Hello, I want to use the company's MS-CA as the single CA and thus I had to change the FreeIPA certificate. The process was smooth until the point of importing the certificate in the FreeIPA. I got this: =============================================== ipa-cacert-manage renew --external-cert-file=./ms-crt.pem Importing the renewed CA certificate, please wait Subject name encoding mismatch (visit http://www.freeipa.org/page/Troubleshooting for troubleshooting guide) The ipa-cacert-manage command failed. ===============================================
The documentation is very clear: FreeIPA issues CSRs in UTF8. The MS-CA uses PRINTABLESTRING in the subject and the issuer. The MS admins/engineer do not want to change this to UTF 8, so, I am a little bit stuck here. Is there anyway to configure FreeIPA to issue the CSR in PRINTABLESTRING and import it? Or the only acceptable by FreeIPA format is UTF8? _______________________________________________ FreeIPA-users mailing list -- [email protected] To unsubscribe send an email to [email protected] Fedora Code of Conduct: https://getfedora.org/code-of-conduct.html List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedorahosted.org/archives/list/[email protected]
