Back to bug 1390321

Who When What Removed Added
Matthew Harmsen 2016-11-01 10:03:14 UTC Status NEW MODIFIED
Fixed In Version pki-core-10.3.3-12.el7_3
errata-xmlrpc 2016-11-01 10:14:17 UTC Status MODIFIED ON_QA
Geetika Kapoor 2016-11-04 05:20:39 UTC CC gkapoor
Flags needinfo?(ftweedal)
Fraser Tweedale 2016-11-04 07:29:05 UTC Flags needinfo?(ftweedal)
Geetika Kapoor 2016-11-08 08:00:56 UTC Flags needinfo?(ftweedal)
Ade Lee 2016-11-10 15:00:19 UTC CC alee
Geetika Kapoor 2016-11-10 15:07:15 UTC Flags needinfo?(ftweedal)
Geetika Kapoor 2016-11-10 15:20:58 UTC Flags needinfo?(alee)
Ade Lee 2016-11-12 06:52:47 UTC CC edewata
Flags needinfo?(edewata)
Ade Lee 2016-11-12 06:53:59 UTC CC cfu
Flags needinfo?(cfu)
Geetika Kapoor 2016-11-14 17:08:08 UTC Flags needinfo?(alee) needinfo?(edewata) needinfo?(cfu)
Geetika Kapoor 2016-11-14 17:08:35 UTC Status ON_QA VERIFIED
Fraser Tweedale 2016-11-16 00:30:14 UTC Doc Text Cause: Lightweight CA key replication is attempted during
two-step installation, because the CA signing key is not
available.

Consequence: Installation fails because lightweight CA key replication attempts to read the CA's UUID, which has not yet been assigned.

Fix: Avoid triggering lightweight CA key replication for the main CA.

Result: Two-step installation succeeds.
Doc Type If docs needed, set a value Bug Fix
Petr Bokoc 2016-11-21 14:14:59 UTC CC pbokoc
Doc Text Cause: Lightweight CA key replication is attempted during
two-step installation, because the CA signing key is not
available.

Consequence: Installation fails because lightweight CA key replication attempts to read the CA's UUID, which has not yet been assigned.

Fix: Avoid triggering lightweight CA key replication for the main CA.

Result: Two-step installation succeeds.
Previously, during two-step installation, Certificate System attempted to perform a lightweight CA key replication because the CA signing key was not available. This caused the installation to fail because lightweight CA key replication attempts to read the CA's UUID, which was not yet assigned at this point. With this update, two-step installation does not attempt to perform a lightweight CA key replication, and can now complete successfully.
errata-xmlrpc 2016-12-06 00:24:53 UTC Status VERIFIED RELEASE_PENDING
errata-xmlrpc 2016-12-06 17:05:12 UTC Status RELEASE_PENDING CLOSED
Resolution --- ERRATA
Last Closed 2016-12-06 12:05:12 UTC

Back to bug 1390321