[Freeipa-users] sec_error_reused_issuer_and_serial

[Les Stott]

The only way to get around it, because you are using the same domain name, is to use different browsers to visit each site. Firefox for sitea, chrome for siteb.

It's got to do with the fact that the Parent certificate name (generated automatically during install) is the same on both and because the domain matches then firefox throws the ssl warning.

I have the same thing in my environments for production and dr where the domain name is the same in both.

Regards,

Les

From: freeipa-users-bounces at redhat.com [mailto:freeipa-users-bounces at redhat.com] On Behalf Of Winfried de Heiden
Sent: Tuesday, 22 September 2015 10:27 PM
To: freeipa-users at redhat.com
Subject: [Freeipa-users] sec_error_reused_issuer_and_serial

Hi all,

Playing around with freeipa on Fedora 22 after installing I cannot access the UI. Firefox will tell "sec_error_reused_issuer_and_serial".

I allready have an Freeipa (Fedora 21 based) and somewhere there seems to be a conflict in the certificates. After using a different domain name all goes well.

I want to test and try a few things on a test Freeipa server using the same domain name. Deleting all certicates in Firefox or even trying a new and clean profile did not help. How can I avoid this conflict?

Winfried

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://listman.redhat.com/archives/freeipa-users/attachments/20150922/fc67511e/attachment.htm>