Project

General

Profile

Actions

Bug #11133

closed

katello-installer --certs-update-all throws nssdb amqp-client related error

Added by Sebastian @ over 9 years ago. Updated over 6 years ago.

Status:
Resolved
Priority:
Normal
Assignee:
-
Category:
-
Target version:
Difficulty:
medium
Triaged:
Fixed in Releases:
Found in Releases:

Description

katello-installer --certs-update-all is not able to update the amqp-client cert since it already exists in /etc/pki/katello/nssdb

/Stage[main]/Certs::Qpid/Exec[add-broker-cert-to-nss-db]: certutil -A -d '/etc/pki/katello/nssdb' -n 'broker' -t ',,' -a -i '/etc/pki/katello/certs/<domain>-qpid-broker.crt' returned 255 instead of one of [0]

This is caused by the fact that the entry "amqp-client" is still present in /etc/pki/katello/nssdb and not being removed during the cert update process.

Workaround:
remove the entry by yourself before running katello-installer by certutil -D -d /etc/pki/katello/nssdb -n amqp-client

Actions

Also available in: Atom PDF