[Freeipa-users] FreeIPA install

[Martin Basti]

On 10/02/2015 03:41 PM, Andrew Meyer wrote:
> works in chrome and not firefox, creating new FF profile.
>
Hi,
try to remove IPA certificates from firefox in ff settings
Martin

>
>
> On Friday, October 2, 2015 3:09 AM, Martin Kosek <mkosek at redhat.com> 
> wrote:
>
>
>
>     On 10/02/2015 04:15 AM, Andrew Meyer wrote:
>
>     > I just created a new FreeIPA setup at my home and i'm getting
>     the following:
>     >
>     > [Thu Oct 01 14:02:10.082255 2015] [core:notice] [pid 18792]
>     AH00094: Command
>     > line: '/usr/sbin/httpd -D FOREGROUND'
>     > [Thu Oct 01 14:02:14.742680 2015] [:error] [pid 18795] ipa:
>     INFO: *** PROCESS
>     > START ***
>     > [Thu Oct 01 14:02:14.745250 2015] [:error] [pid 18794] ipa:
>     INFO: *** PROCESS
>     > START ***
>     > [Thu Oct 01 14:02:42.984969 2015] [:error] [pid 18798] SSL
>     Library Error:
>     > -12271 SSL client cannot verify your certificate
>     > [Thu Oct 01 15:21:56.837422 2015] [:error] [pid 18801] SSL
>     Library Error:
>     > -12271 SSL client cannot verify your certificate
>     >
>     > I tried running the ipa-manage-cacert to generate a new one and
>     install it.
>     > But no go.
>     >
>     > Running CentOS 7.1 with latest updates.  Is there a bug in
>     generating the SSL cert?
>
>     >
>     >
>     >
>
>     This rather seems that your client browser does not trust FreeIPA
>     CA certificate.
>
>     Related thread:
>     https://www.redhat.com/archives/freeipa-devel/2009-June/msg00188.html
>
>     More related info:
>     https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/7/html/Linux_Domain_Identity_Authentication_and_Policy_Guide/using-the-ui.html#config-browser
>
>     Martin
>
>
>
>
>

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://listman.redhat.com/archives/freeipa-users/attachments/20151002/4aa681dd/attachment.htm>