Re: [Freeipa-users] services and openSSL and stuff

2014-04-26 Thread Andrew Holway
There are also some good docs and examples in the certmonger git repo in docs folder and here. http://docs.fedoraproject.org/en-US/Fedora/15/html/FreeIPA_Guide/certmongerX.html Hi, The docs seem to explain quite well how to request a certificate but not how to actually issue a certificate.

Re: [Freeipa-users] services and openSSL and stuff

2014-04-26 Thread Andrew Holway
I might as well write this down here :) I have found this mechanism works: On the service machine: - openssl req -out CSR.csr -new -newkey rsa:2048 -nodes -keyout privateKey.key # a common name must be entered here which is the hostname In the IPA interface: - Services - Add -