第74章

ipa-cacert-manage install

# ipa-cacert-manage install

ipa-certupdate

# ipa-certupdate

openssl req -new -newkey rsa:4096 -days 365 -nodes -keyout new.key -out new.csr -addext "subjectAltName = DNS:server.idm.example.com" -subj '/CN=server.idm.example.com,O=IDM.EXAMPLE.COM'

$ openssl req -new -newkey rsa:4096 -days 365 -nodes -keyout new.key -out new.csr -addext "subjectAltName = DNS:server.idm.example.com" -subj '/CN=server.idm.example.com,O=IDM.EXAMPLE.COM'

ipa-server-certinstall -w --pin=password new.key new.crt

# ipa-server-certinstall -w --pin=password new.key new.crt

ipa-server-certinstall -d --pin=password new.key new.cert

# ipa-server-certinstall -d --pin=password new.key new.cert

systemctl restart httpd.service

# systemctl restart httpd.service

systemctl restart dirsrv@IDM.EXAMPLE.COM.service

# systemctl restart dirsrv@IDM.EXAMPLE.COM.service

ipa-certupdate

# ipa-certupdate