[Freeipa-users] ipa: ERROR: Certificate format error: (SEC_ERROR_LEGACY_DATABASE) The certificate/key database is in an old, unsupported format.

[Natxo Asenjo]

On Wed, Sep 7, 2016 at 2:10 PM, Natxo Asenjo <natxo.asenjo at gmail.com> wrote:

> hi,
>
> using centos 6.8 (server and client), when trying to view some hosts we
> get this error:
>
>
> $ ipa host-find host-1920.sub.domain.tld
> ipa: ERROR: Certificate format error: (SEC_ERROR_LEGACY_DATABASE) The
> certificate/key database is in an old, unsupported format.
>

this is happening wih all the host objects (all enrolled with
certificates). I don't usually look at the hosts objects that much, but
yesterday patches were applied and the ipa-server package was updated
(among other things):

Updated ipa-server-3.0.0-50.el6.centos.1.i686
Update             3.0.0-50.el6.centos.2.i686

So it looks like this is the culprit?


--
Groeten,
natxo
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://listman.redhat.com/archives/freeipa-users/attachments/20160907/b1ef417c/attachment.htm>