Russell Jones via FreeIPA-users wrote: > Hi all, > > I am not sure what to do with these below errors. Are they related to my > failed replica that I rebuilt and resynced, and as a result can be > ignored? All the current certificates seem to be healthy. According to ipa-healthcheck they will be healthy for the next 27 days. These messages are a heads-up that renewal is imminent and if you don't see it happen then you may need to take some manual action to figure out why, so you don't end up in a world of hurt. You could pick one and run getcert resubmit -i <id> to see if it gets a new certificate. journalctl -u certmonger will tell you what certmonger is doing. rob > > Thanks for the insight! > > > WARNING: > ipahealthcheck.ipa.certs.IPACertmongerExpirationCheck.20191010160502: > Request id 20191010160502 expires in 27 days > WARNING: > ipahealthcheck.ipa.certs.IPACertmongerExpirationCheck.20191010160533: > Request id 20191010160533 expires in 27 days > WARNING: > ipahealthcheck.ipa.certs.IPACertmongerExpirationCheck.20191010160542: > Request id 20191010160542 expires in 27 days > WARNING: > ipahealthcheck.ipa.certs.IPACertfileExpirationCheck.20191010160502: > Request id 20191010160502 expires in 27 days > WARNING: > ipahealthcheck.ipa.certs.IPACertfileExpirationCheck.20191010160533: > Request id 20191010160533 expires in 27 days > WARNING: > ipahealthcheck.ipa.certs.IPACertfileExpirationCheck.20191010160542: > Request id 20191010160542 expires in 27 days > > > [root@freeipa ~]# getcert list | grep -i status > status: MONITORING > status: MONITORING > status: MONITORING > status: MONITORING > status: MONITORING > status: MONITORING > status: MONITORING > status: MONITORING > status: MONITORING > > _______________________________________________ > FreeIPA-users mailing list -- freeipa-users(a)lists.fedorahosted.org > To unsubscribe send an email to freeipa-users-leave(a)lists.fedorahosted.org > Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ > List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines > List Archives: https://lists.fedorahosted.org/archives/list/freeipa-users@lists.fedoraho... > Do not reply to spam on the list, report it: https://pagure.io/fedora-infrastructure >