I think you can do this if you upload your certificate and key to ACM in AWS, and then use the ACM ARN for your uploaded certificate as the certificate for the ALB. You do need to generate the CSR separately indeed.

John

On 25 Oct 2018, at 19:10, Peter Tselios via FreeIPA-users freeipa-users@lists.fedorahosted.org wrote:

Hello, I want to create an AWS Load Balancer that will use HTTPS end to end. I want to use my FreeIPA to generate the certificates for the instances and for the ALB. My questions:

1. Is it possible to issue a certificate from FreeIPA for the AWS ALB since the later will not be a FreeIPA client?

If so, how?

2. If I cannot issue a certificate from the FreeIPA, what alternatives do I have?

Generate a CSR from any linux box and just sign it? _______________________________________________ FreeIPA-users mailing list -- freeipa-users@lists.fedorahosted.org To unsubscribe send an email to freeipa-users-leave@lists.fedorahosted.org Fedora Code of Conduct: https://getfedora.org/code-of-conduct.html List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedorahosted.org/archives/list/freeipa-users@lists.fedorahoste...