Failed to upgrade IPA Server: cannot connect to '[...]:8443/ca/rest/account/login': [SSL: WRONG_VERSION_NUMBER]
Issue
-
Failed to upgrade IPA server when running
yum update ipa-server
. Below error message was returned:Running scriptlet: ipa-server-4.8.4-7.module+el8.2.0+6046+aaa49f96. 165/165 Job for ipa.service failed because the control process exited with error code. See "systemctl status ipa.service" and "journalctl -xe" for details. warning: %posttrans(ipa-server-4.8.4-7.module+el8.2.0+6046+aaa49f96.x86_64) scriptlet failed, exit status 1 Error in POSTTRANS scriptlet in rpm package ipa-server
-
IPA server failed to start:
# ipactl restart IPA version error: data needs to be upgraded (expected version '4.8.4-7.module+el8.2.0+6046+aaa49f96', current version '4.7.1-11.module+el8+2842+7481110c') Automatically running upgrade, for details see /var/log/ipaupgrade.log Be patient, this may take a few minutes. Automatic upgrade failed: Update complete [...] Unexpected error - see /var/log/ipaupgrade.log for details: NetworkError: cannot connect to 'https://ipa.example.com:8443/ca/rest/account/login': [SSL: WRONG_VERSION_NUMBER] wrong version number (_ssl.c:877) The ipa-server-upgrade command failed. See /var/log/ipaupgrade.log for more information See the upgrade log for more details and/or run /usr/sbin/ipa-server-upgrade again Stopping ipa-dnskeysyncd Service Stopping ipa-otpd Service Stopping pki-tomcatd Service Stopping ipa-custodia Service Stopping httpd Service Stopping named Service Stopping kadmin Service Stopping krb5kdc Service Stopping Directory Service Aborting ipactl
-
Below error message was found in
/var/log/ipaupgrade.log
2020-10-29T20:50:29Z DEBUG The ipa-server-upgrade command failed, exception: NetworkError: cannot connect to 'https://ipa.example.com:8443/ca/rest/account/login': [SSL: WRONG_VERSION_NUMBER] wrong version number (_ssl.c:877) 2020-10-29T20:50:29Z ERROR Unexpected error - see /var/log/ipaupgrade.log for details: NetworkError: cannot connect to 'https://ipa.example.com:8443/ca/rest/account/login': [SSL: WRONG_VERSION_NUMBER] wrong version number (_ssl.c:877) 2020-10-29T20:50:29Z ERROR The ipa-server-upgrade command failed. See /var/log/ipaupgrade.log for more information
Environment
- Red Hat Enterprise Linux 8.2
- Identity Management (IdM) servers
- ipa-server-4.8
- OpenJDK
- java-1.8.0-openjdk-1.8.0.272.b10-1
Subscriber exclusive content
A Red Hat subscription provides unlimited access to our knowledgebase, tools, and much more.