A new thread it indicated they are running 4.6.8. They need to either remove mod_ssl or change the mod_ssl port, ideally the first because while mod_nss and mod_ssl can co-exist in most cases this is likely to not work with IPA because only one SSL module can own the proxy SSL support.
freeipa-letsencrypt does not support RHEL 7-based systems.
rob
Florence Blanc-Renaud via FreeIPA-users wrote:
Hi,
it looks like your machine has configured both nss.conf and ssl.conf and they are conflicting. IPA started using mod_ssl instead of mod_nss in IPA 4.7.0+ (see the Release notes: https://www.freeipa.org/page/Releases/4.7.0#mod_ssl).
Which version of IPA are you using? Depending on it you will have to uninstall either mod_ssl or mod_nss. HTH, flo
On Thu, Mar 24, 2022 at 7:10 AM GAURAV Pande via FreeIPA-users <freeipa-users@lists.fedorahosted.org mailto:freeipa-users@lists.fedorahosted.org> wrote:
Also here is the output of command asked : [gp185132@idm ~]$ sudo httpd -t -D DUMP_VHOSTS VirtualHost configuration: *:443 is a NameVirtualHost default server idm.ncrcanary.apibox.ml <http://idm.ncrcanary.apibox.ml> (/etc/httpd/conf.d/nss.conf:81) port 443 namevhost idm.ncrcanary.apibox.ml <http://idm.ncrcanary.apibox.ml> (/etc/httpd/conf.d/nss.conf:81) port 443 namevhost idm.ncrcanary.apibox.ml <http://idm.ncrcanary.apibox.ml> (/etc/httpd/conf.d/ssl.conf:56) _______________________________________________ FreeIPA-users mailing list -- freeipa-users@lists.fedorahosted.org <mailto:freeipa-users@lists.fedorahosted.org> To unsubscribe send an email to freeipa-users-leave@lists.fedorahosted.org <mailto:freeipa-users-leave@lists.fedorahosted.org> Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedorahosted.org/archives/list/freeipa-users@lists.fedorahosted.org Do not reply to spam on the list, report it: https://pagure.io/fedora-infrastructure
FreeIPA-users mailing list -- freeipa-users@lists.fedorahosted.org To unsubscribe send an email to freeipa-users-leave@lists.fedorahosted.org Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedorahosted.org/archives/list/freeipa-users@lists.fedorahoste... Do not reply to spam on the list, report it: https://pagure.io/fedora-infrastructure