I too ran into this issue of certificate serial mismatch. Just wanted to
shoot a note thanking the two of you for helping. Your questions and
answers were very well articulated and very detailed. I used the info in
this thread to get my replica installed. Thank you! =)
On Fri, Apr 15, 2016 at 11:5
Hi
Disclaimer: I'm new on this mailing list but willing to share experience :)
Did you use "ipa-cacert-manage install -t C,," to install your external
CA certificate? This command copies the certificate in
cn=certificates,cn=ipa,cn=etc,dc=xxx
After this, you can use ipa-certupdate which will