Re: [Freeipa-users] Certs.

2014-09-17 Thread Rob Crittenden
Walid wrote: Hi Rob, Self signed IPA certificate i saw it is 20 years, however how about the client nodes renewal, i see here it is automated, how, and when For renewed CA certificate distribution, we are working on it in ticket https://fedorahosted.org/freeipa/ticket/4322 For any server

[Freeipa-users] Certs.

2014-09-10 Thread William Graboyes
-BEGIN PGP SIGNED MESSAGE- Hash: SHA512 Hello list, I have been fruitlessly searching for some information, especially related to Certs, namely how to replace the self signed certs with certs from a trusted CA? As we are moving forward into productionizing of our free-ipa install, I am

Re: [Freeipa-users] Certs.

2014-09-10 Thread Chris Whittle
Search the list for a post by me and certs... Basically there is a install flag that will do all the work for you once you have it the cert in the right format. On Sep 10, 2014 5:53 PM, William Graboyes wgrabo...@cenic.org wrote: -BEGIN PGP SIGNED MESSAGE- Hash: SHA512 Hello list,

Re: [Freeipa-users] Certs.

2014-09-10 Thread William Graboyes
-BEGIN PGP SIGNED MESSAGE- Hash: SHA512 Hi Chris, Thank you for the suggestion. Looking at http://www.redhat.com/archives/freeipa-users/2014-August/msg00334.html Installing a new, third party cert requires a reinstall of IPA? IPA Devs, that is a bit silly don't you think? A year or

Re: [Freeipa-users] Certs.

2014-09-10 Thread Dmitri Pal
On 09/10/2014 06:50 PM, William Graboyes wrote: -BEGIN PGP SIGNED MESSAGE- Hash: SHA512 Hello list, I have been fruitlessly searching for some information, especially related to Certs, namely how to replace the self signed certs with certs from a trusted CA? This is an install time

Re: [Freeipa-users] Certs.

2014-09-10 Thread William Graboyes
-BEGIN PGP SIGNED MESSAGE- Hash: SHA512 Hi Dmitri, Production Environment is going to be RH 6.5, We are still evaluating the usage of systemd. More like we are taking a wait and see approach to to systemd, while actively testing it. Thanks, Bill On Wed Sep 10 16:49:24 2014, Dmitri Pal

Re: [Freeipa-users] Certs.

2014-09-10 Thread Dmitri Pal
On 09/10/2014 07:26 PM, William Graboyes wrote: -BEGIN PGP SIGNED MESSAGE- Hash: SHA512 Hi Chris, Thank you for the suggestion. Looking at http://www.redhat.com/archives/freeipa-users/2014-August/msg00334.html Installing a new, third party cert requires a reinstall of IPA? IPA Devs,

Re: [Freeipa-users] Certs.

2014-09-10 Thread Rob Crittenden
Dmitri Pal wrote: On 09/10/2014 07:57 PM, William Graboyes wrote: Hi Dmitri, Production Environment is going to be RH 6.5, We are still evaluating the usage of systemd. More like we are taking a wait and see approach to to systemd, while actively testing it. The command line options for