Thank you David, I'll check it out. 2015-03-12 12:36 GMT+01:00 David Kupka <dku...@redhat.com>:
> On 03/12/2015 10:37 AM, crony wrote: > >> Hi FreeIPA Users, >> I have a fresh new FreeIPA 4.1 on RHEL7.1 with self-sign CA and I would >> like to change the self-sign CA to the external CA >> >> Do you have any step by step document for do it correctly on 4.1 version? >> >> /lm >> >> >> >> > Hello! > > I'm not aware of this being documented but fortunately this can be done in > 3 easy steps: > > 1. # ipa-cacert-manage renew --external-ca > 2. Let CA of your choice sing the CRL produced in step 1. > 3. # ipa-cacert-manage renew --external-cert-file=/path/to/signed_certificate > --external-cert-file=/path/to/external_ca_certificate > > -- > David Kupka > -- Pozdrawiam Leszek Miś www: http://cronylab.pl www: http://emerge.pl Nothing is secure, paranoia is your friend.
-- Manage your subscription for the Freeipa-users mailing list: https://www.redhat.com/mailman/listinfo/freeipa-users Go to http://freeipa.org for more info on the project
