[Pki-users] Fedora Package

[Matthew Harmsen]

Mathieu Peresse wrote:
> Please disregard previous message and consider this one :)
> ---------------------------------------------------------------------------------------------
>
> Hi all,
>
> I'm new to dogtag, and I tried to install the PKI on a Fedora 11 
> system (fresh install).
>
> However, I encountered the following problems when installing pki-ca 
> (yum install pki-ca):
>
> - yum POSTINSTALL script invoking pkicreate complained about a file 
> not being found: /usr/share/java/ca.jar.
> It turned out that the file was located in 
> /usr/share/java/pki-ca/ca/ca.jar
> -> Had to ln -s them together...
>
> - pkicreate invoking "pki-cad" but the file is not present in the 
> system nor in the RPM archive (it is on the SVN though).
> -> Had to copy from SVN to system.
>
> - pki-cad sourcing file /var/lib/pki/ca/conf/tomcat5.conf complains 
> about "pkiarch" "pkiname" and "pkiflavor" not being present (this 
> check has been removed from the SVN too...).
> -> Had to remove references to this files...
>
> Do you guys plan to release more consistent packages in the near 
> future, or am I missing something in the install process ?
>
> Also, the documentation to build from the SVN tree seems to be 
> obsolete, is there any documentation on the new build system ?
>
> Thanks a lot,
>
> Mathieu.
>
Mathieu,

It sounds as if you may have installed Dogtag 1.2 (the most recent 
packages on the Dogtag site), and then perhaps checked out subversion, 
and attempted to replace specific packages (perhaps using pki-setup 1.3 
with pki-ca 1.2)?

The errors that you are seeing are a result of ongoing development on 
the Dogtag Subversion TIP (currently referred to as 1.3) to comply with 
Fedora packaging requirements:

    * 1.2 - /usr/share/java/pki-ca/ca/ca.jar; 1.3 - /usr/share/java/ca.jar
    * 1.3 - removed most of the pki "helper" scripts (e. g. - 'pkiarch',
      'pkiname', and 'pkiflavor', etc.)
    * 1.2 - individual instances had their own instance named start/stop
      scripts (owned by the instance itself); 1.3 - provides a single
      master script (e. g. - pki-cad) which controls starting/stopping
      ALL instances of that subsystem type and is owned by the
      associated top-level PKI subsystem (this is currently being
      implemented for ALL Dogtag subsystems)
    * by default, 1.2 automatically creates a default instance upon
      installation of the top-level package (e. g. - pki-ca); 1.3
      requires creation of an instance utilizing the pkicreate tool
      (which is part of the pki-setup package) --- we continue to
      provide code which allows removal of legacy 1.2 instances, but
      creation of 1.3 instances all utilize the associated 1.3
      implementation

It is our hope that the 1.3 release will be accepted into a future 
version of Fedora, at which time these changes will be documented on the 
Dogtag Wiki.

As there are numerous ways of building and installing (individually, 
collectively, yum repos, SRPMS, etc.), to make certain that there isn't 
any problem, I might suggest when performing a yum install of 1.2, to 
use the associated 1.2.0 SRPMS for the related source code.

If utilizing Subversion from the TIP, be certain to update ALL packages, 
as the 1.3 release will differ substantially from the 1.2 release.  As 
always, we attempt to keep the TIP buildable and installable, although 
we do apologize for any confusion.

Thanks,
-- Matt

> On Thu, Jan 14, 2010 at 5:08 PM, Mathieu Peresse 
> <mathieu.peresse at gmail.com <mailto:mathieu.peresse at gmail.com>> wrote:
>
>     Hi all,
>
>     I'm new to dogtag, and I tried to install the PKI on a Fedora 11
>     system (fresh install).
>
>     However, I encountered the following problems when installing
>     pki-ca (yum install pki-ca):
>
>     - Yum POSTINSTALL script invoking pkicreate complained about a
>     file not being found: /usr/share/java/ca.jar.
>     It turned out that the file was loc
>
>     -- 
>     à bientôt,
>
>     Mathieu Peresse
>
>     ::Contact::
>     +33 6 86 40 69 10
>     mathieu.peresse at gmail.com <mailto:mathieu.peresse at gmail.com>
>
>
>
>
> -- 
> à bientôt,
>
> Mathieu Peresse
>
> ::Contact::
> +33 6 86 40 69 10
> mathieu.peresse at gmail.com <mailto:mathieu.peresse at gmail.com>
> ------------------------------------------------------------------------
>
> _______________________________________________
> Pki-users mailing list
> Pki-users at redhat.com
> https://www.redhat.com/mailman/listinfo/pki-users
>   

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://listman.redhat.com/archives/pki-users/attachments/20100115/3634bfd4/attachment.htm>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: smime.p7s
Type: application/x-pkcs7-signature
Size: 6654 bytes
Desc: S/MIME Cryptographic Signature
URL: <http://listman.redhat.com/archives/pki-users/attachments/20100115/3634bfd4/attachment.bin>