Ugh,
there is even a document for my *precise* issue. I feel special now.
Anyway, your commands helped and everything is workin a-o-kay.
Thank you folks soo much!
-Chris.
On 07/04/2020 14:15, Florence Blanc-Renaud wrote:
>
You can use
$ ipa config-mod --ca-renewal-master=xxx
for the CA renewal master and
$ ipa-crlgen-manage enable
for the CRL generation master. The second command needs to be run on the
host that you want to use as CRL generation master.
The doc is available at
https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/8/...
You need to pick a server that hosts the CA role, ie was installed with
--setup-ca.
HTH,
flo
--
with kind regards,
mit freundlichen Gruessen,
Christian Reiss