Dmitry Krasov via FreeIPA-users wrote:
It's 4.3.1, and I can't update it.
And this Migration option seems not so easy, almost like recreate the server.
I don't understand what happened to this certs? If nobody toched them at all. I am pretty sure it's some inside problem of this version.
They expired. Why is a mystery at this point but there are some moving parts that can be messed up.
You're running a release from 2016 so your options are particularly limited. It's unclear what is going on with your CA because you haven't shared a lot of details, but if it is unrecoverable then migration is your only option.
rob