[Freeipa-users] FreeIPA and LetsEncrypt Question

[Günther J. Niederwimmer]

Hello All,

Am Wednesday 02 December 2015, 21:10:31 schrieb Fraser Tweedale:
> On Mon, Nov 30, 2015 at 02:46:13PM +0200, Alexander Bokovoy wrote:
> > On Mon, 30 Nov 2015, Günther J. Niederwimmer wrote:
> > >Hello ,
> > >
> > >I have the question, know any from the FreeIPA "Gurus" ;-), are the new
> > >upcoming LetsEncrypt Certificates compatible and working with FreeIPA?
> > 
> > We have plans to support issuing certificates via Let's Encrypt.
> 
> Günther, what are your specific wishes - to automatically acquire LE
> certs for FreeIPA server's HTTP and LDAP?  Arbitrary hosts or
> services that are managed by FreeIPA?

My wishes :-)).

when I can have wishes, I mean all ;-) 

But I nice Integration for IMAP, SMTP, LDAP, HTTPS ... was a dream.

Now I make a test with FreeIPA and "DANE" I hope this is working ?.

 
> > However, right now Let's encrypt only issues server certificates, not
> > CA roots, so you cannot use them to bootstrap IPA CA.
> 
> This will probably always be the case.
> 
> Cheers,
> Fraser

-- 
mit freundlichen Grüßen / best regards,

  Günther J. Niederwimmer