[Freeipa-users] Re: Replication and SSL certs

2017-07-16 Thread Fraser Tweedale via FreeIPA-users
On Fri, Jul 14, 2017 at 07:47:39AM -0400, Mark Haney via FreeIPA-users wrote: > On 07/13/2017 09:57 PM, Fraser Tweedale wrote: > > OK, I think I understand. > > > > ipa0 has been set up with a 3rd-party HTTP cert, but ipa1 has been > > set up with a certificate issued by the IPA CA, which your

[Freeipa-users] Re: Replication and SSL certs

2017-07-14 Thread Mark Haney via FreeIPA-users
On 07/13/2017 09:57 PM, Fraser Tweedale wrote: OK, I think I understand. ipa0 has been set up with a 3rd-party HTTP cert, but ipa1 has been set up with a certificate issued by the IPA CA, which your browser does not trust. There are two ways forward here: 1. You can use

[Freeipa-users] Re: Replication and SSL certs

2017-07-13 Thread Fraser Tweedale via FreeIPA-users
On Thu, Jul 13, 2017 at 09:57:04AM -0400, Mark Haney via FreeIPA-users wrote: > On 07/12/2017 08:34 PM, Fraser Tweedale wrote: > > > > Which version(s) of FreeIPA? > ipa-server-4.4.0-14.el7.centos.7.x86_64 > > > > Which service(s) (HTTP, LDAP?). > HTTPS. I haven't checked LDAPS yet. It appears

[Freeipa-users] Re: Replication and SSL certs

2017-07-13 Thread Mark Haney via FreeIPA-users
On 07/12/2017 08:34 PM, Fraser Tweedale wrote: Which version(s) of FreeIPA? ipa-server-4.4.0-14.el7.centos.7.x86_64 Which service(s) (HTTP, LDAP?). HTTPS. I haven't checked LDAPS yet. It appears this is only related to HTTPS. To give a bit of backstory, the primary host [ipa0] was