On Mon, Nov 30, 2015 at 02:46:13PM +0200, Alexander Bokovoy wrote: > On Mon, 30 Nov 2015, Günther J. Niederwimmer wrote: > >Hello , > > > >I have the question, know any from the FreeIPA "Gurus" ;-), are the new > >upcoming LetsEncrypt Certificates compatible and working with FreeIPA? > We have plans to support issuing certificates via Let's Encrypt. > Günther, what are your specific wishes - to automatically acquire LE certs for FreeIPA server's HTTP and LDAP? Arbitrary hosts or services that are managed by FreeIPA?
> However, right now Let's encrypt only issues server certificates, not > CA roots, so you cannot use them to bootstrap IPA CA. > This will probably always be the case. Cheers, Fraser > -- > / Alexander Bokovoy > > -- > Manage your subscription for the Freeipa-users mailing list: > https://www.redhat.com/mailman/listinfo/freeipa-users > Go to http://freeipa.org for more info on the project -- Manage your subscription for the Freeipa-users mailing list: https://www.redhat.com/mailman/listinfo/freeipa-users Go to http://freeipa.org for more info on the project