[Freeipa-users] Client Certificate

[Alexander Bokovoy]

On Thu, 18 Sep 2014, Natxo Asenjo wrote:
>hi,
>
>On Thu, Sep 18, 2014 at 4:43 PM, Rob Crittenden <rcritten at redhat.com> wrote:
>
>>
>> Yes, you don't need to obtain a machine certificate. In fact we have
>> stopped doing this upstream.
>>
>>
>Do you mean ipa will not have a CA in the future? Or will it be optional?
>Or am I misunderstanding this :-) ? I quite like the CA stuff in ipa,
>actually.
host certificate is not used for anything right now, so it is removed in
4.x. All the rest is in place and CA can be external one.

-- 
/ Alexander Bokovoy