One more question to ask,

1. Both /etc/dirsrv/alias and /etc/http/alias store certificates for 
themselves.  Right?

2. Dogtag is a cerfificate lifecycle management system, e.g issue/renew/rovke.  
Any CSR would validate by httpd first and then forward to dogtag subCA?   per 
https://ftweedal.fedorapeople.org/ipa-cert-renewal-deep-dive.pdf

3. Where do certificates issued by dogtag store? any stuff would store in 389 
DS?

Thanks,
_______________________________________________
FreeIPA-users mailing list -- [email protected]
To unsubscribe send an email to [email protected]
Fedora Code of Conduct: 
https://docs.fedoraproject.org/en-US/project/code-of-conduct/
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives: 
https://lists.fedorahosted.org/archives/list/[email protected]

Reply via email to