On 12/17/18 3:21 PM, Peter Tselios via FreeIPA-users wrote:
Hello everyone,
I have 2 FreeIPA servers in AWS and a LB in front of them to serve the UI and
the LDAP (just the gui and just the LDAP. For Kerberos, we use DNS discovery).
My problem is that I cannot use TLS with LDAP connections because the CA does
not have the LB's name in SAN.
Is there any way to **add** in the CA certificate the additional hostname?
Hi,
please have a look at the following email thread [1] which explains how
to add an additional SAN in the LDAP server certificate.
HTH,
flo
[1]
https://lists.fedorahosted.org/archives/list/[email protected]/thread/HK2U5WUJLVPTIMTORNN5ZIMCPHI5ZAFY/
_______________________________________________
FreeIPA-users mailing list -- [email protected]
To unsubscribe send an email to [email protected]
Fedora Code of Conduct: https://getfedora.org/code-of-conduct.html
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives:
https://lists.fedorahosted.org/archives/list/[email protected]
_______________________________________________
FreeIPA-users mailing list -- [email protected]
To unsubscribe send an email to [email protected]
Fedora Code of Conduct: https://getfedora.org/code-of-conduct.html
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives:
https://lists.fedorahosted.org/archives/list/[email protected]
