freeipa

#5617 [RFE] Allow different CAs for DS and HTTP certs in CA-less
Opened by jcholast. Modified

Open
Close Issue

The DS and HTTP certs specified in CA-less server install with --dirsrv-cert-file and --http-cert-file must currently be issued by the same CA. This is an artificial limitation, as FreeIPA supports multiple CA certificates since 4.1.

Remove the limitation and allow different CAs for DS and HTTP certs.

Metadata Update from @jcholast:
- Issue assigned to someone
- Issue set to the milestone: FreeIPA 4.5 backlog
Metadata
None
None
None
Normal
enhancement
IPA
usability
todo
0
Static archive. pagure.io was sunset in 2026; this is a read-only snapshot.
Red Hat Logo

Fedora is sponsored by Red Hat. Learn more about the relationship between Red Hat and Fedora »

© Red Hat, Inc. and others.