1ipa-server-certinstall(1)    FreeIPA Manual Pages    ipa-server-certinstall(1)
2
3
4

NAME

6       ipa-server-certinstall - Install new SSL server certificates
7

SYNOPSIS

9       ipa-server-certinstall [OPTION]... FILE...
10

DESCRIPTION

12       Replace the current Directory server SSL certificate, Apache server SSL
13       certificate and/or Kerberos KDC certificate with the certificate in the
14       specified  files.  The  files  are accepted in PEM and DER certificate,
15       PKCS#7 certificate chain, PKCS#8 and raw private key and  PKCS#12  for‐
16       mats.
17
18       PKCS#12  is a file format used to safely transport SSL certificates and
19       public/private keypairs.
20
21       They may be generated and managed using the NSS pk12util command or the
22       OpenSSL pkcs12 command.
23
24       The  service(s)  are  not  automatically restarted. In order to use the
25       newly installed certificate(s) you will need to  manually  restart  the
26       Directory, Apache and/or Krb5kdc servers.
27
28

OPTIONS

30       -d, --dirsrv
31              Install the certificate on the Directory Server
32
33       -w, --http
34              Install the certificate in the Apache Web Server
35
36       -k, --kdc
37              Install the certificate in the Kerberos KDC
38
39       --pin=PIN
40              The password to unlock the private key
41
42       --cert-name=NAME
43              Name of the certificate to install
44
45       --dirman-password=DIRMAN_PASSWORD
46              Directory Manager password
47

EXIT STATUS

49       0 if the installation was successful
50
51       1 if an error occurred
52
53
54
55FreeIPA                           Mar 14 2008        ipa-server-certinstall(1)