[Freeipa-users] trust non-IPA certificate client

[Stephen Ingram]

On Mon, Dec 15, 2014 at 6:40 PM, Stephen Ingram <sbingram at gmail.com> wrote:

> I have one client using a certificate issued by a third party provider
> such that any secure (TLS) LDAP queries are refused since the certificates
> were not issued by IPA. Since there are only a few clients with foreign
> certificates, can the CA simply be added to the NSS database used by the
> 389 directory server so IPA will establish a secure connection with them?
>

I should have added, "or do I have to somehow add the certificate to the
IPA directory?"
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://listman.redhat.com/archives/freeipa-users/attachments/20141216/a620b0e2/attachment.htm>