[Freeipa-users] Re: ipa user-add-cert and org.freedesktop.sssd.infopipe.Users.FindByCertificate into ps12 and mozilla certificate manager

2023-06-01 Thread Sumit Bose via FreeIPA-users
Am Fri, Jun 02, 2023 at 02:40:09AM +0200 schrieb Jernej Jakob via FreeIPA-users: > You would obtain the certificate via one of the supported methods that > generates the private key on the local machine first. The IPA CA would > just sign the CSR and send back the signed certificate. So you should

[Freeipa-users] Re: ipa user-add-cert and org.freedesktop.sssd.infopipe.Users.FindByCertificate into ps12 and mozilla certificate manager

2023-06-01 Thread Jernej Jakob via FreeIPA-users
You would obtain the certificate via one of the supported methods that generates the private key on the local machine first. The IPA CA would just sign the CSR and send back the signed certificate. So you should have the private key already. For documentation see:

[Freeipa-users] Re: ipa user-add-cert and org.freedesktop.sssd.infopipe.Users.FindByCertificate into ps12 and mozilla certificate manager

2023-06-01 Thread Jelle de Jong via FreeIPA-users
On 6/1/23 15:18, Sumit Bose via FreeIPA-users wrote: Am Thu, Jun 01, 2023 at 02:18:40PM +0200 schrieb Jelle de Jong via FreeIPA-users: Hello everybody, I am looking for a way to digitally sign documents by end-users within an organisation. Hi, correct me if I'm wrong, but to my

[Freeipa-users] Re: ipa user-add-cert and org.freedesktop.sssd.infopipe.Users.FindByCertificate into ps12 and mozilla certificate manager

2023-06-01 Thread Sumit Bose via FreeIPA-users
Am Thu, Jun 01, 2023 at 02:18:40PM +0200 schrieb Jelle de Jong via FreeIPA-users: > Hello everybody, > > I am looking for a way to digitally sign documents by end-users within an > organisation. Hi, correct me if I'm wrong, but to my understanding the certificate is not sufficient for a