<html>
<head>
<meta content="text/html; charset=windows-1252"
http-equiv="Content-Type">
</head>
<body text="#000000" bgcolor="#FFFFFF">
<br>
<br>
<div class="moz-cite-prefix">On 10/02/2015 03:41 PM, Andrew Meyer
wrote:<br>
</div>
<blockquote
cite="mid:184547654.266809.1443793312510.JavaMail.yahoo@mail.yahoo.com"
type="cite">
<div style="color:#000; background-color:#fff;
font-family:HelveticaNeue-Light, Helvetica Neue Light, Helvetica
Neue, Helvetica, Arial, Lucida Grande,
sans-serif;font-size:16px">
<div dir="ltr"><span>works in chrome and not firefox, creating
new FF profile.</span></div>
<br>
</div>
</blockquote>
Hi,<br>
try to remove IPA certificates from firefox in ff settings<br>
Martin<br>
<br>
<blockquote
cite="mid:184547654.266809.1443793312510.JavaMail.yahoo@mail.yahoo.com"
type="cite">
<div style="color:#000; background-color:#fff;
font-family:HelveticaNeue-Light, Helvetica Neue Light, Helvetica
Neue, Helvetica, Arial, Lucida Grande,
sans-serif;font-size:16px">
<div class="qtdSeparateBR"><br>
<br>
</div>
<div class="yahoo_quoted" style="display: block;">
<div style="font-family: HelveticaNeue-Light, Helvetica Neue
Light, Helvetica Neue, Helvetica, Arial, Lucida Grande,
sans-serif; font-size: 16px;">
<div style="font-family: HelveticaNeue, Helvetica Neue,
Helvetica, Arial, Lucida Grande, sans-serif; font-size:
16px;">
<div dir="ltr"> <font face="Arial" size="2"> On Friday,
October 2, 2015 3:09 AM, Martin Kosek
<a class="moz-txt-link-rfc2396E" href="mailto:mkosek@redhat.com"><mkosek@redhat.com></a> wrote:<br>
</font> </div>
<blockquote style="border-left: 2px solid rgb(16, 16,
255); margin-left: 5px; margin-top: 5px; padding-left:
5px;"> <br>
<br>
<div class="y_msg_container">On 10/02/2015 04:15 AM,
Andrew Meyer wrote:
<div class="yqt9601582537" id="yqtfd30214"><br
clear="none">
> I just created a new FreeIPA setup at my home
and i'm getting the following:<br clear="none">
><br clear="none">
> [Thu Oct 01 14:02:10.082255 2015] [core:notice]
[pid 18792] AH00094: Command<br clear="none">
> line: '/usr/sbin/httpd -D FOREGROUND'<br
clear="none">
> [Thu Oct 01 14:02:14.742680 2015] [:error] [pid
18795] ipa: INFO: *** PROCESS<br clear="none">
> START ***<br clear="none">
> [Thu Oct 01 14:02:14.745250 2015] [:error] [pid
18794] ipa: INFO: *** PROCESS<br clear="none">
> START ***<br clear="none">
> [Thu Oct 01 14:02:42.984969 2015] [:error] [pid
18798] SSL Library Error:<br clear="none">
> -12271 SSL client cannot verify your
certificate<br clear="none">
> [Thu Oct 01 15:21:56.837422 2015] [:error] [pid
18801] SSL Library Error:<br clear="none">
> -12271 SSL client cannot verify your
certificate<br clear="none">
><br clear="none">
> I tried running the ipa-manage-cacert to
generate a new one and install it.<br clear="none">
> But no go.<br clear="none">
><br clear="none">
> Running CentOS 7.1 with latest updates. Is
there a bug in generating the SSL cert?</div>
<br clear="none">
><br clear="none">
><br clear="none">
><br clear="none">
<br clear="none">
This rather seems that your client browser does not
trust FreeIPA CA certificate.<br clear="none">
<br clear="none">
Related thread:<br clear="none">
<a moz-do-not-send="true" shape="rect"
href="https://www.redhat.com/archives/freeipa-devel/2009-June/msg00188.html"
target="_blank">https://www.redhat.com/archives/freeipa-devel/2009-June/msg00188.html</a><br
clear="none">
<br clear="none">
More related info:<br clear="none">
<a moz-do-not-send="true" shape="rect"
href="https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/7/html/Linux_Domain_Identity_Authentication_and_Policy_Guide/using-the-ui.html#config-browser"
target="_blank">https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/7/html/Linux_Domain_Identity_Authentication_and_Policy_Guide/using-the-ui.html#config-browser</a><br
clear="none">
<br clear="none">
Martin
<div class="yqt9601582537" id="yqtfd45176"><br
clear="none">
</div>
<br>
<br>
</div>
</blockquote>
</div>
</div>
</div>
</div>
<br>
<fieldset class="mimeAttachmentHeader"></fieldset>
<br>
</blockquote>
<br>
</body>
</html>