2008-03-17 17:04:49 -05:00
. \" A man page for ipa-server-certinstall
. \" Copyright (C) 2008 Red Hat, Inc.
. \"
2010-12-09 06:59:11 -06:00
. \" This program is free software; you can redistribute it and/or modify
. \" it under the terms of the GNU General Public License as published by
. \" the Free Software Foundation, either version 3 of the License, or
. \" (at your option) any later version.
2008-03-17 17:04:49 -05:00
. \"
. \" This program is distributed in the hope that it will be useful, but
. \" WITHOUT ANY WARRANTY; without even the implied warranty of
. \" MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU
. \" General Public License for more details.
. \"
2010-12-09 06:59:11 -06:00
. \" You should have received a copy of the GNU General Public License
. \" along with this program. If not, see <http://www.gnu.org/licenses/>.
2008-03-17 17:04:49 -05:00
. \"
. \" Author: Rob Crittenden <rcritten@redhat.com>
. \"
2011-09-05 04:04:17 -05:00
.TH "ipa-server-certinstall" "1" "Mar 14 2008" "FreeIPA" "FreeIPA Manual Pages"
2008-03-17 17:04:49 -05:00
.SH "NAME"
ipa\- server\- certinstall \- Install new SSL server certificates
.SH "SYNOPSIS"
2014-09-24 09:41:47 -05:00
ipa\- server\- certinstall [\fI OPTION\fR ]... FILE...
2008-03-17 17:04:49 -05:00
.SH "DESCRIPTION"
2014-09-24 09:41:47 -05:00
Replace the current SSL Directory and/or Apache server certificate(s) with the certificate in the specified files. The files are accepted in PEM and DER certificate, PKCS#7 certificate chain, PKCS#8 and raw private key and PKCS#12 formats.
2008-03-17 17:04:49 -05:00
PKCS#12 is a file format used to safely transport SSL certificates and public/private keypairs.
2008-07-11 10:34:29 -05:00
They may be generated and managed using the NSS pk12util command or the OpenSSL pkcs12 command.
2008-03-17 17:04:49 -05:00
2008-07-11 10:34:29 -05:00
The service(s) are not automatically restarted. In order to use the newly installed certificate(s) you will need to manually restart the Directory and/or Apache servers.
2008-03-17 17:04:49 -05:00
.SH "OPTIONS"
.TP
\fB \- d\fR , \fB \- \- dirsrv\fR
Install the certificate on the Directory Server
.TP
\fB \- w\fR , \fB \- \- http\fR
Install the certificate in the Apache Web Server
2008-07-11 10:34:29 -05:00
.TP
2013-08-20 01:39:39 -05:00
\fB \- \- pin\fR =\fI PIN\fR
2014-09-24 09:41:47 -05:00
The password to unlock the private key
2013-08-27 11:06:24 -05:00
.TP
2014-09-24 09:48:15 -05:00
\fB \- \- cert\- name\fR =\fI NAME\fR
Name of the certificate to install
.TP
2013-08-27 11:06:24 -05:00
\fB \- \- dirman\- password\fR =\fI DIRMAN_PASSWORD\fR
Directory Manager password
2008-03-17 17:04:49 -05:00
.SH "EXIT STATUS"
0 if the installation was successful
1 if an error occurred