
<div dir="ltr"><div>I'm trying to install FreeIPA on a debian unstable box (updated today).</div><div>I got the changes for getProtocol and they seems to work, but a later stage fails.</div><div><br></div><div>Do any of you see the same failure?</div><div><br></div><div>I get this in the console:</div><div><br></div><div>  [18/26]: restarting certificate server</div><div>  [19/26]: requesting RA certificate from CA</div><div>  [20/26]: issuing RA agent certificate</div><div>['"ipa-ca-agent" [CN=ipa-ca-agent,O=HEMMA]', '', '']</div><div>[]</div><div>['/usr/bin/sslget', '-v', '-n', 'ipa-ca-agent', '-p', 'XXXXXX', '-d', '/tmp/tmp-FZybjv', '-r', u'/ca/agent/ca/profileReview?requestId=7', 'host.hostname:8443']</div><div>Unexpected error - see /var/log/ipaserver-install.log for details:</div><div>CalledProcessError: Command ''/usr/bin/sslget' '-v' '-n' 'ipa-ca-agent' '-p' XXXXXXXX '-d' '/tmp/tmp-FZybjv' '-r' '/ca/agent/ca/profileReview?requestId=7' 'host.hostname:8443'' returned non-zero exit status 3</div><div><br></div><div><br></div><div>When running the sslget command by hand I get:</div><div><br></div><div><div><html><head><title>Apache Tomcat/7.0.63 (Debian) - Error report</title><style><!--H1 {font-family:Tahoma,Arial,sans-serif;color:white;background-color:#525D76;font-size:22px;} H2 {font-family:Tahoma,Arial,sans-serif;color:white;background-color:#525D76;font-size:16px;} H3 {font-family:Tahoma,Arial,sans-serif;color:white;background-color:#525D76;font-size:14px;} BODY {font-family:Tahoma,Arial,sans-serif;color:black;background-color:white;} B {font-family:Tahoma,Arial,sans-serif;color:white;background-color:#525D76;} P {font-family:Tahoma,Arial,sans-serif;background:white;color:black;font-size:12px;}A {color : black;}A.name {color : black;}HR {color : #525D76;}--></style> </head><body><h1>HTTP Status 500 - Servlet execution threw an exception</h1><HR size="1" noshade="noshade"><p><b>type</b> Exception report</p><p><b>message</b> <u>Servlet execution threw an exception</u></p><p><b>description</b> <u>The server encountered an internal error that prevented it from fulfilling this request.</u></p><p><b>exception</b> <pre>javax.servlet.ServletException: Servlet execution threw an exception</div><div></pre></p><p><b>root cause</b> <pre>java.lang.AbstractMethodError: org.apache.tomcat.util.net.jss.JSSSupport.getPeerCertificateChain(Z)[Ljava/lang/Object;</div><div><span class="Apple-tab-span" style="white-space:pre">        </span>org.apache.coyote.http11.Http11Processor.actionInternal(Http11Processor.java:256)</div><div><span class="Apple-tab-span" style="white-space:pre">    </span>org.apache.coyote.http11.AbstractHttp11Processor.action(AbstractHttp11Processor.java:911)</div><div><span class="Apple-tab-span" style="white-space:pre">    </span>org.apache.coyote.Request.action(Request.java:347)</div><div><span class="Apple-tab-span" style="white-space:pre">   </span>org.apache.catalina.connector.Request.getAttribute(Request.java:956)</div><div><span class="Apple-tab-span" style="white-space:pre"> </span>org.apache.catalina.connector.RequestFacade.getAttribute(RequestFacade.java:283)</div><div><span class="Apple-tab-span" style="white-space:pre">     </span>com.netscape.cms.servlet.base.CMSServlet.getSSLClientCertificate(CMSServlet.java:858)</div><div><span class="Apple-tab-span" style="white-space:pre">        </span>com.netscape.cms.servlet.base.CMSServlet.authenticate(CMSServlet.java:1743)</div><div><span class="Apple-tab-span" style="white-space:pre">  </span>com.netscape.cms.servlet.base.CMSServlet.authenticate(CMSServlet.java:1685)</div><div><span class="Apple-tab-span" style="white-space:pre">  </span>com.netscape.cms.servlet.profile.ProfileReviewServlet.process(ProfileReviewServlet.java:114)</div><div><span class="Apple-tab-span" style="white-space:pre"> </span>com.netscape.cms.servlet.base.CMSServlet.service(CMSServlet.java:513)</div><div><span class="Apple-tab-span" style="white-space:pre">        </span>javax.servlet.http.HttpServlet.service(HttpServlet.java:731)</div><div></pre></p><p><b>note</b> <u>The full stack trace of the root cause is available in the Apache Tomcat/7.0.63 (Debian) logs.</u></p><HR size="1" noshade="noshade"><h3>Apache Tomcat/7.0.63 (Debian)</h3></body></html></div></div><div><br></div><div>/minus</div></div>