Re: [Freeipa-users] Certificate Issues

2016-08-02 Thread Adam Lewis
..@redhat.com> wrote: > Adam Lewis wrote: > >> Yup. I'm currently still sitting back in time. But any time I try to >> resubmit either the ipaCert or the subsystemCert it errors out. >> >> getcert list shows : >> ca-error: Server at >> "https

Re: [Freeipa-users] Certificate Issues

2016-08-01 Thread Adam Lewis
ed so getting the full log info is difficult. If it's the only way let me know and I'll see what I can do. Worst case it'll just take me a while to re-type it. Thanks On Mon, Aug 1, 2016 at 3:11 PM, Rob Crittenden <rcrit...@redhat.com> wrote: > Adam Lewis wrote: > >> Yup, It's

Re: [Freeipa-users] Certificate Issues

2016-08-01 Thread Adam Lewis
new ipaCert? Thanks On Mon, Aug 1, 2016 at 3:00 PM, Rob Crittenden <rcrit...@redhat.com> wrote: > Adam Lewis wrote: > >> If you mean the usercertificate value from the ldapsearch command, then >> yes. That value matches the value from the certutil output. >> >

Re: [Freeipa-users] Certificate Issues

2016-08-01 Thread Adam Lewis
If you mean the usercertificate value from the ldapsearch command, then yes. That value matches the value from the certutil output. Thanks On Mon, Aug 1, 2016 at 11:18 AM, Rob Crittenden <rcrit...@redhat.com> wrote: > Adam Lewis wrote: > >> A quick update. We did some diggi

Re: [Freeipa-users] Certificate Issues

2016-08-01 Thread Adam Lewis
in the debug log. I have verified that the ipara entry's serial number and cert match the serial number and cert from the one in /etc/httpd/alias. Any other ideas? Thanks! On Mon, Aug 1, 2016 at 9:17 AM, Adam Lewis <alewis...@gmail.com> wrote: > Rob, > Thanks for pointing me in the rig

Re: [Freeipa-users] Certificate Issues

2016-08-01 Thread Adam Lewis
Rob, Thanks for pointing me in the right direction. However after following the instructions in the above mentioned doc I noticed a few things that are odd and have a new problem. The first odd thing I noticed is that when I run service pki-cad status it shows that my PKI Subsystem Type is "CA