[Freeipa-users] ca install fails upgrading to 4.2.0

[Robert van Veelen]

Hi,
I'm trying to create an ipa replica from
ipa-server-3.0.0-47/pki-ca-9.0.3-45 to ipa-server-4.2.0-15/pki-ca-10.2.5-6
and cannot get the install to complete. The CS is configured as a sub to an
external CA. I keep getting the same error when running the
replica-install. Digging into pki-ca's debug log, I find the following
errors:

 java.lang.Exception: SystemCertsVerification: system certs verification
failure
&
 CertUtils: verifySystemCertByNickname() failed: caSigningCert cert-pki-ca

I've tried regenerating the source cacert.p12, upgrading pki-ca to latest,
etc. It just seems like the new replica is unable to verify the certs while
running selftests. any good tips for a next step to work out whats going on?

Thanks,

-rob
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://listman.redhat.com/archives/freeipa-users/attachments/20160202/a1291645/attachment.htm>