Chapter 30. Verifying certificates by using IdM Healthcheck

Prerequisites

• You have root privileges.

Procedure

• To run the certificates test, enter:

  # ipa-healthcheck --source=ipahealthcheck.ipa.certs

  Copy to Clipboard Toggle word wrap

  • The --source=ipahealthcheck.ipa.certs option ensures that IdM Healthcheck only performs the certmonger certificate tests.

    A successful test displays empty brackets:

    []

    Copy to Clipboard Toggle word wrap

    Failed test shows you the following output:

    {
      "source": "ipahealthcheck.ipa.certs",
      "check": "IPACertfileExpirationCheck",
      "result": "ERROR",
      "kw": {
        "key": 1234,
        "dbdir": "/path/to/nssdb",
        "error": [error],
        "msg": "Unable to open NSS database '/path/to/nssdb': [error]"
      }
    }

    Copy to Clipboard Toggle word wrap

    This IPACertfileExpirationCheck test failed on opening the NSS database.

  Note

  Run this suite of Healthcheck tests on all IdM servers when trying to check for issues.