[Freeipa-users] FreeIPA install

[Martin Kosek]

On 10/02/2015 04:15 AM, Andrew Meyer wrote:
> I just created a new FreeIPA setup at my home and i'm getting the following:
>
> [Thu Oct 01 14:02:10.082255 2015] [core:notice] [pid 18792] AH00094: Command
> line: '/usr/sbin/httpd -D FOREGROUND'
> [Thu Oct 01 14:02:14.742680 2015] [:error] [pid 18795] ipa: INFO: *** PROCESS
> START ***
> [Thu Oct 01 14:02:14.745250 2015] [:error] [pid 18794] ipa: INFO: *** PROCESS
> START ***
> [Thu Oct 01 14:02:42.984969 2015] [:error] [pid 18798] SSL Library Error:
> -12271 SSL client cannot verify your certificate
> [Thu Oct 01 15:21:56.837422 2015] [:error] [pid 18801] SSL Library Error:
> -12271 SSL client cannot verify your certificate
>
> I tried running the ipa-manage-cacert to generate a new one and install it.
> But no go.
>
> Running CentOS 7.1 with latest updates.  Is there a bug in generating the SSL cert?
>
>
>

This rather seems that your client browser does not trust FreeIPA CA certificate.

Related thread:
https://www.redhat.com/archives/freeipa-devel/2009-June/msg00188.html

More related info:
https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/7/html/Linux_Domain_Identity_Authentication_and_Policy_Guide/using-the-ui.html#config-browser

Martin