[Freeipa-devel] [PATCH 111] ipa-client-install: Publish CA certificate to systemwide store

[Jan Cholasta]

Hi,

On 24.9.2013 12:03, Tomas Babej wrote:
> Hi,
>
> During the installation, copy the CA certificate to the systemwide
> store (/etc/pki/ca-trust/source/anchors/ipa-ca.crt) and update the
> systemwide CA database.
>
> This allows browsers to access IPA WebUI without warning out of the
> box.
>
> https://fedorahosted.org/freeipa/ticket/3504
>

I think you should update /etc/pki/nssdb manually only if update-ca-cert 
fails.

Honza

-- 
Jan Cholasta