[Freeipa-users] ipa-client-install certutil failure

[Jakub Bittner]

Hello,

I am using IPA version 3.0 on server and if I want to install on ubuntu 
with ipa-client-install certutil in the end this command 
"/usr/bin/certutil -A -d /etc/pki/nssdb -n IPA CA -t CT,C,C -a -i 
/etc/ipa/ca.crt" fails.

If I try it manually it says:

certutil: function failed: The certificate/key database is in an old, 
unsupported format.

I dont know for what I need nssdb. Is there a way how to recreate this 
nssdb file?


Thank you
Jakub Bittner