I am attempting to generate a host certificate, but the FreeIPA web interface will not accept the PEM-encoded CSR. I am receiving the following error:
IPA Error 4015: Base64DecodeError
Base64 decoding failed: Incorrect padding
The CSR is in PEM format, rather than Base64:
-----BEGIN CERTIFICATE REQUEST----- MIHXMH8CAQEwHTEbMBkGA1UEAwwSZXQtMjgwMC5wZW51cmlvLnVzMFkwEwYHKoZI zj0CAQYIKoZIzj0DAQcDQgAEH/Eg1/91MD611DkgngyafpnckA6Ki8yxrGl0tQ1s yi09mqW09bQMDvy8v/tRdKjpDeLwoZs6CE8z/O0CwY0x76AAMAoGCCqGSM49BAMC A0gAMEUCIQCr+k6iSKQslOT21u2RsOXtFdFMkO7qFghHYOSxbD0eNAIgZetAu95e 8AJSxJGMqQYRgC4r6hOWKMv1XVKf8Rf23Cw= -----END CERTIFICATE REQUEST-----
Any ideas?
On 10/27/23 10:05, Ian Pilcher wrote:
I am attempting to generate a host certificate, but the FreeIPA web interface will not accept the PEM-encoded CSR. I am receiving the following error:
IPA Error 4015: Base64DecodeError
Base64 decoding failed: Incorrect padding
The CSR is in PEM format, rather than Base64:
-----BEGIN CERTIFICATE REQUEST----- MIHXMH8CAQEwHTEbMBkGA1UEAwwSZXQtMjgwMC5wZW51cmlvLnVzMFkwEwYHKoZI zj0CAQYIKoZIzj0DAQcDQgAEH/Eg1/91MD611DkgngyafpnckA6Ki8yxrGl0tQ1s yi09mqW09bQMDvy8v/tRdKjpDeLwoZs6CE8z/O0CwY0x76AAMAoGCCqGSM49BAMC A0gAMEUCIQCr+k6iSKQslOT21u2RsOXtFdFMkO7qFghHYOSxbD0eNAIgZetAu95e 8AJSxJGMqQYRgC4r6hOWKMv1XVKf8Rf23Cw= -----END CERTIFICATE REQUEST-----
Any ideas?
Never mind. I'm an idiot. It's expecting a certificate, not a CSR, so of course it doesn't work.
Sorry for the noise!
freeipa-users@lists.fedorahosted.org