[Freeipa-users] Re: FIPs enabled Install Fails

2023-07-02 Thread Christian Heimes via FreeIPA-users
On 02/07/2023 19.19, Entrepreneur AJ via FreeIPA-users wrote: Thank you for the response Christian. I would rather not use FIPs at all but looks like it's going to become a requirement with me going into the financial industry. I will submit it on Pagure If certified FIPS compliance is a

[Freeipa-users] Re: FIPs enabled Install Fails

2023-07-02 Thread Entrepreneur AJ via FreeIPA-users
Thank you for the response Christian. I would rather not use FIPs at all but looks like it's going to become a requirement with me going into the financial industry. I will submit it on Pagure 2 Jul 2023 18:04:52 Entrepreneur AJ : > Thank you for the response Christian. > > I would rather

[Freeipa-users] Re: FIPs enabled Install Fails

2023-07-02 Thread Christian Heimes via FreeIPA-users
On 02/07/2023 12.21, Entrepreneur AJ via FreeIPA-users wrote: I today spun up a fresh Fedora 38 VPS on Vultr and started the FreeIPA Server install. This VPS has been switched to FIPs enabled. I have then tried to install the latest FreeIPA server from DNF without the DNS package. All was

[Freeipa-users] Re: Where is root CA private key stored?

2023-07-02 Thread Ian Pilcher via FreeIPA-users
On 6/30/23 12:38, Rob Crittenden wrote: The CA is stored in the NSS database /etc/pki/pki-tomcat/alias. You can use pk12util to extract it into a PKCS#12, then extract that and you'll have the CA. This would keep the CA trust the same but with a fresh install you'd need new keytabs for any

[Freeipa-users] FIPs enabled Install Fails

2023-07-02 Thread Entrepreneur AJ via FreeIPA-users
I today spun up a fresh Fedora 38 VPS on Vultr and started the FreeIPA Server install. This VPS has been switched to FIPs enabled. I have then tried to install the latest FreeIPA server from DNF without the DNS package. All was going well until it got to step 17 of 30 and outputted the