[Freeipa-users] WebGui Cert back to selfsigned

Hi Guys,

Is there a proven way to set the WebGui cert back to a self signed one ? I have installed an expired 3rd party certificate and want to move back to a selfsigned cert and later on to an letsEncrypt one.

Setting back the time before the expiration of the certificate on the server would be a start and also disable all nameservers in /etc/resolv.conf so the time is not updated on an ipa start/restart.

But what then ? Is there no "reset command/way available" ?

Thanks!

Matt