Re: [Freeipa-users] IPA v3 Certificate not renewed

2015-06-05 Thread Junhe Jian
? Thank you! _ Best regards Junhe Jian -Ursprüngliche Nachricht- Von: Rob Crittenden [mailto:rcrit...@redhat.com] Gesendet: Donnerstag, 4. Juni 2015 17:04 An: Junhe Jian; freeipa-users@redhat.com Betreff: Re: AW: [Freeipa-users] IPA v3 Certificate

Re: [Freeipa-users] IPA v3 Certificate not renewed

2015-06-04 Thread Rob Crittenden
Junhe Jian wrote: Hello everyone, I’m new here and have problem with IPA Server our single IPA Server all Certificate was expired. Autorenewal not worked, so I read the docu http://www.freeipa.org/page/IPA_2x_Certificate_Renewal and do manually my server is centos 6.4 [root@be-ipasrv ~]#

Re: [Freeipa-users] IPA v3 Certificate not renewed

2015-06-04 Thread Junhe Jian
_ Best regards Junhe Jian -Ursprüngliche Nachricht- Von: Rob Crittenden [mailto:rcrit...@redhat.com] Gesendet: Donnerstag, 4. Juni 2015 16:38 An: Junhe Jian; freeipa-users@redhat.com Betreff: Re: [Freeipa-users] IPA v3 Certificate not renewed Junhe Jian

Re: [Freeipa-users] IPA v3 Certificate not renewed

2015-06-04 Thread Junhe Jian
: Rob Crittenden [mailto:rcrit...@redhat.com] Gesendet: Donnerstag, 4. Juni 2015 17:04 An: Junhe Jian; freeipa-users@redhat.com Betreff: Re: AW: [Freeipa-users] IPA v3 Certificate not renewed Junhe Jian wrote: Hi Rob, i set the date in past 26 MAY 2015 and add NSSEnforceValidCerts off

Re: [Freeipa-users] IPA v3 Certificate not renewed

2015-06-04 Thread Rob Crittenden
Junhe Jian wrote: Hi Rob, i set the date in past 26 MAY 2015 and add NSSEnforceValidCerts off to nss.conf and resubmit the 3 ID [root@be-ipasrv httpd]# getcert resubmit -i 20130528090822 Resubmitting 20130528090822 to IPA. [root@be-ipasrv httpd]# getcert resubmit -i 20130528090849 Resubmitting