[Freeipa-users] Re: PKI with IPA

2018-05-22 Thread Rob Crittenden via FreeIPA-users
Maciej Drobniuch via FreeIPA-users wrote: > Hey Fraser, > > That it is in CRL format. Then yes. rob > > BR > Maciej > > On Fri, May 18, 2018 at 6:18 AM, Fraser Tweedale > wrote: > > Hi Maciej, > > I concur with the answers in Rob's reply.  But I have on

[Freeipa-users] Re: PKI with IPA

2018-05-22 Thread Maciej Drobniuch via FreeIPA-users
Hey Fraser, That it is in CRL format. BR Maciej On Fri, May 18, 2018 at 6:18 AM, Fraser Tweedale wrote: > Hi Maciej, > > I concur with the answers in Rob's reply. But I have one question. > > On Thu, May 17, 2018 at 04:03:36PM +0200, Maciej Drobniuch via > FreeIPA-users wrote: > > 3. How can

[Freeipa-users] Re: PKI with IPA

2018-05-17 Thread Fraser Tweedale via FreeIPA-users
Hi Maciej, I concur with the answers in Rob's reply. But I have one question. On Thu, May 17, 2018 at 04:03:36PM +0200, Maciej Drobniuch via FreeIPA-users wrote: > 3. How can I export the IPA revocation list so it's compliant with servers > (CRL format) > What do you mean by "compliant with ser

[Freeipa-users] Re: PKI with IPA

2018-05-17 Thread Rob Crittenden via FreeIPA-users
Maciej Drobniuch via FreeIPA-users wrote: > Hey Guys, > > I want to use the IPA CA for PKI on some of our web services( mostly of > premises - that's why ) > > What I do not know is: > 1. How to add a profile id for certificate generation for the user so > he/she can paste a CSR and get a  certif