Bug 1256037

Summary:	[Documentation bug]: Possible missing step in CA cert renewal instructions
Product:	Red Hat Enterprise Linux 6	Reporter:	Daniel Riek <riek>
Component:	doc-Identity_Management_Guide	Assignee:	Marc Muehlfeld <mmuehlfe>
Status:	CLOSED CURRENTRELEASE	QA Contact:	Namita Soman <nsoman>
Severity:	low	Docs Contact:
Priority:	low
Version:	6.7	CC:	apetrova, bhaubeck, jcholast, mkosek, mmuehlfe, pvoborni, rcritten
Target Milestone:	rc	Keywords:	Documentation, EasyFix
Target Release:	---
Hardware:	Unspecified
OS:	Unspecified
Whiteboard:
Fixed In Version:		Doc Type:	Bug Fix
Doc Text:		Story Points:	---
Clone Of:		Environment:
Last Closed:	2016-05-11 07:08:26 UTC	Type:	Bug
Regression:	---	Mount Type:	---
Documentation:	---	CRM:
Verified Versions:		Category:	---
oVirt Team:	---	RHEL 7.3 requirements from Atomic Host:
Cloudforms Team:	---	Target Upstream Version:
Embargoed:

Description Daniel Riek 2015-08-23 14:26:43 UTC

Following the instructions in https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/6/html/Identity_Management_Guide/cas.html to renew an external CA certificate, the old cert was left in /etc/httpd/alias/cacert.asc . This subsequently lead to issues because ipa-replica-prepare uses that file.

Step 6 in the above guide should add the following command:
ln -sf /usr/share/ipa/html/ca.crt /etc/httpd/alias/cacert.asc

Comment 3 Jan Cholasta 2015-09-21 05:46:59 UTC

This is indeed a bug in the guide. The "Update the CA certificate in the file system" step in the "Install the new CA certificate on your first-installed IdM server", "Install the new CA certificate on other IdM servers with a CA" and "Install the new CA certificate on other IdM masters without a CA" chapters in the guide should be changed to:

  Update the CA certificate in the file system:

    # cp /root/ipa.crt /etc/ipa/ca.crt
    # cat /root/ipa.crt /root/external-ca.pem >/etc/httpd/alias/cacert.asc
    # cp /etc/httpd/alias/cacert.asc /usr/share/ipa/html/ca.crt

Changing the component to doc-Identity_Management_Guide.

Comment 5 Marc Muehlfeld 2016-04-25 06:24:00 UTC

I updated the commands in all three steps.