Look data via FreeIPA-users wrote:
Hi Rob,
It's Ubuntu 16.04 and a server running on it. IPA VERSION: 4.3.1, API_VERSION: 2.164.
I installed libnsspem from Ubuntu 18.04. Following that, the error message changed from Error 77 to Error 60 as mentioned here.
I'm not sure what else I need to change.
I don't know. The server on Ubuntu is built and linked differently than Fedora or RHEL releases and is using very old code by Internet standards.
The submission by /usr/libexec/certmonger/dogtag-ipa-renew-agent-submit should include the path to /etc/ipa/ca.crt which is passed into libcurl by certmonger. It's possible that this either isn't being passed into or isn't being used by nss-pem. It well could be an issue in curl.
Note that curl upstream has dropped this integration.
rob