Bug 1572548 – IPA install with external-CA is failing when FIPS mode enabled. [rhel-7.5.z]

Bugzilla will be upgraded to version 5.0. The upgrade date is tentatively scheduled for 2 December 2018, pending final testing and feedback.

Bug 1572548 - IPA install with external-CA is failing when FIPS mode enabled. [rhel-7.5.z]

Summary:	IPA install with external-CA is failing when FIPS mode enabled. [rhel-7.5.z]

Status:	CLOSED ERRATA

Aliases:	None

Product:	Red Hat Enterprise Linux 7
Classification:	Red Hat
Component:	pki-core (Show other bugs)
Sub Component:
Version:	7.5
Hardware:	Unspecified Unspecified

Priority	high Severity high
Target Milestone:	rc
Target Release:	---
Assigned To:	Endi Sukma Dewata
QA Contact:	Asha Akkiangady
Docs Contact:

URL:
Whiteboard:
Keywords:	Regression, TestCaseProvided, ZStream

Depends On:	1567910
Blocks:
	Show dependency tree / graph

Reported:	2018-04-27 06:01 EDT by Oneata Mircea Teodor
Modified:	2018-06-26 12:48 EDT (History)
CC List:	11 users (show)

See Also:
Fixed In Version:	pki-core-10.5.1-12.el7_5
Doc Type:	No Doc Update
Doc Text:	undefined
Story Points:	---
Clone Of:	1567910
Environment:
Last Closed:	2018-06-26 12:47:58 EDT
Type:	---
Regression:	---
Mount Type:	---
Documentation:	---
CRM:
Verified Versions:
Category:	---
oVirt Team:	---
RHEL 7.3 requirements from Atomic Host:
Cloudforms Team:	---

Attachments	(Terms of Use)
Add an attachment (proposed patch, testcase, etc.)

External Trackers
Tracker	ID	Priority	Status	Summary	Last Updated
Red Hat Product Errata	RHSA-2018:1979	None	None	None	2018-06-26 12:48 EDT

Groups: None (edit)

Description Oneata Mircea Teodor 2018-04-27 06:01:06 EDT

This bug has been copied from bug #1567910 and has been proposed to be backported to 7.5 z-stream (EUS).

Comment 3 Endi Sukma Dewata 2018-04-27 16:13:51 EDT

Fixed in upstream 10.5 branch:
* https://github.com/dogtagpki/pki/commit/d61f9729dcc102c9acbbaa8129fffb6c30fb7116

Comment 4 Matthew Harmsen 2018-05-21 16:41:14 EDT

The fix can be verified with the procedure provided in the original bug description, either with IPA or without IPA.

Comment 6 Nikhil Dehadrai 2018-06-07 03:19:58 EDT

IPA-Version: ipa-4.5.4-10.el7_5.2

Verified the bug on the basis of following observations:
1. Verified that IPA-server installation using External-CA in FIPS mode is successful.

2. Verified that plain IPA-server installation using External-CA is successful.

Thus on the basis of above observations, marking bug as 'Verified'

Comment 9 errata-xmlrpc 2018-06-26 12:47:58 EDT

Since the problem described in this bug report should be
resolved in a recent advisory, it has been closed with a
resolution of ERRATA.

For information on the advisory, and where to find the updated
files, follow the link below.

If the solution does not work for you, open a new bug report.

https://access.redhat.com/errata/RHSA-2018:1979

Note You need to log in before you can comment on or make changes to this bug.