Re: [Freeipa-users] DNS SubjectAltName missing in provisioned certificates

2016-05-26 Thread Fraser Tweedale
On Thu, May 26, 2016 at 12:08:11PM +0200, Youenn PIOLET wrote: > Hi there, > > For your information : > I just realised today that the certificate signing using web interface was > still broken. > > I've got 3 caIPAserviceCert.cfg files on my system : > > Locate caIPAserviceCert.cfg output >

Re: [Freeipa-users] DNS SubjectAltName missing in provisioned certificates

2016-05-26 Thread Youenn PIOLET
Hi there, For your information : I just realised today that the certificate signing using web interface was still broken. I've got 3 caIPAserviceCert.cfg files on my system : Locate caIPAserviceCert.cfg output 1. New profile : /usr/share/ipa/profiles/caIPAserviceCert.cfg 2. Old broken profile

Re: [Freeipa-users] DNS SubjectAltName missing in provisioned certificates

2016-05-10 Thread Fraser Tweedale
On Tue, May 10, 2016 at 02:33:43PM +0200, Youenn PIOLET wrote: > Hi Fraser, thanks a lot for your quick reply! > > Could you confirm whether you are on RHEL / CentOS 7.2, and if so, > > whether it was installed at 7.2 or an upgrade from 7.1 or an earlier > > version? > > > > This is a replica

Re: [Freeipa-users] DNS SubjectAltName missing in provisioned certificates

2016-05-10 Thread Youenn PIOLET
Hi Fraser, thanks a lot for your quick reply! Could you confirm whether you are on RHEL / CentOS 7.2, and if so, > whether it was installed at 7.2 or an upgrade from 7.1 or an earlier > version? > This is a replica that was previously installed in CentOS 7.1. I don't exactly remember but I think

Re: [Freeipa-users] DNS SubjectAltName missing in provisioned certificates

2016-05-10 Thread Fraser Tweedale
On Tue, May 10, 2016 at 11:51:26AM +0200, Youenn PIOLET wrote: > Hi Fraser, Martin, > > I've got exactly the same problem with no DNS AltName and OU=pki-ipa,O=IPA > in the subject. > Hi Youenn, I'm currently investigating this issue; the state of the system is clear but I'm still trying to work

Re: [Freeipa-users] DNS SubjectAltName missing in provisioned certificates

2016-05-10 Thread Youenn PIOLET
Hi Fraser, Martin, I've got exactly the same problem with no DNS AltName and OU=pki-ipa,O=IPA in the subject. ### certprofile $ ipa certprofile-show --out caIPAserviceCert.cfg caIPAserviceCert --- Profile configuration stored in file

Re: [Freeipa-users] DNS SubjectAltName missing in provisioned certificates - private files

2016-03-31 Thread martin
On 2016-03-31 11:56, Fraser Tweedale wrote: On Thu, Mar 31, 2016 at 09:49:20AM +0200, Martin Štefany wrote: Hello Fraser, here are the files for real, thank you for help. Martin Thanks Martin, So what appears to have happened is somehow the default profile `caIPAserviceCert`, which is

Re: [Freeipa-users] DNS SubjectAltName missing in provisioned certificates - private files

2016-03-31 Thread Fraser Tweedale
On Thu, Mar 31, 2016 at 09:49:20AM +0200, Martin Štefany wrote: > Hello Fraser, > > here are the files for real, thank you for help. > > Martin > Thanks Martin, So what appears to have happened is somehow the default profile `caIPAserviceCert`, which is shipped with Dogtag, was imported into

Re: [Freeipa-users] DNS SubjectAltName missing in provisioned certificates

2016-03-31 Thread Fraser Tweedale
On Sun, Mar 27, 2016 at 09:14:47PM +0200, Martin Štefany wrote: > Hello, > > I seem to be having some issues with IPA CA feature not generating > certificates with DNS SubjectAltNames. > > I'm sure this worked very well under CentOS 7.1 / IPA 4.0, but now under > CentOS 7.2 / IPA 4.2 something's

[Freeipa-users] DNS SubjectAltName missing in provisioned certificates

2016-03-27 Thread Martin Štefany
Hello, I seem to be having some issues with IPA CA feature not generating certificates with DNS SubjectAltNames. I'm sure this worked very well under CentOS 7.1 / IPA 4.0, but now under CentOS 7.2 / IPA 4.2 something's different. Here are the original steps which worked fine for my first use