[Freeipa-users] Re: certmonger CA settings

2017-06-22 Thread Florence Blanc-Renaud via FreeIPA-users
On 06/21/2017 04:13 PM, Ian Pilcher via FreeIPA-users wrote: On 06/21/2017 01:39 AM, Florence Blanc-Renaud wrote: your CA helpers are properly configured, except for the last one, which should look like the following: CA 'dogtag-ipa-ca-renew-agent': is-default: no ca-type: EXTERNAL

[Freeipa-users] Re: certmonger CA settings

2017-06-21 Thread Florence Blanc-Renaud via FreeIPA-users
On 06/21/2017 07:41 AM, Ian Pilcher via FreeIPA-users wrote: As part of my debugging efforts (see "Expired certificates" thread), I changed modified the settings for the dogtag-ipa-renew-agent and dogtag-ipa-ca-renew-agent CAs. Unfortunately, I forgot to make a note of the original settings.