[Freeipa-users] Export SSL Cert

[Jan Cholasta]

On 20.9.2013 10:14, Andrew Lau wrote:
> Hi,
>
> On my ever quest to finally get freeipa working behind a reverse proxy,
> the final thing was is it possible to export the private key and cert of
> the freeipa http cert? I would like to put the SSL cert on the reverse
> proxy but it seems I'm not having any luck getting the private key out
> from the certdb.
>
> Thanks.
>

Hi,

you can use pk12util to export it to PKCS#12 file, which contains both 
the certificate and the private key:

# pk12util -o file.p12 -n Server-Cert -d /etc/httpd/alias -k 
/etc/httpd/alias/pwdfile.txt

Honza

-- 
Jan Cholasta