Tezarin via FreeIPA-users wrote:
> It's installed on an EC2 instance which is only accessible through
> tunneling and proxy:
> So I added an entry in my ~/.ssh/config file like this:
>
> Host ipaserver
> HostName [EC2 IP]
> ProxyCommand ssh proxy-server -W %h:%p
> IdentityFile ~/.ssh/id_rsa
> User testuser
> LocalForward 8443 127.0.0.1:8443
>
> The GUI comes up but it doesn't show much, only:
You want port 443. 8443 is the CA.
rob
>
> Certificate System <
http://pki.fedoraproject.org/>
> Certificate System <
https://127.0.0.1:8443/>
>
> -
>
> The Certificate System is an enterprise-class open source Certificate
> Authority (CA). It is a full-featured system, and has been hardened by
> real-world deployments. It supports all aspects of certificate lifecycle
> management, including key archival, OCSP and smartcard management, and
> much more.
>
> *Enter <
https://127.0.0.1:8443/pki/ui/>*
>
>
>
> Thanks
> On Thursday, February 8, 2018, 3:02:04 PM EST, Rob Crittenden via
> FreeIPA-users <
freeipa-users@lists.fedorahosted.org> wrote:
>
>
> None via FreeIPA-users wrote:
>> Hi all,
>>
>
> What URL are you using?
>
> rob
>
>>
>> I have installed FreeIPA server on CentOS 6.9 but the GUI is not
> coming up completely. It only shows the following certificate system
> messages. Not sure why and here are the files in the /etc/httpd/alias:
>>
>> lrwxrwxrwx 1 root root 24 Jan 30 14:19 libnssckbi.so ->
> /usr/lib64/libnssckbi.so
>> -rw-r----- 1 root apache 16384 Jan 30 14:19 secmod.db.orig
>> -rw-r----- 1 root apache 24576 Jan 30 14:19 key3.db.orig
>> -rw-r----- 1 root apache 65536 Jan 30 14:19 cert8.db.orig
>> -rw------- 1 root root 5274 Jan 30 14:19 install.log
>> -rw------- 1 root root 32 Feb 1 19:32 ipasession.key
>> -rw------- 1 root apache 41 Feb 7 16:47 pwdfile.txt.ipasave
>> -rw-r----- 1 root apache 16384 Feb 7 16:47 secmod.db.ipasave
>> -rw-r----- 1 root apache 16384 Feb 7 17:09 key3.db.ipasave
>> -rw-r----- 1 root apache 65536 Feb 7 17:09 cert8.db.ipasave
>> -rw------- 1 root apache 41 Feb 7 17:49 pwdfile.txt
>> -rw-r----- 1 root apache 16384 Feb 7 17:49 secmod.db
>> -rw-r----- 1 root apache 16384 Feb 8 12:00 key3.db
>> -rw-r----- 1 root apache 65536 Feb 8 12:00 cert8.db
>>
>> And here are the certs in my /root directory:
>>
>> -rw-------. 1 root root 1006 Nov 16 2015 anaconda-ks.cfg
>> -rw-r--r-- 1 pkiuser pkiuser 10328 Feb 7 17:48 cacert.p12
>> -rw------- 1 root root 2604 Feb 7 17:48 ca-agent.p12
>>
>> And here is what the GUI shows:
>>
>>
>> Certificate System
>> Certificate System
>> -
>> The Certificate System is an enterprise-class open source Certificate
> Authority (CA). It is a full-featured system, and has been hardened by
> real-world deployments. It supports all aspects of certificate lifecycle
> management, including key archival, OCSP and smartcard management, and
> much more.
>>
>> Enter
>>
>> Any info would be much appreciated.
>>
>> Thank you
>> _______________________________________________
>> FreeIPA-users mailing list --
freeipa-users@lists.fedorahosted.org> <mailto:
freeipa-users@lists.fedorahosted.org>
>> To unsubscribe send an email to
>
freeipa-users-leave@lists.fedorahosted.org> <mailto:
freeipa-users-leave@lists.fedorahosted.org>
>
>>
> _______________________________________________
> FreeIPA-users mailing list --
freeipa-users@lists.fedorahosted.org> <mailto:
freeipa-users@lists.fedorahosted.org>
> To unsubscribe send an email to
>
freeipa-users-leave@lists.fedorahosted.org