[Freeipa-users] Re: Issues after adding Let's encrypt certificate

2017-08-22 Thread Florence Blanc-Renaud via FreeIPA-users
On 08/18/2017 05:46 PM, Sarhan Aissi via FreeIPA-users wrote: Hi, I got another error when trying the command again: trying https://ipa.example.net/ipa/json Forwarding 'ca_is_enabled' to json server 'https://ipa.example.net/ipa/json' cert validation failed for "CN=ipa.example.net" ((SEC_ERROR_U

[Freeipa-users] Re: Issues after adding Let's encrypt certificate

2017-08-18 Thread Sarhan Aissi via FreeIPA-users
Hi, I got another error when trying the command again: trying https://ipa.example.net/ipa/json Forwarding 'ca_is_enabled' to json server 'https://ipa.example.net/ipa/json' cert validation failed for "CN=ipa.example.net" ((SEC_ERROR_UNKNOWN_ISSUER) Peer's Certificate issuer is not recognized.) Fo

[Freeipa-users] Re: Issues after adding Let's encrypt certificate

2017-08-18 Thread Florence Blanc-Renaud via FreeIPA-users
On 08/18/2017 09:53 AM, Sarhan via FreeIPA-users wrote: Hello, Enrolling new users is failing because of the certificate issue (curl is throwing an "untrusted certificate" error) ipa-certupdate is throwing an error message too "Major (851968): Unspecified GSS failure. Minor code may provide mo

[Freeipa-users] Re: Issues after adding Let's encrypt certificate

2017-08-18 Thread Sarhan via FreeIPA-users
Hello, Enrolling new users is failing because of the certificate issue (curl is throwing an "untrusted certificate" error) ipa-certupdate is throwing an error message too "Major (851968): Unspecified GSS failure. Minor code may provide more information, Minor (11): Resource temporarily unavailable

[Freeipa-users] Re: Issues after adding Let's encrypt certificate

2017-08-17 Thread Rob Crittenden via FreeIPA-users
Sarhan Aissi via FreeIPA-users wrote: > Hello, > > I am using FreeIPA 4.3.1 with Ubuntu Server 16.04 and i tried to add my > Let's encrypt certificate using the "freeipa-letsencrypt" script (I replaced > Fedora/RHEL commands with ubuntu equivalents): > https://github.com/freeipa/freeipa-letsencry