[Freeipa-users] Let's Encrypt SSL pkscs 12 problem notes anyone. CENTOS 7 FreeIPA install

[Branko Quenode]

Hi ,

I am trying to install freeipa with centos and Let's Encrypt SSL.

I create lets-encrypt with webroot option.

Then i did

cat privkey.pem fullchain.pem > /root/key.pem

openssl pkcs12 -export -in /root/key.pem  -out ipa.pkcs12 -name "
ipa.somedomain.com"


ipa-server-install --ip-address=<IP>  --http_pkcs12=/etc/letsencrypt/live/
ipa.somedomein.com/ipa.pkcs12 --dirsrv_pkcs12=/etc/letsencrypt/live/
ipa.somedomain.com/ipa.pkcs12 --root-ca-file=/etc/letsencrypt/live/
ipa.somedomain.com/fullchain.pem

I got error
ipa.ipapython.install.cli.install_tool(Server): ERROR    The full
certificate chain is not present in /etc/letsencrypt/live/
ipa.somedomain.com/ipa.pkcs12


What I am missing intermediate.crt maybe ?

Thank you.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://listman.redhat.com/archives/freeipa-users/attachments/20160421/cb1163fe/attachment.htm>