On 12/17/18 3:21 PM, Peter Tselios via FreeIPA-users wrote:
Hello everyone,
I have 2 FreeIPA servers in AWS and a LB in front of them to serve the UI and the LDAP
(just the gui and just the LDAP. For Kerberos, we use DNS discovery).
My problem is that I cannot use TLS with LDAP connections because the CA does not have
the LB's name in SAN.
Is there any way to **add** in the CA certificate the additional hostname?
Hi,
please have a look at the following email thread [1] which explains how
to add an additional SAN in the LDAP server certificate.
HTH,
flo
[1]
https://lists.fedorahosted.org/archives/list/freeipa-users@lists.fedoraho...
_______________________________________________
FreeIPA-users mailing list -- freeipa-users(a)lists.fedorahosted.org
To unsubscribe send an email to freeipa-users-leave(a)lists.fedorahosted.org
Fedora Code of Conduct:
https://getfedora.org/code-of-conduct.html
List Guidelines:
https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives:
https://lists.fedorahosted.org/archives/list/freeipa-users@lists.fedoraho...