<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1">
</head>
<body style="word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space;">
<div style="color: rgb(0, 0, 0); font-family: Calibri, sans-serif; font-size: 14px;">
Sorry for the redundancy but I thought it would be better to start a new thread since I am really asking a different question at this point.</div>
<div style="color: rgb(0, 0, 0); font-family: Calibri, sans-serif; font-size: 14px;">
<br>
</div>
<div style="color: rgb(0, 0, 0); font-family: Calibri, sans-serif; font-size: 14px;">
<font face="Calibri,sans-serif">We are trying to stand up an IPA instance using real certs (wildcard) for our domain, so that external users get a valid cert when coming the the https UI. I am trying to follow the steps given in this thread: </font><a href="https://www.redhat.com/archives/freeipa-users/2014-August/msg00338.html" style="color: rgb(0, 0, 0); font-family: Calibri, sans-serif; font-size: 14px;">https://www.redhat.com/archives/freeipa-users/2014-August/msg00338.html</a><font face="Calibri,sans-serif">.
It seems no matter what I do, I end up with: </font>“full <span style="color: rgb(0, 0, 0); font-family: -webkit-standard; font-size: 14px;">certificate chain is not present in /etc/ipa/pki/example.org.p12”. Has this process been documented more completely
anywhere? Is this still a valid process?</span></div>
<div style="color: rgb(0, 0, 0); font-family: Calibri, sans-serif; font-size: 14px;">
<span style="color: rgb(0, 0, 0); font-family: -webkit-standard; font-size: 14px;"><br>
</span></div>
<div>I know that there is now an —external-ca option to ipa-server-install, but I have questions about the CSR process from my CA and they are not being very responsive. I have also been told that this option would require a reseller arrangement potentially
costing a lot of money… we don’t want to be in the CA business… we just want our external users to be able to securely access IPA.</div>
<div><br>
</div>
<div>Thanks again in advance for any assistance.</div>
<div><br>
</div>
<div>Sean</div>
<div><br>
</div>
<div style="color: rgb(0, 0, 0); font-family: -webkit-standard; font-size: 14px;">
<br>
</div>
</body>
</html>