<html>
<head>
<meta content="text/html; charset=windows-1252"
http-equiv="Content-Type">
</head>
<body text="#000000" bgcolor="#FFFFFF">
<br>
<br>
<div class="moz-cite-prefix">On 01.12.2015 15:00, Gabe Alford wrote:<br>
</div>
<blockquote
cite="mid:CAGLxfGwqYLdzJYd6f-J2rEh+PdtsKUj3V_0+6SLF7baQxssjGg@mail.gmail.com"
type="cite">
<div dir="ltr">
<div>
<div>
<div>Hello,<br>
<br>
</div>
Fix for <a moz-do-not-send="true"
href="https://fedorahosted.org/freeipa/ticket/5458">https://fedorahosted.org/freeipa/ticket/5458</a><br>
<br>
</div>
Thanks,<br>
<br>
</div>
Gabe<br>
</div>
<br>
<fieldset class="mimeAttachmentHeader"></fieldset>
<br>
</blockquote>
Hello,<br>
<br>
I haven't looked closer, but your patch is causing this:<br>
<br>
Configuring certificate server (pki-tomcatd). Estimated time: 3
minutes 30 seconds<br>
[1/27]: creating certificate server user<br>
[2/27]: configuring certificate server instance<br>
[3/27]: stopping certificate server instance to update CS.cfg<br>
[4/27]: backing up CS.cfg<br>
[5/27]: disabling nonces<br>
[6/27]: set up CRL publishing<br>
[7/27]: enable PKIX certificate path discovery and validation<br>
[8/27]: starting certificate server instance<br>
ipa.ipaserver.install.cainstance.CAInstance: CRITICAL Failed to
restart the Dogtag instance.See the installation log for details.<br>
[9/27]: creating RA agent certificate database<br>
[10/27]: importing CA chain to RA certificate database<br>
[11/27]: fixing RA database permissions<br>
[12/27]: setting up signing cert profile<br>
[13/27]: setting audit signing renewal to 2 years<br>
[14/27]: restarting certificate server<br>
ipa.ipaserver.install.cainstance.CAInstance: CRITICAL Failed to
restart the Dogtag instance.See the installation log for details.<br>
[15/27]: requesting RA certificate from CA<br>
[16/27]: issuing RA agent certificate<br>
[17/27]: adding RA agent as a trusted user<br>
[18/27]: authorizing RA to modify profiles<br>
[19/27]: configure certmonger for renewals<br>
[20/27]: configure certificate renewals<br>
[21/27]: configure RA certificate renewal<br>
[22/27]: configure Server-Cert certificate renewal<br>
[23/27]: Configure HTTP to proxy connections<br>
[24/27]: restarting certificate server<br>
<br>
ipa.ipaserver.install.cainstance.CAInstance: CRITICAL Failed to
restart the Dogtag instance.See the installation log for details.<br>
[25/27]: migrating certificate profiles to LDAP<br>
[26/27]: importing IPA certificate profiles<br>
[27/27]: adding default CA ACL<br>
<br>
<br>
CA is operational and ready, but IPA installer is not able to detect
it correctly<br>
<br>
2015-12-04T19:08:54Z DEBUG stderr=curl: option --connect-timeout 30:
is unknown<br>
curl: try 'curl --help' or 'curl --manual' for more information<br>
<br>
Martin^2<br>
</body>
</html>