[Freeipa-users] Renewing CA certificate

[Rob Crittenden]

Erinn Looney-Triggs wrote:
> Folks,
> I wanted to touch base with y'all about how/if work is progressing on
> the ability to replace the CA certificate. My certificate is a
> subordinate of an AD CS instance and will be expiring in December, after
> two years. Some how, some way, without rebuilding I would like to be
> able to replace this subordinate CA.
>
> There is a ticket open for this, last I checked not much was said in the
> ticket: https://fedorahosted.org/freeipa/ticket/3304
>

http://www.freeipa.org/page/V3/CA_certificate_renewal

There was a discussion of this proposal on freeipa-devel, 
https://www.redhat.com/archives/freeipa-devel/2013-October/msg00073.html

rob