On 12/31/19 1:47 AM, luckydog xf via FreeIPA-users wrote:
I reset system clock to Oct 27, while this certificate would expire
in Nov 11.
It's still valid and should be renewed by certmonger.
So there is no reason it say the serial number was revoked.
Hi,
can you check if the cert is revoked with:
$ certutil -L -d /etc/pki/pki-tomcat/alias/ -n 'Server-Cert cert-pki-ca'
| grep -i Serial
(note the Serial number)
$ ipa cert-show <serial found above>
Does the last command display "Revoked: True" with a Revocation reason
or "Revoked: False"?
flo
_______________________________________________
FreeIPA-users mailing list -- freeipa-users(a)lists.fedorahosted.org
To unsubscribe send an email to freeipa-users-leave(a)lists.fedorahosted.org
Fedora Code of Conduct:
https://docs.fedoraproject.org/en-US/project/code-of-conduct/
List Guidelines:
https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives:
https://lists.fedorahosted.org/archives/list/freeipa-users@lists.fedoraho...