On 01/30/2018 09:53 AM, Rob Crittenden wrote:
> Ian Pilcher via FreeIPA-users wrote:
>> Jumping in to this thread ... I know how to generate a keypair and CSR,
>> but I've never been able to figure out how to get FreeIPA to generate a
>> certificate from a CSR.
>> If there's documentation somewhere that I've missed in my many searches,
>> I'd appreciate a pointer.
(Unfortunately, I had misinterpreted the earlier comments in this thread
to indicate that it was now possible to simply issue a certificate,
based on an arbitrary CSR. It seems that still isn't the case.)
Not sure what you mean by arbitrary. You can definitely generate a CSR
using your favorite tool and pass that to ipa cert-request.