Installing 3rd party PEM format Certificate on FreeIPA Server

[GAURAV Pande]

Hi Guys ,

OS : Centos 7.9
FreeIPA Server version: 4.6.8

I was referencing to this link : https://www.freeipa.org/page/Using_3rd_part_certificates_for_HTTP/LDAP for installing 3rd party Certificate for HTTP and LDAP services of FreeIPA to make it secure . I see in this kb article .crt format is mentioned so does this mean .pem format can't be installed  on freeIPA server 4.6.8 version ?

[Florence Blanc-Renaud]

Hi,

if you refer to the man pages you will see the supported formats:
# man ipa-cacert-manage
...
              The supported formats for the certificate files are
*DER, PEM and              PKCS#7* format.
...

# man ipa-server-certinstall
...
       Replace the current Directory server SSL certificate, Apache server
SSL
       certificate and/or Kerberos KDC certificate with the certificate in
the
       specified  files.  The  files  are accepted in

*PEM and DER certificate,       PKCS#7 certificate chain, PKCS#8 and raw
private key and  PKCS#12  for‐       mats*.
...

HTH,
flo

On Sun, Apr 10, 2022 at 4:32 PM GAURAV Pande via FreeIPA-users <
[e-mail]> wrote:
> Hi Guys ,
>
> OS : Centos 7.9
> FreeIPA Server version: 4.6.8
>
> I was referencing to this link :
> https://www.freeipa.org/page/Using_3rd_part_certificates_for_HTTP/LDAP
> for installing 3rd party Certificate for HTTP and LDAP services of FreeIPA
> to make it secure . I see in this kb article .crt format is mentioned so
> does this mean .pem format can't be installed  on freeIPA server 4.6.8
> version ?
> _______________________________________________
> FreeIPA-users mailing list -- [e-mail]
> To unsubscribe send an email to [e-mail]
> Fedora Code of Conduct:
> https://docs.fedoraproject.org/en-US/project/code-of-conduct/
> List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
> List Archives:
> https://lists.fedorahosted.org/archives/list/[e-mail]...
> Do not reply to spam on the list, report it:
> https://pagure.io/fedora-infrastructure