Look data via FreeIPA-users wrote: > Hi Rob, > > It's Ubuntu 16.04 and a server running on it. IPA VERSION: 4.3.1, > API_VERSION: 2.164. > > I installed libnsspem from Ubuntu 18.04. Following that, the error message > changed from Error 77 to Error 60 as mentioned here. > > I'm not sure what else I need to change. >
I don't know. The server on Ubuntu is built and linked differently than Fedora or RHEL releases and is using very old code by Internet standards. The submission by /usr/libexec/certmonger/dogtag-ipa-renew-agent-submit should include the path to /etc/ipa/ca.crt which is passed into libcurl by certmonger. It's possible that this either isn't being passed into or isn't being used by nss-pem. It well could be an issue in curl. Note that curl upstream has dropped this integration. rob -- _______________________________________________ FreeIPA-users mailing list -- freeipa-users@lists.fedorahosted.org To unsubscribe send an email to freeipa-users-le...@lists.fedorahosted.org Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedorahosted.org/archives/list/freeipa-users@lists.fedorahosted.org Do not reply to spam, report it: https://pagure.io/fedora-infrastructure/new_issue