Uploaded image for project: 'RHEL'
  1. RHEL
  2. RHEL-39701

[IPA Healthcheck]The 'DogtagCertsConfigCheck' fails with the error message: 'Malformed directive: ca.signing.certnickname=caSigningCert cert-pki-ca'.

    • ipa-healthcheck-0.16-6.el10
    • Yes
    • None
    • Regression
    • 2
    • sst_idm_ipa
    • ssg_idm
    • 23
    • 1
    • Dev ack
    • False
    • Hide

      None

      Show
      None
    • No
    • 2024-Q3-Bravo-S2, 2024-Q3-Bravo-S3
    • Unspecified Release Note Type - Unknown
    • None

      What were you trying to do that didn't work?

      ipa-healthcheck displays CRITICAL error

      Please provide the package NVR for which bug is seen:

      • ipa-healthcheck-0.16-4.el10.noarch
      • ipa-server-4.11.1-4.el10.x86_64
      • idm-pki-ca-11.5.0-2.el10.noarch

       

      [root@master ~]# cat /etc/Redhat-release
      Red Hat Enterprise Linux release 10.0 Beta (Coughlan)

       

       

      [root@master ~]# ipa-healthcheck --source ipahealthcheck.dogtag.ca
      [
        {
          "source": "ipahealthcheck.dogtag.ca",
          "check": "DogtagCertsConfigCheck",
          "result": "CRITICAL",
          "uuid": "939ff2c3-7ebd-4a53-aa8f-5dae8b10337c",
          "when": "20240603075733Z",
          "duration": "0.298634",
          "kw": {
            "exception": "Malformed directive: ca.signing.certnickname=caSigningCert cert-pki-ca",
            "traceback": "Traceback (most recent call last):\n  File \"/usr/lib/python3.12/site-packages/ipahealthcheck/core/core.py\", line 56, in run_plugin\n    for result in plugin.check():\n  File \"/usr/lib/python3.12/site-packages/ipahealthcheck/core/plugin.py\", line 18, in wrapper\n    for result in f(*args, **kwds):\n  File \"/usr/lib/python3.12/site-packages/ipahealthcheck/dogtag/ca.py\", line 60, in check\n    val = get_directive(paths.CA_CS_CFG_PATH,\n          ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^\n  File \"/usr/lib/python3.12/site-packages/ipapython/directivesetter.py\", line 196, in get_directive\n    raise ValueError(\"Malformed directive: {}\".format(line))\nValueError: Malformed directive: ca.signing.certnickname=caSigningCert cert-pki-ca\n"
          }
        }
      ]

       

      Expected results

      The error in the check above should be fixed.

      Actual results

      Erroe: "Malformed directive: ca.signing.certnickname=caSigningCert cert-pki-ca"

            rhn-engineering-rcrit Rob Crittenden
            mvarun@redhat.com Varun Mylaraiah
            Rob Crittenden Rob Crittenden
            Varun Mylaraiah Varun Mylaraiah
            Votes:
            0 Vote for this issue
            Watchers:
            6 Start watching this issue

              Created:
              Updated: