Hi,

it depends which cert you'reĀ referring to:
- the server certificate used by the httpd server is located in /var/lib/ipa/certs/httpd.crt (when mod_ssl is used, otherwise it's /etc/httpd/alias)
- the server certificate used by the LDAP server is in /etc/dirsrv/slapd-YOURDOMAINNAME
- the KDC pkinit certificate is in /var/kerberos/krb5kdc/kdc.crt
- the certificates used by the PKI server are in /etc/pki/pki-tomcat/alias
- the RA cert (used to authenticate to the PKI server) is in /var/lib/ipa/ra-agent.pem

The CA cert can be found in /etc/ipa/ca.crt.

HTH,
flo

On Thu, Mar 24, 2022 at 4:45 PM GAURAV Pande via FreeIPA-users <freeipa-users@lists.fedorahosted.org> wrote:
Hi Guys ,

Could anyone let me know regardless of the github repo where can i find default certs (location) which FreeIPA uses ?
_______________________________________________
FreeIPA-users mailing list -- freeipa-users@lists.fedorahosted.org
To unsubscribe send an email to freeipa-users-leave@lists.fedorahosted.org
Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives: https://lists.fedorahosted.org/archives/list/freeipa-users@lists.fedorahosted.org
Do not reply to spam on the list, report it: https://pagure.io/fedora-infrastructure