[Pkg-freeipa-devel] Bug#970880: Bug#970880: freeipa-server: FreeIPA server installation fails with Certificate issuance failed (CA_REJECTED)

[Timo Aaltonen]

On 25.9.2020 0.30, Ferran Obón wrote:
> Package: freeipa-server
> Version: 4.8.8-2
> Severity: important
> X-Debbugs-Cc: ferran.obon at gmail.com
> 
> Dear Maintainer,
> 
> On a fresh install of Debian, the command ipa-server-install ends with the following error:
> RuntimeError: Certificate issuance failed (CA_REJECTED: Server at "https://debian.test.lan:8443/ca/agent/ca//profileProcess" replied:  1: You did not provide a valid certificate for this operation).

Yes, this is probably related to jdk11, so could you test if installing 
openjdk-8-jre and linking /usr/share/pki/java-home to 
/usr/lib/jvm/java-8-openjdk-amd64 helps? AIUI dogtag is built with 
support for java8.


--
t