1ipa-server-certinstall(1)    FreeIPA Manual Pages    ipa-server-certinstall(1)
2
3
4

NAME

6       ipa-server-certinstall - Install new SSL server certificates
7

SYNOPSIS

9       ipa-server-certinstall [OPTION]... FILE...
10

DESCRIPTION

12       Replace the current Directory server SSL certificate, Apache server SSL
13       certificate and/or Kerberos KDC certificate with the certificate in the
14       specified  files.  The  files  are accepted in PEM and DER certificate,
15       PKCS#7 certificate chain, PKCS#8 and raw private key and  PKCS#12  for‐
16       mats.
17
18       PKCS#12  is a file format used to safely transport SSL certificates and
19       public/private keypairs.
20
21       They may be generated and managed using the NSS pk12util command or the
22       OpenSSL pkcs12 command.
23
24       The  service(s)  are  not  automatically restarted. In order to use the
25       newly installed certificate(s) you will need to  manually  restart  the
26       Directory, Apache and/or Krb5kdc servers.
27
28

OPTIONS

30       -d, --dirsrv
31              Install the certificate on the Directory Server
32
33       -w, --http
34              Install the certificate in the Apache Web Server
35
36       -k, --kdc
37              Install the certificate in the Kerberos KDC
38
39       --pin=PIN
40              The password to unlock the private key
41
42       --cert-name=NAME
43              Name of the certificate to install
44
45       -p, --dirman-password=DIRMAN_PASSWORD
46              Directory Manager password
47
48       --version
49              Show the program's version and exit
50
51       -h, --help
52              Show the help for this program
53
54       -v, --verbose
55              Print debugging information
56
57       -q, --quiet
58              Output only errors
59
60       --log-file=FILE
61              Log to the given file
62

EXIT STATUS

64       0 if the installation was successful
65
66       1 if an error occurred
67
68
69
70FreeIPA                           Mar 14 2008        ipa-server-certinstall(1)
Impressum