To smooth the transition NIS to FreeIPA, we enabled migration mode and installed
commercial certificates on the IPA servers following the documented
"ipa-server-certinstall -http" command. Now that the migration is complete,
while not horrible, renewing the commercial certificates every year is a task that could
be very disruptive if not completed on time. My question is it possible to revert to a
self-signed web cert from the IPA CA so that Dogtag handles the renewals automatically?
Thanks!
Show replies by thread