On 23.4.2016 1:23, EXT Rob Crittenden wrote:
Tikkanen, Tuomo (Nokia - FI/Espoo) wrote:
Repetitio est mater studiorum:

How I can clean this defective state of certmonger?

# ipa-getcert stop-tracking -i 20160212110456

Ah! That was obvious! Thanks a lot Rob.

Second question if/when the above urgent problem is solved:

Is there any way to get IP address to SAN field for the IPA Server-Certs?

Not without changing code. IP address SAN are explicitly forbidden:
Subject alt name type IP Address is forbidden


Is there any true reason why IP Address is forbidden by certmonger / freeipa? Or is it just "not implemented" kind of restriction?


Manage your subscription for the Freeipa-users mailing list:
Go to http://freeipa.org for more info on the project

Reply via email to