Re: [Freeipa-users] Sign certificates with subjectAltName

2015-01-27 Thread Craig White
-Original Message- From: Alexander Bokovoy [mailto:aboko...@redhat.com] Sent: Tuesday, January 27, 2015 2:09 PM To: Craig White Cc: freeipa-users@redhat.com Subject: Re: [Freeipa-users] Sign certificates with subjectAltName On Tue, 27 Jan 2015, Craig White wrote: >$ rpm -q ipa-ser

Re: [Freeipa-users] Sign certificates with subjectAltName

2015-01-27 Thread Alexander Bokovoy
On Tue, 27 Jan 2015, Craig White wrote: $ rpm -q ipa-server ipa-server-3.0.0-42.el6.x86_64 I tend to revert to openssl as I have some familiarity with it. ipa service-add HTTP/p1nxut01.stt.local excellent except we wanted human friendly certificates/SSL So I created a one-off openssl.cnf file