iulian roman via FreeIPA-users wrote: > I have added the full chain in /var/lib/ipa/certs but I do not know if that > is the correct way.
Putting the chain in a random place is not going to work. Try setting SSLCertificateChainFile to /etc/ipa/ca.crt in your Apache config and restarting it. This directive is deprecated but it may still work. The alternative would be to combine the chain with your server certificate file. This will break when renewal time comes. rob _______________________________________________ FreeIPA-users mailing list -- freeipa-users@lists.fedorahosted.org To unsubscribe send an email to freeipa-users-le...@lists.fedorahosted.org Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedorahosted.org/archives/list/freeipa-users@lists.fedorahosted.org Do not reply to spam on the list, report it: https://pagure.io/fedora-infrastructure
