[Freeipa-users] Re: Replacing externally signed CA long before expiry

2018-01-11 Thread Rob Crittenden via FreeIPA-users
Steve Dainard via FreeIPA-users wrote: > Hi Flo, > > Is there anything I can do to help troubleshoot this issue? Or is there > a bugzilla issue I can watch? Flo wasn't able to reproduce this so there is no bug unless you file one. I'd look at the CA to see what the signer is: # certutil -L -d

[Freeipa-users] Re: Replacing externally signed CA long before expiry

2018-01-11 Thread Florence Blanc-Renaud via FreeIPA-users
On 01/10/2018 07:47 PM, Steve Dainard via FreeIPA-users wrote: Hi Flo, Is there anything I can do to help troubleshoot this issue? Or is there a bugzilla issue I can watch? Thanks, Steve Hi Steve, I was not able to reproduce the behavior you are experiencing. With IPA 4.5.0-22 on rhel

[Freeipa-users] Re: Replacing externally signed CA long before expiry

2018-01-10 Thread Steve Dainard via FreeIPA-users
Hi Flo, Is there anything I can do to help troubleshoot this issue? Or is there a bugzilla issue I can watch? Thanks, Steve On Wed, Dec 20, 2017 at 8:32 PM, Steve Dainard wrote: > > > On Wed, Dec 20, 2017 at 12:53 AM, Florence Blanc-Renaud > wrote: > >> On

[Freeipa-users] Re: Replacing externally signed CA long before expiry

2017-12-20 Thread Steve Dainard via FreeIPA-users
On Wed, Dec 20, 2017 at 12:53 AM, Florence Blanc-Renaud wrote: > On 12/19/2017 06:59 PM, Steve Dainard via FreeIPA-users wrote: > >> Hi Flo, >> >> >> On Tue, Dec 19, 2017 at 8:17 AM, Florence Blanc-Renaud > > wrote: >> >> On

[Freeipa-users] Re: Replacing externally signed CA long before expiry

2017-12-20 Thread Florence Blanc-Renaud via FreeIPA-users
On 12/19/2017 06:59 PM, Steve Dainard via FreeIPA-users wrote: Hi Flo, On Tue, Dec 19, 2017 at 8:17 AM, Florence Blanc-Renaud > wrote: On 12/18/2017 08:54 PM, Steve Dainard via FreeIPA-users wrote: Hello, Using freeipa 4.5.

[Freeipa-users] Re: Replacing externally signed CA long before expiry

2017-12-19 Thread Steve Dainard via FreeIPA-users
Hi Flo, On Tue, Dec 19, 2017 at 8:17 AM, Florence Blanc-Renaud wrote: > On 12/18/2017 08:54 PM, Steve Dainard via FreeIPA-users wrote: > >> Hello, >> >> Using freeipa 4.5. >> >> I've replaced an external root CA that had a very short key, and have >> gone through the process

[Freeipa-users] Re: Replacing externally signed CA long before expiry

2017-12-19 Thread Florence Blanc-Renaud via FreeIPA-users
On 12/18/2017 08:54 PM, Steve Dainard via FreeIPA-users wrote: Hello, Using freeipa 4.5. I've replaced an external root CA that had a very short key, and have gone through the process of resigning the ipa intermediate-CA. I've used ipa-cacert-manage to generate a new csr and have signed it