Naor Weissmann via FreeIPA-users wrote:
thank you. both seem legit.
#certutil -V -u V -n Server-Cert -d /etc/httpd/alias -e -f /etc/httpd/alias/pwdfile.txt
certutil: certificate is valid
#certutil -L -d /etc/httpd/alias -n Server-Cert
...
Name: Extended Key Usage
TLS Web Server Authentication Certificate
TLS Web Client Authentication Certificate
...
Then set LogLevel debug in nss.conf to see if you get more information
on issues.
Check ownership and permissions, look for AVCs.
rob