On 6.6.2016 14:59, Günther J. Niederwimmer wrote: > Hello, > > is it possible with a FreeIPA Certificate make a DANE entry in IPA DNS ?
Yes, in recent versions of FreeIPA you can add TLSA records. You have to generate the TLSA records manually, e.g. using hash-slinger: https://admin.fedoraproject.org/pkgdb/package/rpms/hash-slinger/ Feel free to open a feature request on https://fedorahosted.org/freeipa/newticket if you can think of way to automate this. -- Petr^2 Spacek -- Manage your subscription for the Freeipa-users mailing list: https://www.redhat.com/mailman/listinfo/freeipa-users Go to http://freeipa.org for more info on the project