<div style="line-height:1.7;color:#000000;font-size:14px;font-family:Arial"><div style="line-height:1.7;color:#000000;font-size:14px;font-family:Arial"><div>now I execute getcert list，all certificate status MONITORING,but there was an error </div><div>ca-error: Internal error: no response to "http://ipaserver.xxx.io:9180/ca/ee/ca/profileSubmit?profileId=caServerCert&serial_num=2&renewal=true&xml=true"</div><br><br><br><br><div style="position:relative;zoom:1"></div><div id="divNeteaseMailCard"></div><br>At 2017-03-02 11:34:10, "hao" <<a href="mailto:hrayha@163.com">hrayha@163.com</a>> wrote:<br> <blockquote id="isReplyContent" style="PADDING-LEFT: 1ex; MARGIN: 0px 0px 0px 0.8ex; BORDER-LEFT: #ccc 1px solid"><div style="line-height:1.7;color:#000000;font-size:14px;font-family:Arial"><div>Hi:</div><div><br></div><div>I have finished reading <a href="http://www.freeipa.org/page/IPA_2x_Certificate_Renewal" _src="http://www.freeipa.org/page/IPA_2x_Certificate_Renewal" style="color: rgb(6, 73, 119);">http://www.freeipa.org/page/IPA_2x_Certificate_Renewal</a>  , before execute,I stop tracking all cert in `getcert list`</div><div>Now, only "issuer: CN=IPA RA,O=XXX.IO " certificate expires at 2018-02-28 08:14:38 UTC,other certificate still expires at 2017-02-15 06:10:36 UTC，</div><div>I execute </div><div>"for nickname in "auditSigningCert cert-pki-ca" "ocspSigningCert cert-pki-ca" "subsystemCert cert-pki-ca" "Server-Cert cert-pki-ca"</div><div> do</div><div>     /usr/bin/getcert start-tracking -d /var/lib/pki-ca/alias -n "${nickname}" -c dogtag-ipa-renew-agent -P xxxxxx</div><div> done"</div><div>and all command in "<a href="http://www.freeipa.org/page/IPA_2x_Certificate_Renewal",but" _src="http://www.freeipa.org/page/IPA_2x_Certificate_Renewal",but">http://www.freeipa.org/page/IPA_2x_Certificate_Renewal"</a>  but still no effect</div><div>I've tried “http://www.freeipa.org/page/Certmonger” “<a href="http://www.freeipa.org/page/Howto/CA_Certificate_Renewal”" _src="http://www.freeipa.org/page/Howto/CA_Certificate_Renewal”">http://www.freeipa.org/page/Howto/CA_Certificate_Renewal”</a>  “http://www.freeipa.org/page/Howto/Promote_CA_to_Renewal_and_CRL_Master” before that，I'm not sure if there will be an error step</div><div><br></div><div>Please help me </div><div><br></div><div>Thank you</div></div><br><br><span title="neteasefooter"><p> </p></span></blockquote></div><br><br><span title="neteasefooter"><div id="netease_mail_footer"><div style="border-top:#CCC 1px solid;padding:10px 5px;font-size:16px;color:#777;line-height:22px"><a href="http://you.163.com/item/detail?id=1055023&from=web_gg_mail_jiaobiao_6" target="_blank" style="color:#3366FF;text-decoration:none">【网易自营|30天无忧退货】差旅打包必备“MUJI制造商梭织布多层收纳包”，让出行更完美>></a>
    </div></div></span></div><br><br><span title="neteasefooter"><p> </p></span>