John Stokes via FreeIPA-users wrote: > Hi Rob, > > You are right. The certs are automatically tracked and renewed. I have two > IPA servers. When using the command getcert list on the first one it did not > show me any of the certificates I have issued for my servers (I'm talking > about ssl sertificates for web servers in my network). > But on the second IPA server the command listed all issued certs and it also > stated that they are tracked.
The Apache and LDAP certs are specific per master and should be tracked on each. Unless you have replaced one or both of those certs with your own in which case renewing them is on you. rob _______________________________________________ FreeIPA-users mailing list -- freeipa-users@lists.fedorahosted.org To unsubscribe send an email to freeipa-users-le...@lists.fedorahosted.org Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedorahosted.org/archives/list/freeipa-users@lists.fedorahosted.org
