[Freeipa-devel] ipa-server-install reporting "missing basic constraints" for ipa cert while it has X509v3 Basic Constraints:CA:TRUE

Hello, This is process i followed: # ipa-server-install --external-ca /root/ipa.csr. # openssl req -text -noout -verify -in /root/ipa.csr verify OK Certificate Request: Data: Version: 0 (0x0) Subject: O=GSSLAB.PNQ2.REDHAT.COM, CN=Certificate Authority Subject Public

[Freeipa-devel] Re: replica installation without CA

AM, Amit via FreeIPA-devel wrote: >> Thanks Flo for response. >> >> When I am using --pkinit-cert-file to provide rootca cert and key. Still >> not able to install replica. >> >> # ipa-replica-install --pkinit-cert-file /root/rootCA.crt >> --pkinit-cert-fil

[Freeipa-devel] Not able to renew certs using 'ipa-gertcert request'

Hello, _This command is executed at IPA Client_: # date;ipa-getcert request -vvv -T SubjectAlternateNamesCert -R -K TEST/$(hostname) -E <>@<> -f opt/certs/test3.crt -k /opt/certs/test3.key -X BLE-IDM-SUB1 Wed Feb 14 07:54:49 CET 2018 Certificate at same location

[Freeipa-devel] Re: replica installation without CA

-install.log for more information # On 02/19/2018 03:27 PM, Florence Blanc-Renaud wrote: > On 02/19/2018 08:28 AM, Amit via FreeIPA-devel wrote: >> Hello, >> >> In installed IPA Server successfully with following command: >> >> # ipa-server-install >>

[Freeipa-devel] Re: ipa-replica-install --principal admin --admin-password --setup-ca Traceback

;> Hello Flo, PFA replica-install log. > Hi, sorry if I was not clear, but I meant 389-ds access logs, located > in /var/log/dirsrv/slapd-DOMxxx/access. The ones from the master and > the soon-to-be-replica may provide more information. The customer may > also try ipa-replica-insta

[Freeipa-devel] Re: ipa-replica-install --principal admin --admin-password --setup-ca Traceback

Ping!! On 03/09/2018 02:08 PM, Amit wrote: > Hello, > > Any thoughts would be helpful. > > Thanks > > > On 03/07/2018 02:57 PM, Amit wrote: >> Hello, >> >> This is scenario in customer env. >> Customer is using fresh machine to install replica. >> >> *IPA-Server >> *# ipa-server-install

[Freeipa-devel] Re: ipa-replica-install --principal admin --admin-password --setup-ca Traceback

Hello, Any thoughts would be helpful. Thanks On 03/07/2018 02:57 PM, Amit wrote: > Hello, > > This is scenario in customer env. > Customer is using fresh machine to install replica. > > *IPA-Server > *# ipa-server-install --no-ntp//Success > > > *IPA Replica* > #

[Freeipa-devel] ipa-replica-install --principal admin --admin-password --setup-ca Traceback

Hello, This is scenario in customer env. Customer is using fresh machine to install replica. *IPA-Server *# ipa-server-install --no-ntp//Success *IPA Replica* # ipa-replica-install --principal admin --admin-password --setup-ca DEBUG Traceback (most recent call