thu, Sep 29, 2016 at 2:11 PM, Rob Crittenden <span dir="ltr"><<a href="mailto:rcritten@redhat.com" target="_blank">rcritten@redhat.com</a>></span> wrote:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">Natxo Asenjo wrote:<br>
<blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><span class="">
hi Jim,<br>
<br>
On Thu, Sep 29, 2016 at 7:37 AM, Jim Richard <<a href="mailto:jrichard@placeiq.com" target="_blank">jrichard@placeiq.com</a><br></span><span class="">
<mailto:<a href="mailto:jrichard@placeiq.com" target="_blank">jrichard@placeiq.com</a>>> wrote:<br>
<br>
Thanks Rob, that worked.<br>
<br>
Still on the subject of certs, any idea how to solve this error:<br>
<br>
Certificate format error: (SEC_ERROR_LEGACY_DATABASE) The<br>
certificate/key database is in an old, unsupported format.<br>
<br>
I see that in the gui when querying hosts as well as from cli when I<br>
ipa-show or ipa-find<br>
<br>
<br>
I have had this too, and we did not find a solution (search my recent<br>
posts on the archives). As a workaround I have created replicas and<br>
decommissioned the older replicas.<br>
</span></blockquote>
<br>
On the one hand I'm glad this fixed it for you. On the other it is a rather unsatisfying answer. Unfortunately NSS doesn't always provide the most context with its error messages. This error is usually seen when one tries to open a non-existent database, which in this case is a very strange thing, especially since it goes from working to non-working in the same apache process over a few minutes.<br>
</blockquote><div><br></div><div>I totally agree. I did not have enough time to investigate it further because I'm changing jobs, so I really wanted to leave a working situation behind me.<br> <br></div></div><div class="gmail_signature" data-smartmail="gmail_signature">--<br>Groeten,<br>natxo</div>
</div></div></div>