[Freeipa-users] Re: ipaCertSubject uniqueness check

2020-12-14 Thread Rob Crittenden via FreeIPA-users
Fraser Tweedale wrote: On Sat, Dec 12, 2020 at 05:49:53PM -, Khurrum Maqb via FreeIPA-users wrote: I got it resolved - IPA does not seem to support importing a rechained external CA. It doesn't seem to have anything to do with ipaCertSubject being unique but it's something else where there a

[Freeipa-users] Re: ipaCertSubject uniqueness check

2020-12-13 Thread Fraser Tweedale via FreeIPA-users
On Sat, Dec 12, 2020 at 05:49:53PM -, Khurrum Maqb via FreeIPA-users wrote: > I got it resolved - IPA does not seem to support importing a > rechained external CA. It doesn't seem to have anything to do with > ipaCertSubject being unique but it's something else where there > are two different c

[Freeipa-users] Re: ipaCertSubject uniqueness check

2020-12-12 Thread Khurrum Maqb via FreeIPA-users
I got it resolved - IPA does not seem to support importing a rechained external CA. It doesn't seem to have anything to do with ipaCertSubject being unique but it's something else where there are two different chains for the same external CA. I was able to ldapdelete the old problematic certs f