[Freeipa-users] subjectAlternitiveName for webservice

[Martin Kosek]

On 03/06/2015 01:30 PM, Matt . wrote:
> Hi,
>
> I'm figuring out how to regenerate the webserver certificates so I can
> use a loadbalancer in front of my ipa servers.
>
> I see in the docs there is information about this, but not for the
> webservice. Does anyone have some directions ?
>
> Thanks.
>
> Matt
>

Certificate SubjectAltName was fixed in FreeIPA 4.0, this is the upstream ticket:
https://fedorahosted.org/freeipa/ticket/3977

The procedure is described in upstream wiki for example:
http://www.freeipa.org/page/PKI#Automated_certificate_requests_with_Certmonger

HTH,
Martin