IPA upgrade failed with error: unable to convert the attribute u'cACertificate;binary'
Issue
From /var/log/ipaupgrade.log
:
RuntimeError: unable to convert the attribute u'cACertificate;binary' value 'MIIYyM<< certificate truncated >>JAVw==' to type <class 'cryptography.x509.base.Certificate'> in LDAP entry 'cn=CACert,cn=ipa,cn=etc,dc=example,dc=com'
Environment
Red Hat Enterprise Linux 7.6
ipa-server-4.6.4-10.el7.x86_64
Subscriber exclusive content
A Red Hat subscription provides unlimited access to our knowledgebase, tools, and much more.