[Pkg-freeipa-devel] ipa-server-installation fails on 'issuing RA agent certificate' step

Sat Aug 1 13:25:20 UTC 2015

I'm trying to install FreeIPA on a debian unstable box (updated today).
I got the changes for getProtocol and they seems to work, but a later stage
fails.

Do any of you see the same failure?

I get this in the console:

  [18/26]: restarting certificate server
  [19/26]: requesting RA certificate from CA
  [20/26]: issuing RA agent certificate
['"ipa-ca-agent" [CN=ipa-ca-agent,O=HEMMA]', '', '']
[]
['/usr/bin/sslget', '-v', '-n', 'ipa-ca-agent', '-p', 'XXXXXX', '-d',
'/tmp/tmp-FZybjv', '-r', u'/ca/agent/ca/profileReview?requestId=7',
'host.hostname:8443']
Unexpected error - see /var/log/ipaserver-install.log for details:
CalledProcessError: Command ''/usr/bin/sslget' '-v' '-n' 'ipa-ca-agent'
'-p' XXXXXXXX '-d' '/tmp/tmp-FZybjv' '-r'
'/ca/agent/ca/profileReview?requestId=7' 'host.hostname:8443'' returned
non-zero exit status 3

When running the sslget command by hand I get:

<html><head><title>Apache Tomcat/7.0.63 (Debian) - Error
report</title><style><!--H1
{font-family:Tahoma,Arial,sans-serif;color:white;background-color:#525D76;font-size:22px;}
H2
{font-family:Tahoma,Arial,sans-serif;color:white;background-color:#525D76;font-size:16px;}
H3
{font-family:Tahoma,Arial,sans-serif;color:white;background-color:#525D76;font-size:14px;}
BODY
{font-family:Tahoma,Arial,sans-serif;color:black;background-color:white;} B
{font-family:Tahoma,Arial,sans-serif;color:white;background-color:#525D76;}
P
{font-family:Tahoma,Arial,sans-serif;background:white;color:black;font-size:12px;}A
{color : black;}A.name {color : black;}HR {color : #525D76;}--></style>
</head><body><h1>HTTP Status 500 - Servlet execution threw an
exception</h1><HR size="1" noshade="noshade"><p><b>type</b> Exception
report</p><p><b>message</b> <u>Servlet execution threw an
exception</u></p><p><b>description</b> <u>The server encountered an
internal error that prevented it from fulfilling this
request.</u></p><p><b>exception</b> <pre>javax.servlet.ServletException:
Servlet execution threw an exception
</pre></p><p><b>root cause</b> <pre>java.lang.AbstractMethodError:
org.apache.tomcat.util.net.jss.JSSSupport.getPeerCertificateChain(Z)[Ljava/lang/Object;
org.apache.coyote.http11.Http11Processor.actionInternal(Http11Processor.java:256)
org.apache.coyote.http11.AbstractHttp11Processor.action(AbstractHttp11Processor.java:911)
org.apache.coyote.Request.action(Request.java:347)
org.apache.catalina.connector.Request.getAttribute(Request.java:956)
org.apache.catalina.connector.RequestFacade.getAttribute(RequestFacade.java:283)
com.netscape.cms.servlet.base.CMSServlet.getSSLClientCertificate(CMSServlet.java:858)
com.netscape.cms.servlet.base.CMSServlet.authenticate(CMSServlet.java:1743)
com.netscape.cms.servlet.base.CMSServlet.authenticate(CMSServlet.java:1685)
com.netscape.cms.servlet.profile.ProfileReviewServlet.process(ProfileReviewServlet.java:114)
com.netscape.cms.servlet.base.CMSServlet.service(CMSServlet.java:513)
javax.servlet.http.HttpServlet.service(HttpServlet.java:731)
</pre></p><p><b>note</b> <u>The full stack trace of the root cause is
available in the Apache Tomcat/7.0.63 (Debian) logs.</u></p><HR size="1"
noshade="noshade"><h3>Apache Tomcat/7.0.63 (Debian)</h3></body></html>

/minus
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.alioth.debian.org/pipermail/pkg-freeipa-devel/attachments/20150801/050c2da0/attachment.html>