Per Qvindesland via FreeIPA-users wrote:
I installed a custom signed certificate from quovadis, the install on the ipa server
wen’t fine but when I try to add a client (centos 6) it gives error:
LDAP Error: Connect error: TLS error -8172:Peer's certificate issuer has been marked
as not trusted by the user.
The standard google searching doesn’t give any answers from what I can see.
Is there any workaround for this?
Use the ipa-cacert-manage install command to add the 3rd party CA to the
CA chain that clients will download from IPA.