Update breaks CA clone deployment on FreeIPA replica, see: https://paste.fedoraproject.org/paste/Qofu9fa06OBjA4P5opaAZV5M1UNdIGYhyRLivL9gydE=/

Package versions:

$ rpm -q pki-ca
pki-ca-10.4.0-1.fc25.noarch
[root@replica1 ~]# rpm -q tomcatjss
tomcatjss-7.2.1-1.fc25.noarch
[root@replica1 ~]# rpm -q jss
jss-4.4.0-2.fc25.x86_64

I have also seens some vault plugin tests crashing but I have not enough info to blame this update.

This update has been unpushed.

Cloning issue is to be fixed in this ticket: https://pagure.io/dogtagpki/issue/2612

A COPR build has been created which addresses https://pagure.io/dogtagpki/issue/2612 as well as some additional check-ins which may assist with vault plugin:

https://copr.fedorainfracloud.org/coprs/mharmsen/Dogtag-10.4.0/

Please comment if this temporary COPR build fixes these issues.

Although this issue was unpushed since the current thinking is that Dogtag 10.4.0 will not be released in either F25 or F26, we did provide revised COPR builds for both platforms for developer's convenience:

https://copr.fedorainfracloud.org/coprs/g/pki/10.4/

No feedback was ever received if the resolution of https://pagure.io/dogtagpki/issue/2612 resolved this issue for FreeIPA.