Re: [Freeipa-users] How to remove bad cert renewal from certmonger?

2016-04-25 Thread Alexander Bokovoy
On Mon, 25 Apr 2016, Rob Crittenden wrote: Tikkanen, Tuomo (Nokia - FI/Espoo) wrote: On 23.4.2016 1:23, EXT Rob Crittenden wrote: Tikkanen, Tuomo (Nokia - FI/Espoo) wrote: Repetitio est mater studiorum: How I can clean this defective state of certmonger? # ipa-getcert

Re: [Freeipa-users] How to remove bad cert renewal from certmonger?

2016-04-25 Thread Rob Crittenden
Tikkanen, Tuomo (Nokia - FI/Espoo) wrote: On 23.4.2016 1:23, EXT Rob Crittenden wrote: Tikkanen, Tuomo (Nokia - FI/Espoo) wrote: Repetitio est mater studiorum: How I can clean this defective state of certmonger? # ipa-getcert stop-tracking -i 20160212110456 Ah! That was

Re: [Freeipa-users] How to remove bad cert renewal from certmonger?

2016-04-25 Thread Tikkanen, Tuomo (Nokia - FI/Espoo)
On 23.4.2016 1:23, EXT Rob Crittenden wrote: Tikkanen, Tuomo (Nokia - FI/Espoo) wrote: Repetitio est mater studiorum: How I can clean this defective state of certmonger? # ipa-getcert stop-tracking -i 20160212110456 Ah! That was obvious! Thanks a lot Rob. Second question

Re: [Freeipa-users] How to remove bad cert renewal from certmonger?

2016-04-22 Thread Rob Crittenden
Tikkanen, Tuomo (Nokia - FI/Espoo) wrote: Hello all, I tried to renew the server HTTP certificates for two freeipa servers so that certs would have Subject Alternative Name (SAN) fields for all the addresses they have (two DNS names and IPs). I won't go to the details why this is required, but

[Freeipa-users] How to remove bad cert renewal from certmonger?

2016-04-22 Thread Tikkanen, Tuomo (Nokia - FI/Espoo)
Hello all, I tried to renew the server HTTP certificates for two freeipa servers so that certs would have Subject Alternative Name (SAN) fields for all the addresses they have (two DNS names and IPs). I won't go to the details why this is required, but I started with ipa2 (slave) and