[Freeipa-users] Replace with 3rd part certificates

[Günther J. Niederwimmer]

Hello,

Am Montag, 27. Juni 2016, 12:43:13 CEST schrieb Bjarne Blichfeldt:
> For the time being and as far as I can see until IPA 4.3.1, the procedure is
> messy and difficult. The following thread will be a big help:
> https://www.redhat.com/archives/freeipa-users/2016-January/msg00223.html
> 
> I think I succeeded at last, but further tests remain.
> 
> 
> Regards,
> Bjarne

thank's for the info

> 
> -----Original Message-----
> From: freeipa-users-bounces at redhat.com
> [mailto:freeipa-users-bounces at redhat.com] On Behalf Of Andreas Ladanyi
> Sent: 27. juni 2016 13:49
> To: freeipa-users at redhat.com
> Subject: [Freeipa-users] Replace with 3rd part certificates
> 
> Hi,
> 
> i try to replace the self signed certificate from the ipa installation with
> this description:
> 
> http://www.freeipa.org/page/Using_3rd_part_certificates_for_HTTP/LDAP
> 
> ipa-server-certinstall -w -d mysite.key mysite.crt
> 
> The tool ask for the private key unlock passwort. The private key was
> generated without passwort. I tried out to press only the enter key, but it
> doesnt help. So iam confused. The certificate and keyfile are in PEM
> format.
> 
> For testing I converted the private key with:
> 
> openssl rsa -in -out
> 
> because i want to know if openssl ask me for a password, but it doesnt.
> 
> My version number is FreeIPA 4.1.

My version 4.3.1 ;-)

-- 
mit freundlichen Grüßen / best regards,

  Günther J. Niederwimmer