ipa started using mod_ssl in the version 4.7+.
Your version 4.6.8 still relies on mod_nss with the http cert stored in /etc/httpd/alias.
Hope this clarifies,

On Fri, May 14, 2021 at 4:36 PM Steve Reed via FreeIPA-users <freeipa-users@lists.fedorahosted.org> wrote:
> Steve Reed via FreeIPA-users wrote:
> It depends on the version of IPA. Either mod_nss via
> /etc/httpd/conf.d/nss.conf or mod_ssl via /etc/httpd/conf.d/ssl.conf.
> rob
We're running ver 4.6.8. 

That puts us in with mod_nss?
FreeIPA-users mailing list -- freeipa-users@lists.fedorahosted.org
To unsubscribe send an email to freeipa-users-leave@lists.fedorahosted.org
Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives: https://lists.fedorahosted.org/archives/list/freeipa-users@lists.fedorahosted.org
Do not reply to spam on the list, report it: https://pagure.io/fedora-infrastructure