第 4 章 Managing externally signed certificates for IdM users, hosts, and services

Procedure

1. To add a certificate to an IdM user, enter:

   $ ipa user-add-cert user --certificate=MIQTPrajQAwg...

2. Specify the following information:

   • The name of the user

   • The Base64-encoded DER certificate

     注意

     Instead of copying and pasting the certificate contents into the command line, you can convert the certificate to the DER format and then re-encode it to Base64. For example, to add the user_cert.pem certificate to user, enter:

     $ ipa user-add-cert user --certificate="$(openssl x509 -outform der -in user_cert.pem | base64 -w 0)"

   You can run the ipa user-add-cert command interactively by executing it without adding any options.

   • To add a certificate to an IdM host, enter: ipa host-add-cert
   • To add a certificate to an IdM service, enter: ipa service-add-cert