> On Fri, Aug 09, 2019 at 11:06:58PM -0000, Boyd Ako via FreeIPA-users wrote: > It will need Subject Alternative Name (SAN) extension with the > correct DNS name for the server, and Extended Key Usage with > id-kp-serverAuth (1.3.6.1.5.5.7.3.1).
Thanks... I guess my plan for that doesn't work. My CA doesn't provide that EKU. Or at least in the normal profile. _______________________________________________ FreeIPA-users mailing list -- freeipa-users@lists.fedorahosted.org To unsubscribe send an email to freeipa-users-le...@lists.fedorahosted.org Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedorahosted.org/archives/list/freeipa-users@lists.fedorahosted.org
