I am running FreeIPA 4.9.8 as a Docker container and Firefox refuses the certificate as the serial has been reused. I found this post: https://bugzilla.redhat.com/show_bug.cgi?id=747959 and this post: https://galenabell.com/2018/10/23/random-certificate-serials-in-freeipa/, but the files mentioned do no longer exist in FreeIPA 4.9.8 (or I cannot find them). I tried adding: ``` PKI_RANDOM_SERIAL_NUMBERS_ENABLED="true" export PKI_RANDOM_SERIAL_NUMBERS_ENABLED ``` to /usr/share/pki/etc/pki.conf
and I tried adding PKI_RANDOM_SERIAL_NUMBERS_ENABLED=TRUE as environment variable in the docker-compose file. Neither worked. During install I see the variable being set to false in the logs. Any suggestion on how to have random serials after an unattended install? _______________________________________________ FreeIPA-users mailing list -- [email protected] To unsubscribe send an email to [email protected] Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedorahosted.org/archives/list/[email protected] Do not reply to spam on the list, report it: https://pagure.io/fedora-infrastructure
