Chuck Musser via FreeIPA-users wrote:
We operate our own certificate authority for our internal infrastructure and I'd like
to replace the certificate that comes with the FreeIPA installation with one we've
generated for this host. This is FreeIPA, version: 4.6.6, running on CentOS Linux release
I looked around in the docs and couldn't see anything for this particular task. I did
add a certificate to the FreeIPA host (under Identity->Host), but that doesn't seem
to be the correct (or only) thing to do. In the certificates area, it appears, but has
incomplete information and isn't marked VALID. What is the procedure for doing this?
It isn't something you can do in the UI. See ipa-server-certinstall.