Re: [Freeipa-users] Status on Sub-CAs for FreeIPA v4.2

2015-06-01 Thread Christopher Young
I, too, am very much in need of user certificates. If it is possible to setup an additional FreeIPA server to test this out, then I could help out in testing the feature. I obviously don't want to impact my production environment too much, but it is rather stagnant, so if I can backup the LDAP db

Re: [Freeipa-users] Status on Sub-CAs for FreeIPA v4.2

2015-06-01 Thread Fraser Tweedale
On Mon, Jun 01, 2015 at 05:19:20PM +0300, Alexander Bokovoy wrote: > On Mon, 01 Jun 2015, Thibaut Pouzet wrote: > >Hi, > > > >I am currently trying to use FreeIPA to issue client certificates for > >some internal application we have. (More precisely, SSL double > >authentication between two of my a

Re: [Freeipa-users] Status on Sub-CAs for FreeIPA v4.2

2015-06-01 Thread Alexander Bokovoy
On Mon, 01 Jun 2015, Thibaut Pouzet wrote: Hi, I am currently trying to use FreeIPA to issue client certificates for some internal application we have. (More precisely, SSL double authentication between two of my applications, client side would be java, server-side would be apache httpd.) I cons

[Freeipa-users] Status on Sub-CAs for FreeIPA v4.2

2015-06-01 Thread Thibaut Pouzet
Hi, I am currently trying to use FreeIPA to issue client certificates for some internal application we have. (More precisely, SSL double authentication between two of my applications, client side would be java, server-side would be apache httpd.) I considered two options : 1. Issue client certifi