Hello everyone,

I am planning to deploy replica of freeipa to AWS, and I have following idea:

I cannot resolve one part, when using different hostnames, I might run into TLS, STARTTLS issue, since ipa apache, ldap, kerberos kdc certificates are issued automatically only to one hostname.

I would like to ask if it is possible to replace ipa apache, ldap, kerberos kdc certificates with SAN certificates that supports multiple hostnames?

Thanks,
-- 
Anvar Kuchkartaev
anvar@aegissec.net