[Freeipa-users] custom tls certtificate for web UI
Hello everybody,
I tried to change the WEB UI certificate with a custom certificate signed by our internal
CA. The custom certificate was provided as a bundle (certificate + intermediates). The
root ca which signs the intermediate was added in the truststore with ipa-cacert-manage.
Everything was successful but when I accessed the Web UI I noticed that IPA provides only
the certificate, not the full chain, which makes the certificate not trusted by the
browsers (they are configured to trust only our internal root ca).
Is there any method to configure IPA/Idm to provide the full certificate chain
(certificate + intermediate) to the http clients or is there anything I configured wrong ?