On 10/02/2015 03:41 PM, Andrew Meyer wrote:
works in chrome and not firefox, creating new FF profile.

Hi,
try to remove IPA certificates from firefox in ff settings
Martin



On Friday, October 2, 2015 3:09 AM, Martin Kosek <mko...@redhat.com> wrote:



    On 10/02/2015 04:15 AM, Andrew Meyer wrote:

    > I just created a new FreeIPA setup at my home and i'm getting
    the following:
    >
    > [Thu Oct 01 14:02:10.082255 2015] [core:notice] [pid 18792]
    AH00094: Command
    > line: '/usr/sbin/httpd -D FOREGROUND'
    > [Thu Oct 01 14:02:14.742680 2015] [:error] [pid 18795] ipa:
    INFO: *** PROCESS
    > START ***
    > [Thu Oct 01 14:02:14.745250 2015] [:error] [pid 18794] ipa:
    INFO: *** PROCESS
    > START ***
    > [Thu Oct 01 14:02:42.984969 2015] [:error] [pid 18798] SSL
    Library Error:
    > -12271 SSL client cannot verify your certificate
    > [Thu Oct 01 15:21:56.837422 2015] [:error] [pid 18801] SSL
    Library Error:
    > -12271 SSL client cannot verify your certificate
    >
    > I tried running the ipa-manage-cacert to generate a new one and
    install it.
    > But no go.
    >
    > Running CentOS 7.1 with latest updates.  Is there a bug in
    generating the SSL cert?

    >
    >
    >

    This rather seems that your client browser does not trust FreeIPA
    CA certificate.

    Related thread:
    https://www.redhat.com/archives/freeipa-devel/2009-June/msg00188.html

    More related info:
    
https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/7/html/Linux_Domain_Identity_Authentication_and_Policy_Guide/using-the-ui.html#config-browser

    Martin






-- 
Manage your subscription for the Freeipa-users mailing list:
https://www.redhat.com/mailman/listinfo/freeipa-users
Go to http://freeipa.org for more info on the project

Reply via email to