<p dir="ltr">There is other instructions but I could never get a fully successful setup until the that one. </p>
<div class="gmail_quote">On Sep 10, 2014 6:26 PM, "William Graboyes" <<a href="mailto:wgraboyes@cenic.org">wgraboyes@cenic.org</a>> wrote:<br type="attribution"><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">-----BEGIN PGP SIGNED MESSAGE-----<br>
Hash: SHA512<br>
<br>
Hi Chris,<br>
<br>
Thank you for the suggestion. Looking at<br>
<a href="http://www.redhat.com/archives/freeipa-users/2014-August/msg00334.html" target="_blank">http://www.redhat.com/archives/freeipa-users/2014-August/msg00334.html</a><br>
<br>
Installing a new, third party cert requires a reinstall of IPA? IPA<br>
Devs, that is a bit silly don't you think? A year or two in the cert<br>
expires, now you have to start from scratch? I will wait for some form<br>
of response before I attempt at eating crow in front of management.<br>
<br>
I forgot to mention, free-ipa version ipa-server-3.0.0-37.el6.x86_64.<br>
<br>
<br>
<br>
On Wed Sep 10 15:55:56 2014, Chris Whittle wrote:<br>
> Search the list for a post by me and certs... Basically there is a install<br>
> flag that will do all the work for you once you have it the cert in the<br>
> right format.<br>
> On Sep 10, 2014 5:53 PM, "William Graboyes" <<a href="mailto:wgraboyes@cenic.org">wgraboyes@cenic.org</a>> wrote:<br>
><br>
>><br>
><br>
> ********* *BEGIN ENCRYPTED or SIGNED PART* *********<br>
><br>
> Hello list,<br>
><br>
> I have been fruitlessly searching for some information, especially<br>
> related to Certs, namely how to replace the self signed certs with<br>
> certs from a trusted CA? As we are moving forward into<br>
> productionizing of our free-ipa install, I am finding information on<br>
> the net to be a bit lacking. There is also the possibility that I am<br>
> not looking in the right places, or using the correct search terms.<br>
> Any help on this front would be greatly appreciated.<br>
><br>
> Thanks,<br>
> Bill<br>
><br>
><br>
> ********** *END ENCRYPTED or SIGNED PART* **********<br>
><br>
>><br>
>> --<br>
>> Manage your subscription for the Freeipa-users mailing list:<br>
>> <a href="https://www.redhat.com/mailman/listinfo/freeipa-users" target="_blank">https://www.redhat.com/mailman/listinfo/freeipa-users</a><br>
>> Go To <a href="http://freeipa.org" target="_blank">http://freeipa.org</a> for more info on the project<br>
>><br>
><br>
><br>
><br>
-----BEGIN PGP SIGNATURE-----<br>
Version: GnuPG/MacGPG2 v2.0.22 (Darwin)<br>
Comment: GPGTools - <a href="https://gpgtools.org" target="_blank">https://gpgtools.org</a><br>
Comment: Using GnuPG with Thunderbird - <a href="http://www.enigmail.net/" target="_blank">http://www.enigmail.net/</a><br>
<br>
iQIcBAEBCgAGBQJUEN4JAAoJEJFMz73A1+zrjNAP/1aZOjhp6c6JwWXUjBE4Pt4i<br>
u6Z1BRFNYgIc5/aNsPAKrdzMqQgTjgWJvSh5UCON0VdmuIx7pQLP7nIlaCCXTRRK<br>
pKx2Cez5Ho7Lwlsb87WW3bzjcyKGX5Wd3+VJdQ6ugYJTpVS4gMxh8atZCV613EY6<br>
FuMk1RS6qlWM2Ut3SjmaAZK3jTw2pUsJzW3zzB271i6sJqAMZTh7Lrie6QcGqAON<br>
eLGlWBZuCaeULUuQmArVZiP3qPnH5NuccvXLFVbX7D1+SM8XeLWrTklN1bfX2HF0<br>
QCFlizb+bBga/d5cEaCv7R8v6m46R4wS779KSUV1jn9PpHISNcmLafv6dTAb6F+5<br>
RBADwBP6coh5LrOJJh0pIByx9dYRbdif/BSH4VMcvfvFMs/EO1PAsGLWQPwoNfYO<br>
0SzUV1R47JW9NGzeTxja+byKz9hwGtAT2FIw0NibR+M1FydPD9k3LTjTnQWgeSro<br>
ks3AUPDy/hj+E72QDORj+/Zvy3sw8wDFVRw2LH/jaDmWbWhZUG4riC3w2egPjcSK<br>
KIYQ7L/fdeN6S9jt8UcUf1YDHgfLU+iTgqyssr54RufVuM9iBNOkoWxxI0Q9oyMF<br>
NDKiOY8rs2rBu6x09NiHG0BoX1LQzrrKQFQ4ao48w2RH3ocFCgQbsEHZ18uIfo4Y<br>
CB5M63nykETHkkR3ZFkd<br>
=8T1Y<br>
-----END PGP SIGNATURE-----<br>
<br>
</blockquote></div>