I know I can paste a CSR from one of our servers into the GUI and generate a new cert, but how can I do this from a command line?
I've been working with this: # ipa cert-request --principal=HTTP/$HOST $DB/$HOST.csr But that's giving me an error that the principal doesn't exist. Then (admittedly, I picked up this command from a discussion I found): # ipa cert-show $SERIAL_NUMBER --out=$DB/sslcert.pem How do I get the serial number? Basically, I'm trying to wrap and automate the process of granting a new cert to a server. Bret Wortman Founder, Damascus Products, LLC 855-644-2783 (tel:855-644-2783) | [email protected] (https://link.getmailspring.com/link/[email protected]/0?redirect=mailto%3Abret%40wrapbuddies.co&recipient=ZnJlZWlwYS11c2Vyc0BsaXN0cy5mZWRvcmFob3N0ZWQub3Jn) http://wrapbuddies.co/ (https://link.getmailspring.com/link/[email protected]/1?redirect=http%3A%2F%2Fwrapbuddies.co%2F&recipient=ZnJlZWlwYS11c2Vyc0BsaXN0cy5mZWRvcmFob3N0ZWQub3Jn) 70 Main St. Suite 23 Warrenton, VA 20186
_______________________________________________ FreeIPA-users mailing list -- [email protected] To unsubscribe send an email to [email protected] Fedora Code of Conduct: https://getfedora.org/code-of-conduct.html List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedorahosted.org/archives/list/[email protected]
