Hello team,

>From my reading, it is possible to migrate IPA from a self signed root CA
to an external signed one, after the migration, I know:

   1. all IPA clients should "ipa-certupdate" to get the new CA

I do not know:

   1. what will happen to the SSL certificates issued with the old self
   signed root CA?
   2. what will happen to the subCA issued with the old self signed root CA?

Could someone share the answers? Thanks.

Kathy.
-- 
_______________________________________________
FreeIPA-users mailing list -- freeipa-users@lists.fedorahosted.org
To unsubscribe send an email to freeipa-users-le...@lists.fedorahosted.org
Fedora Code of Conduct: 
https://docs.fedoraproject.org/en-US/project/code-of-conduct/
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives: 
https://lists.fedorahosted.org/archives/list/freeipa-users@lists.fedorahosted.org
Do not reply to spam, report it: 
https://pagure.io/fedora-infrastructure/new_issue

Reply via email to