[Freeipa-users] Re: 'transportCert cert-pki-kra' mix up

Okay, so I found this: To export cert+key from a NSSDB to a p12file: pk12util -d /etc/pki/pki-tomcat/alias -n 'auditSigningCert cert-pki-ca' -o file.p12 To import cert.key from a p12 file to a NSSDB: pk12util -d /etc/pki/pki-tomcat/alias -i file.p12

From Flo's post at: https://lists.fedorahosted.org/archives/list/freeipa-users@lists.fedorahoste...

That import line needs a -n 'certNameHere givenName' added to it. Otherwise, after massaging names and dirs, it seems to have worked for that portion. Now to just get the final three CS.cfg entries straightened out. That may just be a systemctl restart certmonger issue.