diff options
author | Jan Cholasta <jcholast@redhat.com> | 2014-09-24 16:48:15 +0200 |
---|---|---|
committer | Martin Kosek <mkosek@redhat.com> | 2014-09-30 08:50:47 +0200 |
commit | 3cde7e9cfd7908b24082e3e50cdd0955726223d0 (patch) | |
tree | 235ef572fd448a2246b5a9ede1787f5250e6ffb9 /install/tools/man/ipa-server-install.1 | |
parent | 88083887c994ab505d6e07151e5dd26b56bb7732 (diff) | |
download | freeipa-3cde7e9cfd7908b24082e3e50cdd0955726223d0.tar.gz freeipa-3cde7e9cfd7908b24082e3e50cdd0955726223d0.tar.xz freeipa-3cde7e9cfd7908b24082e3e50cdd0955726223d0.zip |
Allow choosing CA-less server certificates by name
Added new --*-cert-name options to ipa-server-install and ipa-replica-prepare
and --cert-name option to ipa-server-certinstall. The options allows choosing
a particular certificate and private key from PKCS#12 files by its friendly
name.
https://fedorahosted.org/freeipa/ticket/4489
Reviewed-By: Petr Viktorin <pviktori@redhat.com>
Diffstat (limited to 'install/tools/man/ipa-server-install.1')
-rw-r--r-- | install/tools/man/ipa-server-install.1 | 9 |
1 files changed, 9 insertions, 0 deletions
diff --git a/install/tools/man/ipa-server-install.1 b/install/tools/man/ipa-server-install.1 index 0bd59687d..582108e6f 100644 --- a/install/tools/man/ipa-server-install.1 +++ b/install/tools/man/ipa-server-install.1 @@ -111,6 +111,15 @@ The password to unlock the Apache Server private key \fB\-\-pkinit\-pin\fR=\fIPIN\fR The password to unlock the Kerberos KDC private key .TP +\fB\-\-dirsrv\-cert\-name\fR=\fINAME\fR +Name of the Directory Server SSL certificate to install +.TP +\fB\-\-http\-cert\-name\fR=\fINAME\fR +Name of the Apache Server SSL certificate to install +.TP +\fB\-\-pkinit\-cert\-name\fR=\fINAME\fR +Name of the Kerberos KDC SSL certificate to install +.TP \fB\-\-ca\-cert\-file\fR=\fIFILE\fR File containing the CA certificate of the CA which issued the Directory Server, Apache Server and Kerberos KDC certificates. The file is accepted in PEM and DER certificate and PKCS#7 certificate chain formats. This option may be used multiple times. Use this option if the CA certificate is not present in the certificate files. .TP |