[Freeipa-users] invalid cn=CACert,cn=ipa,cn=etc entry

[Bram Vandoren]

Hi Martin,

On 01/14/2015 02:14 PM, Martin Kosek wrote:
> Good investigation! You already found the root cause. You are most possibly
> hitting https://bugzilla.redhat.com/show_bug.cgi?id=948928 that is fixed in
> ipa-3.0.0-30.el6 or later.

this was indeed the problem. I converted the certificate back to binary 
and everything works fine now.

Thanks!
Bram