At last I did manage to create and use my certs, but with nss tools.
I've stop using openssl ones, since they are not integrated with
freeipa. So I encounter no problems.
Last things I'd like to know. I've seen that I'was able to modify the
content signed certs through this file
In this folder "/var/lib/pki-ca/profiles/ca/" there's a lots of cfg
files, but I do not understant how to "choose" them when signing a request.
I'd need very specific certs for an application, specific extensions,
but I don't want to add this extensions to all the certs that can be issued.
Any hints ?
Freeipa-users mailing list