ipa-healtcheck: error in DogtagCertsConnectivityCheckCA with external CA

Solution Verified - Updated -

Environment

  • Red Hat Enterprise Linux 8.8
  • ipa-server-4.9.11-6
  • ipa-healthcheck-0.12-1.module

Issue

  • # ipa-healtcheck is showing ERROR: ipahealthcheck.dogtag.ca.DogtagCertsConnectivityCheck.cert_show_1: Serial number not found: Certificate operation cannot be completed: Request failed with status 404: Non-2xx response from CA REST API: 404. Certificate ID when using external CA.

Resolution

  • This is a known issue. It was being tracked under Red Hat Bugzilla 2061957 and fixed in Errata RHBA-2023:6977

Diagnostic Steps

# ipa-healthcheck
ra.get_certificate(): Request failed with status 404: Non-2xx response from CA REST API: 404. Certificate ID 0x71000ebc26455b318739f2a6510002000cbd26 not found (404)
[
  {
    "source": "ipahealthcheck.dogtag.ca",
    "check": "DogtagCertsConnectivityCheck",
    "result": "ERROR",
    "uuid": "2872ced9-4072-4586-a456-09e82acbb82c",
    "when": "20230809142624Z",
    "duration": "0.472306",
    "kw": {
      "key": "cert_show_1",
      "error": "Certificate operation cannot be completed: Request failed with status 404: Non-2xx response from CA REST API: 404. Certificate ID 0x71000ebc26455b318739f2a6510002000cbd26 not found (404)",
      "serial": "2519989221480674507674217089047461266572885030",
      "msg": "Serial number not found: {error}"
    }
  },
  • Component
  • ipa

This solution is part of Red Hat’s fast-track publication program, providing a huge library of solutions that Red Hat engineers have created while supporting our customers. To give you the knowledge you need the instant it becomes available, these articles may be presented in a raw and unedited form.

Comments