9.2. 使用 Healthcheck 输出系统证书
按照以下流程,使用 Healthcheck 工具运行身份管理(IdM)证书的独立的手动测试。
流程
输入:
# ipa-healthcheck --source=ipahealthcheck.dogtag.ca-
--source=ipahealthcheck.dogtag.ca选项可确保 Healthcheck 仅执行证书测试。
-
成功测试示例:
{
"source: ipahealthcheck.dogtag.ca",
"check: DogtagCertsConfigCheck",
"result: SUCCESS",
"uuid: 9b366200-9ec8-4bd9-bb5e-9a280c803a9c",
"when: 20191008135826Z",
"duration: 0.252280",
"kw:" {
"key": "Server-Cert cert-pki-ca",
"configfile": "/var/lib/pki/pki-tomcat/conf/ca/CS.cfg"
}
}
一个失败的测试示例:
{
"source: ipahealthcheck.dogtag.ca",
"check: DogtagCertsConfigCheck",
"result: CRITICAL",
"uuid: 59d66200-1447-4b3b-be01-89810c803a98",
"when: 20191008135912Z",
"duration: 0.002022",
"kw:" {
"exception": "NSDB /etc/pki/pki-tomcat/alias not initialized",
}
}
注意
当尝试找到问题时,在所有 IdM 服务器中运行证书测试。