Bug 1390324

Summary:	KRA installation failed against externally-signed CA with partial certificate chain
Product:	Red Hat Enterprise Linux 7	Reporter:	Tom Lavigne <tlavigne>
Component:	pki-core	Assignee:	RHCS Maintainers <rhcs-maint>
Status:	CLOSED ERRATA	QA Contact:	Asha Akkiangady <aakkiang>
Severity:	urgent	Docs Contact:
Priority:	urgent
Version:	7.3	CC:	arubin, cfu, edewata, ekeck, kengert, mharmsen, nkinder, pvoborni, rhcs-maint, rpattath
Target Milestone:	rc	Keywords:	ZStream
Target Release:	---
Hardware:	All
OS:	Linux
Whiteboard:
Fixed In Version:	pki-core-10.3.3-12.el7_3	Doc Type:	If docs needed, set a value
Doc Text:		Story Points:	---
Clone Of:	1381084	Environment:
Last Closed:	2016-12-06 17:05:24 UTC	Type:	---
Regression:	---	Mount Type:	---
Documentation:	---	CRM:
Verified Versions:		Category:	---
oVirt Team:	---	RHEL 7.3 requirements from Atomic Host:
Cloudforms Team:	---	Target Upstream Version:
Embargoed:
Bug Depends On:	1381084
Bug Blocks:

Description Tom Lavigne 2016-10-31 17:05:50 UTC

This bug has been copied from bug #1381084 and has been proposed
to be backported to 7.3 z-stream (EUS).

Comment 4 Roshni 2016-11-04 21:12:18 UTC

[root@mgmt2 ~]# rpm -qi pki-ca
Name        : pki-ca
Version     : 10.3.3
Release     : 13.el7_3
Architecture: noarch
Install Date: Fri 04 Nov 2016 03:44:16 PM EDT
Group       : System Environment/Daemons
Size        : 2431509
License     : GPLv2
Signature   : (none)
Source RPM  : pki-core-10.3.3-13.el7_3.src.rpm
Build Date  : Thu 03 Nov 2016 09:39:03 PM EDT
Build Host  : ppc-016.build.eng.bos.redhat.com
Relocations : (not relocatable)
Packager    : Red Hat, Inc. <http://bugzilla.redhat.com/bugzilla>
Vendor      : Red Hat, Inc.
URL         : http://pki.fedoraproject.org/
Summary     : Certificate System - Certificate Authority

KRA installation with externally signed CA was successful without specifying the certificate chain in the KRA installation file. Refer https://bugzilla.redhat.com/show_bug.cgi?id=1381084#c0 for the config files used.

Comment 6 errata-xmlrpc 2016-12-06 17:05:24 UTC

Since the problem described in this bug report should be
resolved in a recent advisory, it has been closed with a
resolution of ERRATA.

For information on the advisory, and where to find the updated
files, follow the link below.

If the solution does not work for you, open a new bug report.

https://rhn.redhat.com/errata/RHBA-2016-2881.html