-
Bug
-
Resolution: Not a Bug
-
Major
-
None
-
CentOS Stream 9
-
None
-
Yes
-
None
-
rhel-idm-pki
-
ssg_idm
-
None
-
None
-
CentOS Stream
-
None
-
None
-
None
-
All
-
None
Dears,
On CoreOS, the PKI misses a few files for the browser portal used to enroll users or approve users.
On fedora, a dogtag installation includes the following common RPMs:
dnf list --installed | grep dogtag dogtag-jss.x86_64 5.6.0-2.fc41 updates dogtag-jss-tomcat.x86_64 5.6.0-2.fc41 updates dogtag-ldapjdk.noarch 5.6.0-1.fc41 updates dogtag-pki-base.noarch 11.6.0-1.fc41.2 updates dogtag-pki-ca.noarch 11.6.0-1.fc41.2 updates dogtag-pki-java.noarch 11.6.0-1.fc41.2 updates dogtag-pki-kra.noarch 11.6.0-1.fc41.2 updates dogtag-pki-server.noarch 11.6.0-1.fc41.2 updates dogtag-pki-theme.noarch 11.6.0-1.fc41.2 updates dogtag-pki-tools.x86_64 11.6.0-1.fc41.2 updates python3-dogtag-pki.noarch 11.6.0-1.fc41.2 updates
The theme contains the following files:
rpm -ql dogtag-pki-theme.noarch /usr/share/licenses/dogtag-pki-theme /usr/share/licenses/dogtag-pki-theme/LICENSE /usr/share/pki /usr/share/pki/CS_SERVER_VERSION /usr/share/pki/common-ui /usr/share/pki/common-ui/ca /usr/share/pki/common-ui/ca/404.properties /usr/share/pki/common-ui/ca/500.properties /usr/share/pki/common-ui/ca/admin /usr/share/pki/common-ui/ca/admin/ca /usr/share/pki/common-ui/ca/admin/ca/securitydomainlogin.properties /usr/share/pki/common-ui/ca/admin/ca/sendCookie.properties /usr/share/pki/common-ui/ca/agent /usr/share/pki/common-ui/ca/agent/header.properties /usr/share/pki/common-ui/ca/agent/index.properties /usr/share/pki/common-ui/ca/agent/ports.properties /usr/share/pki/common-ui/ca/ee /usr/share/pki/common-ui/ca/ee/ProfileList.properties /usr/share/pki/common-ui/ca/ee/ca /usr/share/pki/common-ui/ca/ee/ca/index.properties /usr/share/pki/common-ui/ca/services.properties /usr/share/pki/common-ui/css /usr/share/pki/common-ui/css/bootstrap.css /usr/share/pki/common-ui/css/patternfly.css /usr/share/pki/common-ui/css/pki-360.css ... (some more)
Without those files, the browser interface does not load and does not work properly.
This problem has been already identified in CentOS 7 in 2021:
"The theme package appears to have gone missing in the CentOS repos but you can search the internet and install this one to pretty it up: dogtag-pki-server-theme-10.5.7-1.fc27.noarch.rpm"
Source: https://paul.larwood.id.au/2021/05/10/centos-7-dogtag-certificate-system-install/
