http://bugzilla.novell.com/show_bug.cgi?id=991677 Bug ID: 991677 Summary: auth-server: Impossible to reactivate "use Common Server Certificate" Classification: openSUSE Product: openSUSE Distribution Version: Leap 42.1 Hardware: Other OS: openSUSE 42.1 Status: NEW Severity: Normal Priority: P5 - None Component: YaST2 Assignee: yast2-maintainers@suse.de Reporter: ralf.habacker@freenet.de QA Contact: jsrain@suse.com Found By: --- Blocker: --- Entered into CA Management, Created a Root CA, Added server Certificate. Exported as a Common server Certificate. Opened Yast Common server Certificate and confirmed that certificate is exported. Opened Yast Authentication server, Under TLS settings, enabled TLS, Enabled "use Common server certificate" and finished server setup. Reopened Yast Authentication server, goto TLS setting, uncheck "use Common server certificate" and enable "use Common server certificate" again Yast complained that there is no "Common server certificate" available and disables the checkbox. running Y2DEBUG=1 yast2 auth-server shows that the Ca file is searched at /etc/ssl/certs/YaST-CA.pem. In truth the file is located at /usr/share/pki/trust/anchors/YaST-CA.pem. 2016-08-02 13:11:18 <0> linux-t0qd(23365) [Ruby] binary/Yast.cc(ycp_module_call_ycp_function):191 Dynamic Proxy: [AuthServer::HaveCommonServerCertificate] with [4] params 2016-08-02 13:11:18 <0> linux-t0qd(23365) [Ruby] binary/Yast.cc(ycp_module_call_ycp_function):200 Namespace created from .../AuthServer 2016-08-02 13:11:18 <0> linux-t0qd(23365) [Y2Perl] YPerlNamespace.cc(createFunctionCall):522 Creating function call for HaveCommonServerCertificate 2016-08-02 13:11:18 <0> linux-t0qd(23365) [Ruby] binary/Yast.cc(ycp_module_call_ycp_function):235 Call HaveCommonServerCertificate 2016-08-02 13:11:18 <1> linux-t0qd(23365) [-e] HaveCommonServerCertificate 2016-08-02 13:11:18 <0> linux-t0qd(23365) [Perl] YCP.cc(YCP_call_SCR):361 Perl is calling builtin SCR::Read 2016-08-02 13:11:18 <0> linux-t0qd(23365) [scr] ScriptingAgent.cc(Read):194 This is ScriptingAgent(0x1391d90)::Read 2016-08-02 13:11:18 <0> linux-t0qd(23365) [scr] ScriptingAgent.cc(Read):195 opt: null 2016-08-02 13:11:18 <0> linux-t0qd(23365) [scr] ScriptingAgent.cc(executeSubagentCommand):589 ScriptingAgent::executeSubagentCommand: Read 2016-08-02 13:11:18 <0> linux-t0qd(23365) [scr] ScriptingAgent.cc(executeSubagentCommand):590 path: .target.size 2016-08-02 13:11:18 <0> linux-t0qd(23365) [scr] ScriptingAgent.cc(executeSubagentCommand):591 arg: "/etc/ssl/certs/YaST-CA.pem" 2016-08-02 13:11:18 <0> linux-t0qd(23365) [scr] ScriptingAgent.cc(executeSubagentCommand):592 opt: null 2016-08-02 13:11:18 <0> linux-t0qd(23365) [agent-system] ../../libscr/src/include/scr/Y2AgentComponent.h(evaluate):94 evaluate (`Read (.size, "/etc/ssl/certs/YaST-CA.pem")) 2016-08-02 13:11:18 <0> linux-t0qd(23365) [agent-system] ../../libscr/src/include/scr/Y2AgentComponent.h(evaluate):99 Going to evaluate `Read (.size, "/etc/ssl/certs/YaST-CA.pem") 2016-08-02 13:11:18 <0> linux-t0qd(23365) [agent-system] ../../libscr/src/include/scr/Y2AgentComponent.h(evaluate):120 After code evaluation: `Read (.size, "/etc/ssl/certs/YaST-CA.pem") 2016-08-02 13:11:18 <0> linux-t0qd(23365) [agent-system] SystemAgent.cc(Read):306 Read (.size) 2016-08-02 13:11:18 <0> linux-t0qd(23365) [Perl] YCP.cc(XS_YCP_call_ycp):228 YCP returned -1 2016-08-02 13:11:18 <0> linux-t0qd(23365) [Perl] YCP.cc(XS_YCP_call_ycp):257 returning a scalar 2016-08-02 13:11:18 <1> linux-t0qd(23365) [-e] YaST-CA.pem does not exists A workaround is to create the following symbolic link ln -s /etc/pki/trust/anchors/YaST-CA.pem /etc/ssl/certs -- You are receiving this mail because: You are on the CC list for the bug.