<html><body><div style="color:#000; background-color:#fff; font-family:HelveticaNeue-Light, Helvetica Neue Light, Helvetica Neue, Helvetica, Arial, Lucida Grande, sans-serif;font-size:16px"><div dir="ltr"><span>works in chrome and not firefox, creating new FF profile.</span></div> <br><div class="qtdSeparateBR"><br><br></div><div class="yahoo_quoted" style="display: block;"> <div style="font-family: HelveticaNeue-Light, Helvetica Neue Light, Helvetica Neue, Helvetica, Arial, Lucida Grande, sans-serif; font-size: 16px;"> <div style="font-family: HelveticaNeue, Helvetica Neue, Helvetica, Arial, Lucida Grande, sans-serif; font-size: 16px;"> <div dir="ltr"> <font size="2" face="Arial"> On Friday, October 2, 2015 3:09 AM, Martin Kosek <mkosek@redhat.com> wrote:<br> </font> </div> <blockquote style="border-left: 2px solid rgb(16, 16, 255); margin-left: 5px; margin-top: 5px; padding-left: 5px;"> <br><br> <div class="y_msg_container">On 10/02/2015 04:15 AM, Andrew Meyer wrote:<div class="yqt9601582537" id="yqtfd30214"><br clear="none">> I just created a new FreeIPA setup at my home and i'm getting the following:<br clear="none">><br clear="none">> [Thu Oct 01 14:02:10.082255 2015] [core:notice] [pid 18792] AH00094: Command<br clear="none">> line: '/usr/sbin/httpd -D FOREGROUND'<br clear="none">> [Thu Oct 01 14:02:14.742680 2015] [:error] [pid 18795] ipa: INFO: *** PROCESS<br clear="none">> START ***<br clear="none">> [Thu Oct 01 14:02:14.745250 2015] [:error] [pid 18794] ipa: INFO: *** PROCESS<br clear="none">> START ***<br clear="none">> [Thu Oct 01 14:02:42.984969 2015] [:error] [pid 18798] SSL Library Error:<br clear="none">> -12271 SSL client cannot verify your certificate<br clear="none">> [Thu Oct 01 15:21:56.837422 2015] [:error] [pid 18801] SSL Library Error:<br clear="none">> -12271 SSL client cannot verify your certificate<br clear="none">><br clear="none">> I tried running the ipa-manage-cacert to generate a new one and install it.<br clear="none">> But no go.<br clear="none">><br clear="none">> Running CentOS 7.1 with latest updates. Is there a bug in generating the SSL cert?</div><br clear="none">><br clear="none">><br clear="none">><br clear="none"><br clear="none">This rather seems that your client browser does not trust FreeIPA CA certificate.<br clear="none"><br clear="none">Related thread:<br clear="none"><a shape="rect" href="https://www.redhat.com/archives/freeipa-devel/2009-June/msg00188.html" target="_blank">https://www.redhat.com/archives/freeipa-devel/2009-June/msg00188.html</a><br clear="none"><br clear="none">More related info:<br clear="none"><a shape="rect" href="https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/7/html/Linux_Domain_Identity_Authentication_and_Policy_Guide/using-the-ui.html#config-browser" target="_blank">https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/7/html/Linux_Domain_Identity_Authentication_and_Policy_Guide/using-the-ui.html#config-browser</a><br clear="none"><br clear="none">Martin<div class="yqt9601582537" id="yqtfd45176"><br clear="none"></div><br><br></div> </blockquote> </div> </div> </div></div></body></html>