Re: [Freeipa-users] install with external CA failed

2014-03-11 Thread Martin Kosek
On 03/10/2014 09:07 PM, Simo Sorce wrote: On Mon, 2014-03-10 at 15:45 -0400, Robert Story wrote: On Mon, 10 Mar 2014 15:44:01 +0100 Jan wrote: JC On 6.3.2014 05:42, Robert Story wrote: JC I'm trying to install on CentOS 6.5 (ipa-server-3.0.0-37.el6.x86_64) JC and an external CA. I'm getting

Re: [Freeipa-users] install with external CA failed

2014-03-11 Thread Robert Story
On Mon, 10 Mar 2014 16:07:54 -0400 Simo wrote: SS Unfortunately I've already scrapped that install and just went with SS the internal self-signed CA. So far, the only annoyance is that the SS webserver also presents a self-signed cert for the UI. Is it safe to SS replace just the web cert

Re: [Freeipa-users] install with external CA failed

2014-03-11 Thread Dmitri Pal
On 03/11/2014 12:44 PM, Robert Story wrote: On Mon, 10 Mar 2014 16:07:54 -0400 Simo wrote: SSUnfortunately I've already scrapped that install and just went with SSthe internal self-signed CA. So far, the only annoyance is that the SSwebserver also presents a self-signed cert for the

Re: [Freeipa-users] install with external CA failed

2014-03-10 Thread Jan Cholasta
Hi, On 6.3.2014 05:42, Robert Story wrote: Hi, I'm trying to install on CentOS 6.5 (ipa-server-3.0.0-37.el6.x86_64) and an external CA. I'm getting this error: Command '/usr/bin/sslget -v -n ipa-ca-agent -p -d /tmp/tmp-jNYt3P -r /ca/agent/ca/profileReview?requestId=6 auth.lan:9443'

Re: [Freeipa-users] install with external CA failed

2014-03-10 Thread Robert Story
On Mon, 10 Mar 2014 15:44:01 +0100 Jan wrote: JC On 6.3.2014 05:42, Robert Story wrote: JC I'm trying to install on CentOS 6.5 (ipa-server-3.0.0-37.el6.x86_64) JC and an external CA. I'm getting this error: JC [snip] JC Can you please run certutil -V on the issuer certificate JC (CN=Certificate

Re: [Freeipa-users] install with external CA failed

2014-03-10 Thread Simo Sorce
On Mon, 2014-03-10 at 15:45 -0400, Robert Story wrote: On Mon, 10 Mar 2014 15:44:01 +0100 Jan wrote: JC On 6.3.2014 05:42, Robert Story wrote: JC I'm trying to install on CentOS 6.5 (ipa-server-3.0.0-37.el6.x86_64) JC and an external CA. I'm getting this error: JC [snip] JC Can you please

[Freeipa-users] install with external CA failed

2014-03-05 Thread Robert Story
Hi, I'm trying to install on CentOS 6.5 (ipa-server-3.0.0-37.el6.x86_64) and an external CA. I'm getting this error: Command '/usr/bin/sslget -v -n ipa-ca-agent -p -d /tmp/tmp-jNYt3P -r /ca/agent/ca/profileReview?requestId=6 auth.lan:9443' returned non-zero exit status 4 I found a