On 23.4.2016 1:23, EXT Rob Crittenden wrote:
Tikkanen, Tuomo (Nokia - FI/Espoo) wrote:
........
Repetitio est mater studiorum:
How I can clean this defective state of certmonger?
# ipa-getcert stop-tracking -i 20160212110456
Ah! That was obvious! Thanks a lot Rob.
Second question if/when the above urgent problem is solved:
Is there any way to get IP address to SAN field for the IPA Server-Certs?
Not without changing code. IP address SAN are explicitly forbidden:
Subject alt name type IP Address is forbidden
rob
Is there any true reason why IP Address is forbidden by certmonger /
freeipa? Or is it just "not implemented" kind of restriction?
--
tuomo.tikka...@nokia.com
--
Manage your subscription for the Freeipa-users mailing list:
https://www.redhat.com/mailman/listinfo/freeipa-users
Go to http://freeipa.org for more info on the project
