[Freeipa-users] Re: TXT - SPF & DKIM

2023-07-26 Thread Jernej Jakob via FreeIPA-users
I don't see the behavior you describe, for example I have DKIN records in the format: "v=DKIM1; k=rsa; t=s; " "p=MIIB..." "..." where "..." is the public key split into multiple chunks of arbitraty length to make it more readable in the FreeIPA WebUI (it has a bug where it doesn't line break long

[Freeipa-users] Help with ACIError: Insufficient access: SASL(-1): generic failure: GSSAPI Error: Unspecified GSS failure in attempt to loadbalance

2023-07-26 Thread dweller dweller via FreeIPA-users
Hi. I am aware that there have been many discussions regarding fully load balancing FreeIPA replicas, but I am doing it for the sake of experimentation. For my tests, I mainly rely on this article - https://mrgecko.org/blog/2022/freeipa-load-balance, although I am using nginx instead of HAProxy

[Freeipa-users] Re: TXT - SPF & DKIM

2023-07-26 Thread Jernej Jakob via FreeIPA-users
On Wed, 26 Jul 2023 11:07:17 +0200 Jernej Jakob via FreeIPA-users wrote: > I don't see the behavior you describe, for example I have DKIN records > in the format: > > "v=DKIM1; k=rsa; t=s; " "p=MIIB..." "..." > > where "..." is the public key split into multiple chunks of > arbitraty length to

[Freeipa-users] Exporting certificates with keys associated in FreeIPA

2023-07-26 Thread Carlos Lopez via FreeIPA-users
Hi all, Sorry to disturb but I can not find which is the correct procedure to accomplish this. I have created a certificate in WebUI and I can export certificate in pem format, which it is what I need. But I need the private key also. This certificate is for a host outside of Kerberos and LDAP

[Freeipa-users] Re: Exporting certificates with keys associated in FreeIPA

2023-07-26 Thread Jernej Jakob via FreeIPA-users
On Wed, 26 Jul 2023 11:10:23 + Carlos Lopez via FreeIPA-users wrote: > Hi all, > > Sorry to disturb but I can not find which is the correct procedure to > accomplish this. I have created a certificate in WebUI and I can export > certificate in pem format, which it is what I need. But I ne

[Freeipa-users] cert management - ? - pkcs format

2023-07-26 Thread lejeczek via FreeIPA-users
Hi guys. Is it possible IPA output format (when rendered into files) is _pkcs_, for both keys & certs? Being not a security/cryptography expert thus unable to put it into better words - format/container which works with/in Java? Like when: -> $ openssl pkcs8 ... -topk8 -nocrypt -v1 PBE-SHA1-3

[Freeipa-users] Re: Exporting certificates with keys associated in FreeIPA

2023-07-26 Thread Rob Crittenden via FreeIPA-users
Jernej Jakob via FreeIPA-users wrote: > On Wed, 26 Jul 2023 11:10:23 + > Carlos Lopez via FreeIPA-users > wrote: > >> Hi all, >> >> Sorry to disturb but I can not find which is the correct procedure to >> accomplish this. I have created a certificate in WebUI and I can export >> certificat

[Freeipa-users] Re: cert management - ? - pkcs format

2023-07-26 Thread Rob Crittenden via FreeIPA-users
lejeczek via FreeIPA-users wrote: > Hi guys. > > Is it possible IPA output format (when rendered into files) is _pkcs_, > for both keys & certs? > Being not a security/cryptography expert thus unable to put it into > better words - format/container which works with/in Java? > Like when: > -> $ ope

[Freeipa-users] Re: Exporting certificates with keys associated in FreeIPA

2023-07-26 Thread Florence Blanc-Renaud via FreeIPA-users
Hi, if you used the WebUI to generate a cert, you had to type a few commands in a terminal, like: certutil -N -d certutil -R -d -a -g -s 'CN=employee,O= DEMO1.FREEIPA.ORG' This means that you generated a key in the NSS database. When you used the WebUI to issue the cert, the new cert was added

[Freeipa-users] Re: cert management - ? - pkcs format

2023-07-26 Thread lejeczek via FreeIPA-users
On 26/07/2023 14:32, Rob Crittenden wrote: lejeczek via FreeIPA-users wrote: Hi guys. Is it possible IPA output format (when rendered into files) is _pkcs_, for both keys & certs? Being not a security/cryptography expert thus unable to put it into better words - format/container which works w

[Freeipa-users] Re: TXT - SPF & DKIM

2023-07-26 Thread lejeczek via FreeIPA-users
On 26/07/2023 11:07, Jernej Jakob wrote: I don't see the behavior you describe, for example I have DKIN records in the format: "v=DKIM1; k=rsa; t=s; " "p=MIIB..." "..." where "..." is the public key split into multiple chunks of arbitraty length to make it more readable in the FreeIPA WebUI (

[Freeipa-users] Re: TXT - SPF & DKIM

2023-07-26 Thread Rob Crittenden via FreeIPA-users
lejeczek via FreeIPA-users wrote: > > > On 26/07/2023 11:07, Jernej Jakob wrote: >> I don't see the behavior you describe, for example I have DKIN records >> in the format: >> >> "v=DKIM1; k=rsa; t=s; " "p=MIIB..." "..." >> >> where "..." is the public key split into multiple chunks of >> arbitra

[Freeipa-users] Re: cert management - ? - pkcs format

2023-07-26 Thread Rob Crittenden via FreeIPA-users
lejeczek via FreeIPA-users wrote: > > > On 26/07/2023 14:32, Rob Crittenden wrote: >> lejeczek via FreeIPA-users wrote: >>> Hi guys. >>> >>> Is it possible IPA output format (when rendered into files) is _pkcs_, >>> for both keys & certs? >>> Being not a security/cryptography expert thus unable t

[Freeipa-users] Re: TXT - SPF & DKIM

2023-07-26 Thread Jernej Jakob via FreeIPA-users
On Wed, 26 Jul 2023 10:39:58 -0400 Rob Crittenden via FreeIPA-users wrote: > lejeczek via FreeIPA-users wrote: > > > > > > On 26/07/2023 11:07, Jernej Jakob wrote: > >> I don't see the behavior you describe, for example I have DKIN records > >> in the format: > >> > >> "v=DKIM1; k=rsa; t=s; "