第67章

mkdir ~/SmartCard/

[root@server]# mkdir ~/SmartCard/

cd ~/SmartCard/

[root@server]# cd ~/SmartCard/

openssl x509 -in <filename>.der -inform DER -out <filename>.pem -outform PEM

# openssl x509 -in <filename>.der -inform DER -out <filename>.pem -outform PEM

cp /tmp/rootca.pem ~/SmartCard/
cp /tmp/subca.pem ~/SmartCard/
cp /tmp/issuingca.pem ~/SmartCard/

[root@server SmartCard]# cp /tmp/rootca.pem ~/SmartCard/
[root@server SmartCard]# cp /tmp/subca.pem ~/SmartCard/
[root@server SmartCard]# cp /tmp/issuingca.pem ~/SmartCard/

openssl x509 -noout -text -in rootca.pem | more

[root@server SmartCard]# openssl x509 -noout -text -in rootca.pem | more

kinit admin
ipa-advise config-server-for-smart-card-auth > config-server-for-smart-card-auth.sh

[root@server SmartCard]# kinit admin
[root@server SmartCard]# ipa-advise config-server-for-smart-card-auth > config-server-for-smart-card-auth.sh

chmod +x config-server-for-smart-card-auth.sh
./config-server-for-smart-card-auth.sh rootca.pem subca.pem issuingca.pem

[root@server SmartCard]# chmod +x config-server-for-smart-card-auth.sh
[root@server SmartCard]# ./config-server-for-smart-card-auth.sh rootca.pem subca.pem issuingca.pem
Ticket cache:KEYRING:persistent:0:0
Default principal: admin@IDM.EXAMPLE.COM
[...]
Systemwide CA database updated.
The ipa-certupdate command was successful