Re: Cannot create cert chain: certificate signature failure

2015-09-05 Thread Greg Hudson
On 09/05/2015 02:53 AM, Russ Allbery wrote: >>> Sep 4 22:48:34 mithrandir krb5kdc[12868]: AS_REQ (6 etypes {18 17 16 23 25 >>> 26}) 127.0.0.1: KDC_RETURN_PADATA: WELLKNOWN/anonym...@eyrie.org for >>> krbtgt/eyrie....@eyrie.org, Cannot create cert chain: certifi

Re: Cannot create cert chain: certificate signature failure

2015-09-04 Thread Russ Allbery
g, Cannot create cert chain: certificate signature >> failure >> >> Any idea what's going on? This appears to be some failure inside OpenSSL, >> but it looks like absolutely no information about the error is actually >> logged anywhere? > We're logging wh

Re: Cannot create cert chain: certificate signature failure

2015-09-04 Thread Greg Hudson
On 09/05/2015 01:57 AM, Russ Allbery wrote: > Sep 4 22:48:34 mithrandir krb5kdc[12868]: AS_REQ (6 etypes {18 17 16 23 25 > 26}) 127.0.0.1: KDC_RETURN_PADATA: WELLKNOWN/anonym...@eyrie.org for > krbtgt/eyrie@eyrie.org, Cannot create cert chain: certificate signature > failure

Re: Cannot create cert chain: certificate signature failure

2015-09-04 Thread Russ Allbery
types {18 17 16 23 25 > 26}) 127.0.0.1: KDC_RETURN_PADATA: WELLKNOWN/anonym...@eyrie.org for > krbtgt/eyrie@eyrie.org, Cannot create cert chain: certificate signature > failure > Any idea what's going on? This appears to be some failure inside OpenSSL, > but it looks like

Cannot create cert chain: certificate signature failure

2015-09-04 Thread Russ Allbery
}) 127.0.0.1: KDC_RETURN_PADATA: WELLKNOWN/anonym...@eyrie.org for krbtgt/eyrie@eyrie.org, Cannot create cert chain: certificate signature failure Any idea what's going on? This appears to be some failure inside OpenSSL, but it looks like absolutely no information about the error is actually l