<div dir="ltr">Hi ,<div><br></div><div>I am trying to install freeipa with centos and Let's Encrypt SSL.</div><div><br></div><div>I create lets-encrypt with webroot option.</div><div> <br></div><div>Then i did <br></div><div><div><br></div><div>cat privkey.pem fullchain.pem > /root/key.pem</div></div><div><br></div><div><div>openssl pkcs12 -export -in /root/key.pem  -out ipa.pkcs12 -name "<a href="http://ipa.somedomain.com">ipa.somedomain.com</a>"</div></div><div><br></div><div><br></div><div><div>ipa-server-install --ip-address=<IP>  --http_pkcs12=/etc/letsencrypt/live/<a href="http://ipa.somedomein.com/ipa.pkcs12">ipa.somedomein.com/ipa.pkcs12</a> --dirsrv_pkcs12=/etc/letsencrypt/live/<a href="http://ipa.somedomain.com/ipa.pkcs12">ipa.somedomain.com/ipa.pkcs12</a> --root-ca-file=/etc/letsencrypt/live/<a href="http://ipa.somedomain.com/fullchain.pem">ipa.somedomain.com/fullchain.pem</a></div></div><div><br></div><div>I got error </div><div><div>ipa.ipapython.install.cli.install_tool(Server): ERROR    The full certificate chain is not present in /etc/letsencrypt/live/<a href="http://ipa.somedomain.com/ipa.pkcs12">ipa.somedomain.com/ipa.pkcs12</a></div></div><div><br></div><div><br></div><div>What I am missing intermediate.crt maybe ?</div><div><br></div><div>Thank you.</div></div>