Hello,
after some tests with Letsencrypt on my test env DEVDOMAN.COM I have something like this: ipa-replica-install --mkhomedir --setup-ca --setup-dns --auto-forwarders -p password
Successfully retrieved CA cert Subject: CN=Certificate Authority,O=DEVDOMAIN.COM Issuer: CN=Certificate Authority,O=DEVDOMAIN.COM Valid From: 2018-09-27 12:48:51 Valid Until: 2038-09-27 12:48:51
Subject: CN=DST Root CA X3,O=Digital Signature Trust Co. Issuer: CN=DST Root CA X3,O=Digital Signature Trust Co. Valid From: 2000-09-30 21:12:19 Valid Until: 2021-09-30 14:01:15
Subject: CN=Let's Encrypt Authority X3,O=Let's Encrypt,C=US Issuer: CN=DST Root CA X3,O=Digital Signature Trust Co. Valid From: 2016-03-17 16:40:46 Valid Until: 2021-03-17 16:40:46
(2) and (3) should be deleted.
On Fri, Oct 12, 2018 at 9:49 PM Rob Crittenden rcritten@redhat.com wrote:
Andrey Bondarenko via FreeIPA-users wrote:
Hello,
If anyone can point me in the right direction how to remove CA's certs I don't need from the freeipa safely?
Remove from where? How were they added?
rob