Bug 1572548 - IPA install with external-CA is failing when FIPS mode enabled. [rhel-7.5.z]
Summary: IPA install with external-CA is failing when FIPS mode enabled. [rhel-7.5.z]
Alias: None
Product: Red Hat Enterprise Linux 7
Classification: Red Hat
Component: pki-core
Version: 7.5
Hardware: Unspecified
OS: Unspecified
Target Milestone: rc
: ---
Assignee: Endi Sukma Dewata
QA Contact: Asha Akkiangady
Depends On: 1567910
TreeView+ depends on / blocked
Reported: 2018-04-27 10:01 UTC by Oneata Mircea Teodor
Modified: 2018-06-26 16:48 UTC (History)
11 users (show)

Fixed In Version: pki-core-10.5.1-12.el7_5
Doc Type: No Doc Update
Doc Text:
Clone Of: 1567910
Last Closed: 2018-06-26 16:47:58 UTC
Target Upstream Version:

Attachments (Terms of Use)

System ID Private Priority Status Summary Last Updated
Red Hat Product Errata RHSA-2018:1979 0 None None None 2018-06-26 16:48:27 UTC

Description Oneata Mircea Teodor 2018-04-27 10:01:06 UTC
This bug has been copied from bug #1567910 and has been proposed to be backported to 7.5 z-stream (EUS).

Comment 3 Endi Sukma Dewata 2018-04-27 20:13:51 UTC
Fixed in upstream 10.5 branch:
* https://github.com/dogtagpki/pki/commit/d61f9729dcc102c9acbbaa8129fffb6c30fb7116

Comment 4 Matthew Harmsen 2018-05-21 20:41:14 UTC
The fix can be verified with the procedure provided in the original bug description, either with IPA or without IPA.

Comment 6 Nikhil Dehadrai 2018-06-07 07:19:58 UTC
IPA-Version: ipa-4.5.4-10.el7_5.2

Verified the bug on the basis of following observations:
1. Verified that IPA-server installation using External-CA in FIPS mode is successful.

2. Verified that plain IPA-server installation using External-CA is successful.

Thus on the basis of above observations, marking bug as 'Verified'

Comment 9 errata-xmlrpc 2018-06-26 16:47:58 UTC
Since the problem described in this bug report should be
resolved in a recent advisory, it has been closed with a
resolution of ERRATA.

For information on the advisory, and where to find the updated
files, follow the link below.

If the solution does not work for you, open a new bug report.


Note You need to log in before you can comment on or make changes to this bug.