I've been running FreeIPA 4.3.1 on Ubuntu 16.04 for almost two years and most certificates should expire within three weeks. As this deadline approaches, I noticed certmonger has been unable to renew certificates due to the error below.

After googling for two days, I found this issue has been observed by many people before, mostly after expiration of the certificates, as in https://tinyurl.com/vajmocw

Still, I couldn't find a solution to this problem.

If it is impossible to fix this issue while using FreeIPA 4.3.1, I would like to:

1) Find a way to renew all certificates even if certmonger can't be fixed. This would allow me to postpone the solution to after the next OS and/or FreeIPA upgrade

2) Find out what version of FreeIPA I should upgrade to while the operating system remains Ubuntu 16.04

Any help would be appreciated!

Thanks!

Robson

======> Command: systemctl status certmonger

--