[Freeipa-devel] [PATCH] 18 Use TLS for ipadiscovery during ipa client install

[Jan Zelený]

JR Aquino <JR.Aquino at citrix.com> wrote:
> This patch addresses the need to utilize TLS when using the
> ipa-client-install tool. It addresses ticket:
> https://fedorahosted.org/freeipa/ticket/974

Nack, running ipa-client-install returned this error:

# ipa-client-install
Retrieving CA from None failed.
Command '/usr/bin/wget -O /etc/ipa/ca.crt http://None/ipa/config/ca.crt' 
returned non-zero exit status 4


One more question - shouldn't you use ldaps directly to connect to the server?
Jan