Per Qvindesland via FreeIPA-users wrote:
Hi
I would like to use Freeipa to sign SSL's for https use (if possible)
but I am wondering where is the CA certs located so I can distribute it
via a package rpm/deb?
The chain is in /etc/ipa/ca.crt on every IPA system, client or server.
rob