Re: [Freeipa-users] Changing the SSL certificate for the WebUI

2015-06-22 Thread Rob Crittenden
Prashant Bapat wrote: Hi Rob, Thanks for the reply. The ipa-server-certinstalldid require that I have the cert and the CA cert in PEM file and the key in another PEM file. And the command went thru successfully. But afterwards the HTTP service stopped working. Only way I could get it to start

Re: [Freeipa-users] Changing the SSL certificate for the WebUI

2015-06-20 Thread Prashant Bapat
Hi Rob, Thanks for the reply. The ipa-server-certinstall did require that I have the cert and the CA cert in PEM file and the key in another PEM file. And the command went thru successfully. But afterwards the HTTP service stopped working. Only way I could get it to start again was to set NSSEnf

Re: [Freeipa-users] Changing the SSL certificate for the WebUI

2015-06-20 Thread Rob Crittenden
Prashant Bapat wrote: I tried the steps documented on a test VM. Looks like I ended up in the situation described here https://www.redhat.com/archives/freeipa-users/2012-January/msg00045.html. Please be careful when pointing back at old threads. This issue was about expired certs. I suspect yo

Re: [Freeipa-users] Changing the SSL certificate for the WebUI

2015-06-20 Thread Prashant Bapat
I tried the steps documented on a test VM. Looks like I ended up in the situation described here https://www.redhat.com/archives/freeipa-users/2012-January/msg00045.html. I have one more question. Is there a way to disable HTTPS completely on the WebUI. I can add HTTPS on a load balancer in front

Re: [Freeipa-users] Changing the SSL certificate for the WebUI

2015-06-18 Thread Rob Crittenden
Prashant Bapat wrote: Hi All, There is a way to change the certificate for the web UI. I went with a standard install with a self signed CA etc. Now I want to install a cert from a commercial CA. I don't mind using the IPA CA certs for the 389 DS, just want to change the cert for the UI. Any p