[Freeipa-users] ipa: ERROR: Certificate format error: (SEC_ERROR_LEGACY_DATABASE) The certificate/key database is in an old, unsupported format.

[Ben Lipton]

On 09/16/2016 03:39 AM, Natxo Asenjo wrote:
> hi,
>
>
> On Thu, Sep 15, 2016 at 2:25 PM, Natxo Asenjo <natxo.asenjo at gmail.com 
> <mailto:natxo.asenjo at gmail.com>> wrote:
>
>     hi,
>
>     attached error_log
>
>
>
> Any clues?
>
> Thanks!
>
> -- 
> --
> Groeten,
> natxo

Sorry, I'm not having any luck tracking down the answer. Maybe someone 
else has an idea.

Looking at the code, /etc/httpd/alias does seem to be the relevant database.

One last thought: does anything change if selinux is in permissive mode? 
Is there anything interesting in /var/log/audit/audit.log? Again, it 
doesn't make a whole lot of sense because it works sometimes, but maybe 
something is changing a few minutes after boot time?
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://listman.redhat.com/archives/freeipa-users/attachments/20160916/fc837a75/attachment.htm>