Re: [Freeipa-users] Adding SAN to default self-signed cert?

2015-08-04 Thread Fraser Tweedale
On Tue, Aug 04, 2015 at 08:01:13AM -0700, Janelle wrote: > Trying to figure this out: > > ipa host-add haproxy.example.com > ipa service-add HTTP/haproxy.example@example.com > ipa service-add LDAP/haproxy.example@example.com > > ipa-getcert request -d /tmp -n haproxy-cert -K LDAP/haproxy.

Re: [Freeipa-users] Adding SAN to default self-signed cert?

2015-08-04 Thread Janelle
Trying to figure this out: ipa host-add haproxy.example.com ipa service-add HTTP/haproxy.example@example.com ipa service-add LDAP/haproxy.example@example.com ipa-getcert request -d /tmp -n haproxy-cert -K LDAP/haproxy.example.com -N 'CN=haproxy.example.com,O=EXAMPLE.COM" ^ this is

Re: [Freeipa-users] Adding SAN to default self-signed cert?

2015-08-02 Thread Fraser Tweedale
On Sun, Aug 02, 2015 at 02:59:52PM -0700, Janelle wrote: > Hello everyone, > > I was wondering if anyone knows of a way to add SAN(s) to the self-signed > certificate that are installed when you installed freeipa? Or am I stuck > having to do a re-install and use new certificates? If you try to

[Freeipa-users] Adding SAN to default self-signed cert?

2015-08-02 Thread Janelle
Hello everyone, I was wondering if anyone knows of a way to add SAN(s) to the self-signed certificate that are installed when you installed freeipa? Or am I stuck having to do a re-install and use new certificates? If you try to run haproxy as a load balancer in front of the "ldap/http" ser