[Pkg-freeipa-devel] Bug#970880: Bug#970880: freeipa-server: FreeIPA server installation fails with Certificate issuance failed (CA_REJECTED)

[Timo Aaltonen]

On 25.9.2020 7.12, Timo Aaltonen wrote:
> On 25.9.2020 0.30, Ferran Obón wrote:
>> Package: freeipa-server
>> Version: 4.8.8-2
>> Severity: important
>> X-Debbugs-Cc: ferran.obon at gmail.com
>>
>> Dear Maintainer,
>>
>> On a fresh install of Debian, the command ipa-server-install ends with 
>> the following error:
>> RuntimeError: Certificate issuance failed (CA_REJECTED: Server at 
>> "https://debian.test.lan:8443/ca/agent/ca//profileProcess" replied:  
>> 1: You did not provide a valid certificate for this operation).
> 
> Yes, this is probably related to jdk11, so could you test if installing 
> openjdk-8-jre and linking /usr/share/pki/java-home to 
> /usr/lib/jvm/java-8-openjdk-amd64 helps? AIUI dogtag is built with 
> support for java8.

Well, I finally tested it myself, and it won't help. So the failure is 
caused by something else than dogtag java11 migration.

-- 
t