Re: [Freeipa-users] Certs.

2014-09-17 Thread Rob Crittenden
Walid wrote: Hi Rob, Self signed IPA certificate i saw it is 20 years, however how about the client nodes renewal, i see here it is automated, how, and when For renewed CA certificate distribution, we are working on it in ticket https://fedorahosted.org/freeipa/ticket/4322 For any server ce

Re: [Freeipa-users] Certs.

2014-09-16 Thread Rob Crittenden
Walid wrote: Hi Dmitri, I am interested in the renewal process, how would that happen for clients, and when would it happen? It depends on what scenario you're talking about (self-signed IPA cert, IPA as subordinate, user-provided certificates), and what certs you mean. rob On 11 Septemb

Re: [Freeipa-users] Certs.

2014-09-16 Thread Walid
Hi Dmitri, I am interested in the renewal process, how would that happen for clients, and when would it happen? On 11 September 2014 03:01, Dmitri Pal wrote: > On 09/10/2014 07:57 PM, William Graboyes wrote: > >> -BEGIN PGP SIGNED MESSAGE- >> Hash: SHA512 >> >> Hi Dmitri, >> >> Producti

Re: [Freeipa-users] Certs.

2014-09-10 Thread Rob Crittenden
Dmitri Pal wrote: > On 09/10/2014 07:57 PM, William Graboyes wrote: > Hi Dmitri, > > Production Environment is going to be RH 6.5, We are still evaluating > the usage of systemd. More like we are taking a wait and see approach > to to systemd, while actively testing it. >> The command line option

Re: [Freeipa-users] Certs.

2014-09-10 Thread Dmitri Pal
On 09/10/2014 07:26 PM, William Graboyes wrote: -BEGIN PGP SIGNED MESSAGE- Hash: SHA512 Hi Chris, Thank you for the suggestion. Looking at http://www.redhat.com/archives/freeipa-users/2014-August/msg00334.html Installing a new, third party cert requires a reinstall of IPA? IPA Devs, t

Re: [Freeipa-users] Certs.

2014-09-10 Thread Dmitri Pal
On 09/10/2014 07:57 PM, William Graboyes wrote: -BEGIN PGP SIGNED MESSAGE- Hash: SHA512 Hi Dmitri, Production Environment is going to be RH 6.5, We are still evaluating the usage of systemd. More like we are taking a wait and see approach to to systemd, while actively testing it. The

Re: [Freeipa-users] Certs.

2014-09-10 Thread William Graboyes
-BEGIN PGP SIGNED MESSAGE- Hash: SHA512 Hi Dmitri, Production Environment is going to be RH 6.5, We are still evaluating the usage of systemd. More like we are taking a wait and see approach to to systemd, while actively testing it. Thanks, Bill On Wed Sep 10 16:49:24 2014, Dmitri Pal

Re: [Freeipa-users] Certs.

2014-09-10 Thread Dmitri Pal
On 09/10/2014 06:50 PM, William Graboyes wrote: -BEGIN PGP SIGNED MESSAGE- Hash: SHA512 Hello list, I have been fruitlessly searching for some information, especially related to Certs, namely how to replace the self signed certs with certs from a trusted CA? This is an install time deci

Re: [Freeipa-users] Certs.

2014-09-10 Thread Chris Whittle
There is other instructions but I could never get a fully successful setup until the that one. On Sep 10, 2014 6:26 PM, "William Graboyes" wrote: > -BEGIN PGP SIGNED MESSAGE- > Hash: SHA512 > > Hi Chris, > > Thank you for the suggestion. Looking at > http://www.redhat.com/archives/freeipa

Re: [Freeipa-users] Certs.

2014-09-10 Thread William Graboyes
-BEGIN PGP SIGNED MESSAGE- Hash: SHA512 Hi Chris, Thank you for the suggestion. Looking at http://www.redhat.com/archives/freeipa-users/2014-August/msg00334.html Installing a new, third party cert requires a reinstall of IPA? IPA Devs, that is a bit silly don't you think? A year or two

Re: [Freeipa-users] Certs.

2014-09-10 Thread Chris Whittle
Search the list for a post by me and certs... Basically there is a install flag that will do all the work for you once you have it the cert in the right format. On Sep 10, 2014 5:53 PM, "William Graboyes" wrote: > -BEGIN PGP SIGNED MESSAGE- > Hash: SHA512 > > Hello list, > > I have been

[Freeipa-users] Certs.

2014-09-10 Thread William Graboyes
-BEGIN PGP SIGNED MESSAGE- Hash: SHA512 Hello list, I have been fruitlessly searching for some information, especially related to Certs, namely how to replace the self signed certs with certs from a trusted CA? As we are moving forward into productionizing of our free-ipa install, I am f