[Freeipa-users] FreeIPA and LetsEncrypt Question

[Fraser Tweedale]

On Mon, Nov 30, 2015 at 02:46:13PM +0200, Alexander Bokovoy wrote:
> On Mon, 30 Nov 2015, Günther J. Niederwimmer wrote:
> >Hello ,
> >
> >I have the question, know any from the FreeIPA "Gurus" ;-), are the new
> >upcoming LetsEncrypt Certificates compatible and working with FreeIPA?
> We have plans to support issuing certificates via Let's Encrypt.
> 
Günther, what are your specific wishes - to automatically acquire LE
certs for FreeIPA server's HTTP and LDAP?  Arbitrary hosts or
services that are managed by FreeIPA?

> However, right now Let's encrypt only issues server certificates, not
> CA roots, so you cannot use them to bootstrap IPA CA.
>
This will probably always be the case.

Cheers,
Fraser

> -- 
> / Alexander Bokovoy
> 
> -- 
> Manage your subscription for the Freeipa-users mailing list:
> https://www.redhat.com/mailman/listinfo/freeipa-users
> Go to http://freeipa.org for more info on the project