[Freeipa-devel] master is broken on F18

[Kai Engert]

On Fri, 2013-03-15 at 16:07 -0400, John Dennis wrote: 
> On 03/15/2013 12:56 PM, Alexander Bokovoy wrote:
> > Hi!
> >
> > I was investigating why installing master fails on F18 +
> > updates-testing and found out that install fails with
> > freeipa-server-3.1.99-0.20130313T1838Zgit158bf45.fc18.x86_64 from
> > ipa-devel repo
> >
> > 2013-03-15T16:17:40Z DEBUG args=/usr/bin/certutil -d /etc/httpd/alias
> > -R -s CN=jano.ipa.team,O=IPA.TEAM -o
> > /var/lib/ipa/ipa-aza7Wg/tmpcertreq -k rsa -g 2048 -z
> > /etc/httpd/alias/noise.txt -f /etc/httpd/alias/pwdfile.txt -a
> > 2013-03-15T16:17:41Z DEBUG Process finished, return code=0
> > 2013-03-15T16:17:41Z DEBUG stdout= 2013-03-15T16:17:41Z DEBUG
> > stderr=
> >
> > Generating key.  This may take a few moments...
> 
> I believe this is a known problem in certutil where it writes data to
> the wrong file descriptor. The problem was fixed upstream about 10 days
> ago, I'm not sure if Fedora has the fix yet or not. Kai would know, I've
> added him on the cc list.


Hi John,

in the above cited message, you didn't include the failure you were
seeing, so I have to guess. 

This one is the only functional patch to certutil during the last 8-9
weeks that I could find. Do you refer to this one?

Bug 840714 - certutil -a does not produce ASCII output
https://bugzilla.mozilla.org/show_bug.cgi?id=840714

It was a regression in NSS 3.14.2, and it got fixed in 3.14.3. Fedora 18
apparently received that update on Feb 24.
http://tinyurl.com/bym4rlh

If the above didn't help, please send more details or ping me on IRC.

Regards
Kai