[Freeipa-users] Re: Certificate issuer has been marked as not trusted by the user

2018-10-05 Thread Rob Crittenden via FreeIPA-users
Israel Brewster via FreeIPA-users wrote: > I recently had the certificates I use on my FreeIPA server expire, > preventing ipa from starting. So I replaced them with the new ones, and > IPA still wouldn't start, whereupon after some digging I discovered the > new certificates came with new

[Freeipa-users] Certificate issuer has been marked as not trusted by the user

2018-10-05 Thread Israel Brewster via FreeIPA-users
I recently had the certificates I use on my FreeIPA server expire, preventing ipa from starting. So I replaced them with the new ones, and IPA still wouldn't start, whereupon after some digging I discovered the new certificates came with new Intermediate and root certificates. So I installed

[Freeipa-users] Announcing freeIPA 4.7.1

2018-10-05 Thread Rob Crittenden via FreeIPA-users
The FreeIPA team would like to announce FreeIPA 4.7.1 release! It can be downloaded from http://www.freeipa.org/page/Downloads. Builds for Fedora 29 and Fedora 28 will be available in the official [https://copr.fedorainfracloud.org/coprs/g/freeipa/freeipa-4-7/ COPR repository]. == Highlights in

[Freeipa-users] Re: need help to install letsencrypt in freeipa on ubuntu 16.04

2018-10-05 Thread Rob Crittenden via FreeIPA-users
Anush Jayan wrote: > > Regards, > *Anush Jayan * > *Devops Engineer* > * > * > *TRACKPOINT GPS PVT. LTD.* > > certutil -A -d /etc/httpd/alias -n Server-Cert -t u,u,u -a -i > /path/to/cert this  command is for centos if im not wrong im using > ubuntu 16.04  so what should i  put instead of 

[Freeipa-users] SSL Private Key Recovery

2018-10-05 Thread Winfried de Heiden via FreeIPA-users
Hi all, Creating the SSL certs/keys for for example Apache can easily be done by using the FreeIPA Dogtag CA-server. With some effort, I put it in an Ansible playbook which will install Apache and certficates "on demand". Sometimes a server needs to be re-installed ("cattle-servers"); why bother