Can you give an example of what's different between the two subjects?
On Sun, Oct 23, 2016 at 9:03 AM, David Dejaeghere <
> Does somebody have an idea how to replace our certificates when the new
> ROOT ca certificate has a different subject?
> The UI is down because of this.
> 2016-10-19 11:42 GMT+02:00 David Dejaeghere <david.dejaegh...@gmail.com>:
>> When installing FreeIPA we used the CA from our Windows servers.
>> This one recently expired and we created a new one. It seems that the
>> new root CA has another subject name and this seems to be an issue when we
>> want to install new certs on our FreeIPA hosts.
>> ipa-cacert-manage install certnew.pem -n mycert -t C,,
>> Installing CA certificate, please wait
>> Failed to install the certificate: subject public key info mismatch
>> After validating the subjects are indeed different.
>> How can we replace the required certs for dirsrv and http when the ca is
>> not installable?
>> Kind Regards,
> Manage your subscription for the Freeipa-users mailing list:
> Go to http://freeipa.org for more info on the project
Manage your subscription for the Freeipa-users mailing list:
Go to http://freeipa.org for more info on the project