mirror of
https://salsa.debian.org/freeipa-team/freeipa.git
synced 2025-02-25 18:55:28 -06:00
man ipa-cacert-manage install needs clarification
The customers are often confused by ipa-cacert-manage install. The man page should make it clear that IPA CA is not modified in any way by this command. https://pagure.io/freeipa/issue/6795 Reviewed-By: Tomas Krizek <tkrizek@redhat.com>
This commit is contained in:
parent
3de09709cc
commit
3ea2834b76
@ -46,6 +46,8 @@ When the IPA CA is not configured, this command is not available.
|
||||
.RS
|
||||
This command can be used to install the certificate contained in \fICERTFILE\fR as an additional CA certificate to IPA.
|
||||
.sp
|
||||
Important: this does not replace IPA CA but adds the provided certificate as a known CA. This is useful for instance when using ipa-server-certinstall to replace HTTP/LDAP certificates with third-party certificates signed by this additional CA.
|
||||
.sp
|
||||
Please do not forget to run ipa-certupdate on the master, all the replicas and all the clients after this command in order to update IPA certificates databases.
|
||||
.RE
|
||||
.SH "COMMON OPTIONS"
|
||||
|
Loading…
Reference in New Issue
Block a user