Uploaded image for project: 'RHEL'
  1. RHEL
  2. RHEL-21059

'DogtagCertsConfigCheck' fails, displaying the error message 'Malformed directive: ca.signing.certnickname=caSigningCert cert-pki-ca'

    • ipa-4.11.0-5.el9
    • Yes
    • None
    • Regression
    • 1
    • rhel-sst-idm-ipa
    • ssg_idm
    • 21
    • 22
    • None
    • QE ack, Dev ack
    • False
    • Hide

      None

      Show
      None
    • No
    • 2024-Q1-Alpha-S2
    • None

      What were you trying to do that didn't work?

      ipa-healthcheck displays CRITICAL error

      Please provide the package NVR for which bug is seen:

      • ipa-healthcheck-0.16-2.el9.noarch
      • ipa-server-4.11.0-4.el9.x86_64
      • idm-pki-ca-11.5.0-0.1.alpha4.el9.noarch

      Steps to reproduce

       

      [root@master ~]# ipa-healthcheck
      [
        {
          "source": "ipahealthcheck.dogtag.ca",
          "check": "DogtagCertsConfigCheck",
          "result": "CRITICAL",
          "uuid": "fa50649d-1af0-40b2-bc3b-94c71ab7924e",
          "when": "20240109102759Z",
          "duration": "0.241841",
          "kw": {
            "exception": "Malformed directive: ca.signing.certnickname=caSigningCert cert-pki-ca",
            "traceback": "Traceback (most recent call last):\n  File \"/usr/lib/python3.9/site-packages/ipahealthcheck/core/core.py\", line 56, in run_plugin\n    for result in plugin.check():\n  File \"/usr/lib/python3.9/site-packages/ipahealthcheck/core/plugin.py\", line 18, in wrapper\n    for result in f(*args, **kwds):\n  File \"/usr/lib/python3.9/site-packages/ipahealthcheck/dogtag/ca.py\", line 60, in check\n    val = get_directive(paths.CA_CS_CFG_PATH,\n  File \"/usr/lib/python3.9/site-packages/ipapython/directivesetter.py\", line 196, in get_directive\n    raise ValueError(\"Malformed directive: {}\".format(line))\nValueError: Malformed directive: ca.signing.certnickname=caSigningCert cert-pki-ca\n"
          }
        }
      ]

       

      Expected results

      The error in the check above should be fixed.

      Actual results

      Erroe: "Malformed directive: ca.signing.certnickname=caSigningCert cert-pki-ca"

              rhn-engineering-rcrit Rob Crittenden
              mvarun@redhat.com Varun Mylaraiah
              Florence Renaud Florence Renaud
              Varun Mylaraiah Varun Mylaraiah
              Votes:
              0 Vote for this issue
              Watchers:
              8 Start watching this issue

                Created:
                Updated:
                Resolved: