On 14/01/2016 18:51, Rob Crittenden wrote:
You need to add the new root certs to the pki NSS database.
As far as I can see those 3 new CA certs are already in the database
(unless you're talking about a different db):
$ certutil -d /etc/pki/nssdb/ -L
Certificate Nickname Trust
Attributes
SSL,S/MIME,JAR/XPI
IPA.WANDISCO.COM IPA CA CT,C,C
AddTrust ,,
USERTrustRSAAddTrustCA ,,
GandiStandardSSLCA2 ,,
Please advise.
--
Kind regards,
Peter Pakos
--
Manage your subscription for the Freeipa-users mailing list:
https://www.redhat.com/mailman/listinfo/freeipa-users
Go to http://freeipa.org for more info on the project