<html><head><meta http-equiv="Content-Type" content="text/html charset=utf-8"></head><body style="word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space;" class="">Hi Florence,<div class=""><br class=""></div><div class="">I did what you said, and then the status went to CA_WORKING. Then I restart ipa and certmonger and the status went to CA_UNREACHABLE.</div><div class="">Then i did “resubmit” again and now the status is back to MONITORING, but the cookie error is back.</div><div class=""><br class=""></div><div class="">Any advice?</div><div class=""><div class=""><br class="webkit-block-placeholder"></div><div class=""><div class="">[root@lums3 ~]# getcert list -n ipaCert</div><div class="">Number of certificates and requests being tracked: 8.</div><div class="">Request ID '20161216025136':</div><div class=""><span class="Apple-tab-span" style="white-space:pre"> </span>status: MONITORING</div><div class=""><span class="Apple-tab-span" style="white-space:pre"> </span>ca-error: Invalid cookie: ''</div><div class=""><span class="Apple-tab-span" style="white-space:pre"> </span>stuck: no</div><div class=""><span class="Apple-tab-span" style="white-space:pre"> </span>key pair storage: type=NSSDB,location='/etc/httpd/alias',nickname='ipaCert',token='NSS Certificate DB',pinfile='/etc/httpd/alias/pwdfile.txt'</div><div class=""><span class="Apple-tab-span" style="white-space:pre"> </span>certificate: type=NSSDB,location='/etc/httpd/alias',nickname='ipaCert',token='NSS Certificate DB'</div><div class=""><span class="Apple-tab-span" style="white-space:pre"> </span>CA: dogtag-ipa-ca-renew-agent</div><div class=""><span class="Apple-tab-span" style="white-space:pre"> </span>issuer: CN=Certificate Authority,O=UNI.LU</div><div class=""><span class="Apple-tab-span" style="white-space:pre"> </span>subject: CN=IPA RA,O=UNI.LU</div><div class=""><span class="Apple-tab-span" style="white-space:pre"> </span>expires: 2018-12-16 03:13:48 UTC</div><div class=""><span class="Apple-tab-span" style="white-space:pre"> </span>key usage: digitalSignature,nonRepudiation,keyEncipherment,dataEncipherment</div><div class=""><span class="Apple-tab-span" style="white-space:pre"> </span>eku: id-kp-serverAuth,id-kp-clientAuth</div><div class=""><span class="Apple-tab-span" style="white-space:pre"> </span>pre-save command: /usr/libexec/ipa/certmonger/renew_ra_cert_pre</div><div class=""><span class="Apple-tab-span" style="white-space:pre"> </span>post-save command: /usr/libexec/ipa/certmonger/renew_ra_cert</div><div class=""><span class="Apple-tab-span" style="white-space:pre"> </span>track: yes</div><div class=""><span class="Apple-tab-span" style="white-space:pre"> </span>auto-renew: yes</div></div><div class=""><br class="webkit-block-placeholder"></div><div class=""> <div style="color: rgb(0, 0, 0); letter-spacing: normal; orphans: auto; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; widows: auto; word-spacing: 0px; -webkit-text-stroke-width: 0px; word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space;" class=""><div style="color: rgb(0, 0, 0); letter-spacing: normal; orphans: auto; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; widows: auto; word-spacing: 0px; -webkit-text-stroke-width: 0px; word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space;" class=""><div style="color: rgb(0, 0, 0); letter-spacing: normal; orphans: auto; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; widows: auto; word-spacing: 0px; -webkit-text-stroke-width: 0px; word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space;" class=""><p style="font-family: Arial, sans-serif; font-size: 10pt; line-height: 16px; color: rgb(33, 33, 33);" class=""><span style="color: rgb(61, 59, 59); display: inline;" class="">-- </span></p><p style="font-family: Arial, sans-serif; font-size: 10pt; line-height: 16px; color: rgb(33, 33, 33);" class=""><span style="font-weight: bold; color: rgb(61, 59, 59); display: inline;" class="">Dr Christophe Trefois, Dipl.-Ing.</span><span class="Apple-converted-space"> </span><span class="Apple-converted-space"> </span><span style="display: inline;" class=""></span><br class=""><span style="color: rgb(61, 59, 59); display: inline; font-size: 7.5pt;" class="">Technical Specialist / Post-Doc</span></p><p style="font-family: Arial, sans-serif; font-size: 7.5pt; line-height: 16px;" class=""><span style="font-weight: bold; color: rgb(61, 59, 59); display: inline;" class="">UNIVERSITÉ DU LUXEMBOURG</span><br class=""><span style="display: inline;" class=""><br class=""></span><span style="font-weight: bold; color: rgb(61, 59, 59); display: inline;" class="">LUXEMBOURG CENTRE FOR SYSTEMS BIOMEDICINE</span><br class=""><span style="color: rgb(61, 59, 59); display: inline;" class="">Campus Belval | House of Biomedicine<span class="Apple-converted-space"> </span><span class="Apple-converted-space"> </span><br class=""><span class="Apple-converted-space">6, avenue du Swing </span><br class="">L-4367 Belvaux<span class="Apple-converted-space"> </span><span class="Apple-converted-space"> </span></span><br class=""><span style="color: rgb(61, 59, 59); display: inline;" class="">T:<span class="Apple-converted-space"> </span></span><span style="color: rgb(61, 59, 59); display: inline;" class="">+352 46 66 44 6124</span><span class="Apple-converted-space"> </span><br class=""><span style="color: rgb(61, 59, 59); display: inline;" class="">F:<span class="Apple-converted-space"> </span></span><span style="color: rgb(61, 59, 59); display: inline;" class="">+352 46 66 44 6949</span><span class="Apple-converted-space"> </span><span class="Apple-converted-space"> </span><span style="display: inline;" class=""><br class=""></span><a href="http://www.uni.lu/lcsb" style="color: rgb(0, 109, 189); display: inline;" class="">http://www.uni.lu/lcsb</a></p><p style="font-family: Arial, sans-serif; font-size: 14px; line-height: 16px;" class=""><a href="https://www.facebook.com/trefex" style="display: inline;" class=""><img width="24" height="24" data-filename="facebook.png" src="https://s3.amazonaws.com/htmlsig-assets/rounded/facebook.png" alt="Facebook" class=""></a><span class="Apple-converted-space"> </span><span class="Apple-converted-space"> </span><a href="https://twitter.com/Trefex" style="display: inline;" class=""><img width="24" height="24" data-filename="twitter.png" src="https://s3.amazonaws.com/htmlsig-assets/rounded/twitter.png" alt="Twitter" class=""></a><span class="Apple-converted-space"> </span><span class="Apple-converted-space"> </span><a href="https://plus.google.com/+ChristopheTrefois/" style="display: inline;" class=""><img width="24" height="24" data-filename="googleplus.png" src="https://s3.amazonaws.com/htmlsig-assets/rounded/googleplus.png" alt="Google Plus" class=""></a><span class="Apple-converted-space"> </span><span class="Apple-converted-space"> </span><a href="https://www.linkedin.com/in/trefoischristophe" style="display: inline;" class=""><img width="24" height="24" data-filename="linkedin.png" src="https://s3.amazonaws.com/htmlsig-assets/rounded/linkedin.png" alt="Linkedin" class=""></a><span class="Apple-converted-space"> </span><span class="Apple-converted-space"> </span><a href="http://skype:Trefex?call" style="display: inline;" class=""><img width="24" height="24" data-filename="skype.png" src="https://s3.amazonaws.com/htmlsig-assets/rounded/skype.png" alt="skype" class=""></a></p><p class="banner-container" style="font-family: Arial, sans-serif; font-size: 14px; line-height: 16px;"></p><p style="font-family: Arial, sans-serif; color: rgb(61, 59, 59); font-size: 9px; line-height: 16px;" class="">----<br class="">This message is confidential and may contain privileged information.<span class="Apple-converted-space"> </span><br class="">It is intended for the named recipient only.<span class="Apple-converted-space"> </span><br class="">If you receive it in error please notify me and permanently delete the original message and any copies.<span class="Apple-converted-space"> </span><br class="">----<br class=""></p> <span class="Apple-converted-space"> </span></div></div></div> </div> <br class=""><div><blockquote type="cite" class=""><div class="">On 4 Jan 2017, at 13:49, Florence Blanc-Renaud <<a href="mailto:flo@redhat.com" class="">flo@redhat.com</a>> wrote:</div><br class="Apple-interchange-newline"><div class=""><span style="font-family: Helvetica; font-size: 15px; font-style: normal; font-variant-caps: normal; font-weight: normal; letter-spacing: normal; orphans: auto; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; widows: auto; word-spacing: 0px; -webkit-text-stroke-width: 0px; float: none; display: inline !important;" class="">getcert resubmit -i <id for ipaCert></span></div></blockquote></div><br class=""></div></body></html>