[Freeipa-users] --subject option for ipa-server-install

Dmitri Pal dpal at redhat.com
Mon Apr 9 18:35:01 UTC 2012


On 04/09/2012 02:25 PM, Stephen Ingram wrote:
> In an attempt to make the CA certificate from IPA a little more
> noticeable for the users in our realm I've successfully used the
> --subject option during the ipa-server-install process. It seems
> however, that you cannot change the CN from the default "Certificate
> Authority". I've added O=, OU= and C=, but as some certificate
> managers in browsers/os's (i.e. Mac OS X) organize certificates by CN
> name, it would be nice to point to something representing the company
> name instead of the generic Certificate Authority. It even seems that
> in the older 2.0 release candidates, they used the default "REALM
> Certificate Authority" for the CN instead of just Certificate
> Authority. Can this be easily changed so that at least the realm could
> be slipped in front of Certificate Authority or customize the CN
> altogether?
>

Please open an RFE ticket.

> Steve
>
> _______________________________________________
> Freeipa-users mailing list
> Freeipa-users at redhat.com
> https://www.redhat.com/mailman/listinfo/freeipa-users


-- 
Thank you,
Dmitri Pal

Sr. Engineering Manager IPA project,
Red Hat Inc.


-------------------------------
Looking to carve out IT costs?
www.redhat.com/carveoutcosts/






More information about the Freeipa-users mailing list