Bug #8850: puppet ordering causing failure to import gutterball certificate into katello nssdb - Katello - Foreman

Bug #8850

puppet ordering causing failure to import gutterball certificate into katello nssdb

Added by dustin tsang about 8 years ago. Updated over 4 years ago.

Status:

Closed

Priority:

Normal

Assignee:

dustin tsang

Category:

Installer

Target version:

Katello 2.2

Difficulty:

Triaged:

Yes

Bugzilla link:

Pull request:

https://github.com/Katello/puppet-certs/pull/42

Fixed in Releases:

Found in Releases:

Red Hat JIRA:

Description

getting a SEC_ERROR_LEGACY_DATABASE: The certificate/key database is in an old, unsupported format installing nightly katello
cert is being imported before nssdb is created.

[ WARN 2015-01-06 13:28:28 verbose] /Stage[main]/Certs::Gutterball/Certs::Ssltools::Certutil[guterball-amqp-client]/Exec[delete guterball-amqp-client]: Triggered 'refresh' from 1 events
[ WARN 2015-01-06 13:28:28 verbose] /Stage[main]/Certs::Gutterball/Certs::Ssltools::Certutil[guterball-amqp-client]/Exec[guterball-amqp-client]/returns: certutil: function failed: SEC_ERROR_LEGACY_DATABASE: The certificate/key database is in an old, unsupported format.
[ERROR 2015-01-06 13:28:28 verbose] /Stage[main]/Certs::Gutterball/Certs::Ssltools::Certutil[guterball-amqp-client]/Exec[guterball-amqp-client]: Failed to call refresh: certutil -A -d '/etc/pki/katello/nssdb' -n 'guterball-amqp-client' -t ',,' -a -i '/etc/pki/katello/gutterball.crt' returned 255 instead of one of [0]
[ERROR 2015-01-06 13:28:28 verbose] /Stage[main]/Certs::Gutterball/Certs::Ssltools::Certutil[guterball-amqp-client]/Exec[guterball-amqp-client]: certutil -A -d '/etc/pki/katello/nssdb' -n 'guterball-amqp-client' -t ',,' -a -i '/etc/pki/katello/gutterball.crt' returned 255 instead of one of [0]

Related issues