[Freeipa-users] Heads-up: Removing self-sign CA

[Christian Horn]

On Thu, Mar 28, 2013 at 09:32:36AM +0100, Petr Viktorin wrote:
> 
> To clarify: this is about removing the --selfsign option to
> ipa-server-install, which installs a limited CA (for example, it
> doesn't support CA replication or cert-find).
> 
> The default Dogtag CA also uses a self-signed certificate, but it's
> not affected by this change.
> 
> The naming confusion is a small part of the reason why it's better
> to remove --selfsign.

Thanks, I see.

Christian