I might as well write this down here :)
I have found this mechanism works:
On the service machine:
- openssl req -out CSR.csr -new -newkey rsa:2048 -nodes -keyout privateKey.key
# a common name must be entered here which is the hostname
In the IPA interface:
- Services
- Add
- HTTP/servi
> There are also some good docs and examples in the certmonger git repo in
> docs folder and here.
> http://docs.fedoraproject.org/en-US/Fedora/15/html/FreeIPA_Guide/certmongerX.html
Hi,
The docs seem to explain quite well how to request a certificate but
not how to actually issue a certificate.