Failed to upgrade IPA Server: cannot connect to '[...]:8443/ca/rest/account/login': [SSL: WRONG_VERSION_NUMBER]

Solution Verified - Updated -

Issue

  • Failed to upgrade IPA server when running yum update ipa-server. Below error message was returned:

      Running scriptlet: ipa-server-4.8.4-7.module+el8.2.0+6046+aaa49f96.   165/165 
    Job for ipa.service failed because the control process exited with error code.
    See "systemctl status ipa.service" and "journalctl -xe" for details.
    warning: %posttrans(ipa-server-4.8.4-7.module+el8.2.0+6046+aaa49f96.x86_64) scriptlet failed, exit status 1
    
    Error in POSTTRANS scriptlet in rpm package ipa-server
    
  • IPA server failed to start:

    # ipactl restart
    IPA version error: data needs to be upgraded (expected version '4.8.4-7.module+el8.2.0+6046+aaa49f96', current version '4.7.1-11.module+el8+2842+7481110c')
    Automatically running upgrade, for details see /var/log/ipaupgrade.log
    Be patient, this may take a few minutes.
    Automatic upgrade failed: Update complete
    
    [...]
    Unexpected error - see /var/log/ipaupgrade.log for details:
    NetworkError: cannot connect to 'https://ipa.example.com:8443/ca/rest/account/login': [SSL: WRONG_VERSION_NUMBER] wrong version number (_ssl.c:877)
    The ipa-server-upgrade command failed. See /var/log/ipaupgrade.log for more information
    
    See the upgrade log for more details and/or run /usr/sbin/ipa-server-upgrade again
    Stopping ipa-dnskeysyncd Service
    Stopping ipa-otpd Service
    Stopping pki-tomcatd Service
    Stopping ipa-custodia Service
    Stopping httpd Service
    Stopping named Service
    Stopping kadmin Service
    Stopping krb5kdc Service
    Stopping Directory Service
    Aborting ipactl
    
  • Below error message was found in /var/log/ipaupgrade.log

    2020-10-29T20:50:29Z DEBUG The ipa-server-upgrade command failed, exception: NetworkError: cannot connect to 'https://ipa.example.com:8443/ca/rest/account/login': [SSL: WRONG_VERSION_NUMBER] wrong version number (_ssl.c:877)
    2020-10-29T20:50:29Z ERROR Unexpected error - see /var/log/ipaupgrade.log for details:
    NetworkError: cannot connect to 'https://ipa.example.com:8443/ca/rest/account/login': [SSL: WRONG_VERSION_NUMBER] wrong version number (_ssl.c:877)
    2020-10-29T20:50:29Z ERROR The ipa-server-upgrade command failed. See /var/log/ipaupgrade.log for more information
    

Environment

  • Red Hat Enterprise Linux 8.2
  • Identity Management (IdM) servers
    • ipa-server-4.8
  • OpenJDK
    • java-1.8.0-openjdk-1.8.0.272.b10-1

Subscriber exclusive content

A Red Hat subscription provides unlimited access to our knowledgebase, tools, and much more.

Current Customers and Partners

Log in for full access

Log In

New to Red Hat?

Learn more about Red Hat subscriptions

Using a Red Hat product through a public cloud?

How to access this content