mirror of
https://salsa.debian.org/freeipa-team/freeipa.git
synced 2024-12-25 08:21:05 -06:00
2ef53196c6
This is to be able to import ACME schema provided by dogtag. https://pagure.io/freeipa/issue/8524 Signed-off-by: Rob Crittenden <rcritten@redhat.com> Reviewed-By: Fraser Tweedale <ftweedal@redhat.com> Reviewed-By: Christian Heimes <cheimes@redhat.com> Reviewed-By: Alexander Bokovoy <abokovoy@redhat.com> Reviewed-By: Rob Crittenden <rcritten@redhat.com> Reviewed-By: Mohammad Rizwan <myusuf@redhat.com> |
||
---|---|---|
.. | ||
acmeIPAServerCert.cfg | ||
caIPAserviceCert.cfg | ||
caIPAserviceCert.UPGRADE.cfg | ||
IECUserRoles.cfg | ||
KDCs_PKINIT_Certs.cfg | ||
Makefile.am | ||
README |
This directory contains profile TEMPLATES for certificate profiles included in FreeIPA. Do not import these files or modifications thereof - it is likely that Dogtag will accept the configuration, but certificate issuance will fail with the updated configuration. At best, it will not give you the certificates you want. If you want to modify a profile configuration or create a new profile based on an existing profile configuration, you should export the current profile configuration with the command: ipa certprofile-show --out FILENAME PROFILE_NAME After modifying the configuration, update the profile configuration: ipa certprofile-mod --file FILENAME PROFILE_NAME Or if you are creating a new profile: ipa certprofile-import --desc DESC --store 1 \ --file FILENAME NEW_PROFILE_NAME