Re: [Freeipa-users] Heads-up: Removing self-sign CA

2013-03-28 Thread Christian Horn
On Thu, Mar 28, 2013 at 09:32:36AM +0100, Petr Viktorin wrote: > > To clarify: this is about removing the --selfsign option to > ipa-server-install, which installs a limited CA (for example, it > doesn't support CA replication or cert-find). > > The default Dogtag CA also uses a self-signed certi

Re: [Freeipa-users] Heads-up: Removing self-sign CA

2013-03-28 Thread Petr Viktorin
On 03/28/2013 09:10 AM, Christian Horn wrote: Hi, On Tue, Mar 26, 2013 at 05:02:34PM +0100, Petr Viktorin wrote: We will soon be introducing a way to install IPA with custom certificates without a CA at all. When that is merged, it will no longer be possible to install a self-sign server. I

Re: [Freeipa-users] Heads-up: Removing self-sign CA

2013-03-28 Thread Christian Horn
Hi, On Tue, Mar 26, 2013 at 05:02:34PM +0100, Petr Viktorin wrote: > > We will soon be introducing a way to install IPA with custom > certificates without a CA at all. When that is merged, it will no > longer be possible to install a self-sign server. I see that the change in functionality is in