Re: [Freeipa-users] Globalsign External CA Certificate Import Failure

2014-01-06 Thread Dmitri Pal
On 01/06/2014 12:25 PM, James Scollard wrote: > I have it now. The --dirsrv_pkcs12 option seems to like pkcs7 > formatted certificates, but the person who issued it did not set a > password, so FreeIPA will not let me install it to know if it works > for sure. I am having the certificate reissued

Re: [Freeipa-users] Globalsign External CA Certificate Import Failure

2014-01-06 Thread James Scollard
I have it now. The --dirsrv_pkcs12 option seems to like pkcs7 formatted certificates, but the person who issued it did not set a password, so FreeIPA will not let me install it to know if it works for sure. I am having the certificate reissued again with a password in pkcs12 format and all sh

Re: [Freeipa-users] Globalsign External CA Certificate Import Failure

2014-01-06 Thread Rob Crittenden
James Scollard wrote: That makes absolute perfect sense. Thanks for the clarification. Unfortunately I have an new issue now. Globalsign has issued me a pkcs7 certificate. FreeIPA does not recognize the format: [root@ldapm6x00 ~]# ipa-server-install --dirsrv_pkcs7=/root/ldapm6x00.sun.weather.

Re: [Freeipa-users] Globalsign External CA Certificate Import Failure

2014-01-06 Thread James Scollard
That makes absolute perfect sense. Thanks for the clarification. Unfortunately I have an new issue now. Globalsign has issued me a pkcs7 certificate. FreeIPA does not recognize the format: [root@ldapm6x00 ~]# ipa-server-install --dirsrv_pkcs7=/root/ldapm6x00.sun.weather.com.pkcs7 --http_pk

Re: [Freeipa-users] Globalsign External CA Certificate Import Failure

2014-01-06 Thread Jan Cholasta
Hi, On 3.1.2014 22:13, James Scollard wrote: Thanks for the reply, Version: Package freeipa-server-3.3.3-2.fc19.x86_64 already installed and latest version... I'm not sure I understand the answer. I created the CSR and they signed it using their automation, and returned the new ones to me fo

Re: [Freeipa-users] Globalsign External CA Certificate Import Failure

2014-01-03 Thread Dmitri Pal
On 01/03/2014 04:13 PM, James Scollard wrote: > Thanks for the reply, > > Version: > > Package freeipa-server-3.3.3-2.fc19.x86_64 already installed and > latest version... > > I'm not sure I understand the answer. > > I created the CSR and they signed it using their automation, and > returned the n

Re: [Freeipa-users] Globalsign External CA Certificate Import Failure

2014-01-03 Thread James Scollard
Thanks for the reply, Version: Package freeipa-server-3.3.3-2.fc19.x86_64 already installed and latest version... I'm not sure I understand the answer. I created the CSR and they signed it using their automation, and returned the new ones to me for installation, which failed. SUN.WEATHER.C

Re: [Freeipa-users] Globalsign External CA Certificate Import Failure

2014-01-03 Thread Rob Crittenden
James Scollard wrote: When attempting to run the second part of the installation with an external CA (Globalsign) using my signed certificate and CA certificate chain I get the following; [root@ldapm6x00 ~]# ipa-server-install --external_cert_file=/root/ldapm6x00.sun.weather.com.crt --external_c