[Freeipa-users] Re: pki-tomcat doesn't start, it can't update certificate

[Serge Barkov]

The OS is "Fedora release 25 (Twenty Five)".
I compared the output from "ldapsearch -LLL...", it differs. But in order to make ipa0 work I temporarily broke connection between nodes (with iptables) so it's normal.
Yhe date is
[root@ipa0 ~]# date
Sun Oct 20 19:46:18 MSK 2019

All the other certificates are valid. I use Let's Encrypt certificates and I rolled them back to the ones valid in October.