Re: [Freeipa-users] Export SSL Cert

2013-09-20 Thread Jan Cholasta 

On 20.9.2013 10:14, Andrew Lau wrote:

Hi,

On my ever quest to finally get freeipa working behind a reverse proxy,
the final thing was is it possible to export the private key and cert of
the freeipa http cert? I would like to put the SSL cert on the reverse
proxy but it seems I'm not having any luck getting the private key out
from the certdb.

Thanks.



Hi,

you can use pk12util to export it to PKCS#12 file, which contains both 
the certificate and the private key:


# pk12util -o file.p12 -n Server-Cert -d /etc/httpd/alias -k 
/etc/httpd/alias/pwdfile.txt


Honza

--
Jan Cholasta

___
Freeipa-users mailing list
Freeipa-users@redhat.com
https://www.redhat.com/mailman/listinfo/freeipa-users

Re: [Freeipa-users] Export SSL Cert

2013-09-20 Thread Andrew Lau 
On Fri, Sep 20, 2013 at 8:48 PM, Jan Cholasta jchol...@redhat.com wrote:

 On 20.9.2013 10:14, Andrew Lau wrote:

 Hi,

 On my ever quest to finally get freeipa working behind a reverse proxy,
 the final thing was is it possible to export the private key and cert of
 the freeipa http cert? I would like to put the SSL cert on the reverse
 proxy but it seems I'm not having any luck getting the private key out
 from the certdb.

 Thanks.


 Hi,

 you can use pk12util to export it to PKCS#12 file, which contains both the
 certificate and the private key:

 # pk12util -o file.p12 -n Server-Cert -d /etc/httpd/alias -k
 /etc/httpd/alias/pwdfile.txt

 Honza

 --
 Jan Cholasta


Thanks!
___
Freeipa-users mailing list
Freeipa-users@redhat.com
https://www.redhat.com/mailman/listinfo/freeipa-users