[Freeipa-users] Cannot import certificate signed by MS-CA - subject mismatch
Hello,
I want to use the company's MS-CA as the single CA and thus I had to change the
FreeIPA certificate.
The process was smooth until the point of importing the certificate in the FreeIPA.
I got this:
===============================================
ipa-cacert-manage renew --external-cert-file=./ms-crt.pem
Importing the renewed CA certificate, please wait
Subject name encoding mismatch (visit http://www.freeipa.org/page/Troubleshooting for
troubleshooting guide)
The ipa-cacert-manage command failed.
===============================================
The documentation is very clear: FreeIPA issues CSRs in UTF8.
The MS-CA uses PRINTABLESTRING in the subject and the issuer.
The MS admins/engineer do not want to change this to UTF 8, so, I am a little bit stuck
here.
Is there anyway to configure FreeIPA to issue the CSR in PRINTABLESTRING and import it?
Or the only acceptable by FreeIPA format is UTF8?