iulian roman via FreeIPA-users wrote:
I have added the full chain in /var/lib/ipa/certs but I do not know
if that is the correct way.
Putting the chain in a random place is not going to work.
Try setting SSLCertificateChainFile to /etc/ipa/ca.crt in your Apache
config and restarting it. This directive is deprecated but it may still
The alternative would be to combine the chain with your server
certificate file. This will break when renewal time comes.