Hi, the certificate generated by your external CA has the following subject: C=GB, *O=EAJ Global, OU=UK Internal Certificate Authority*, CN=Certificate Authority
but the CSR contains: C=GB, *OU=UK Internal Certificate Authority, O=EAJ Global*, CN=Certificate Authority This means that your external CA didn't issue the certificate with the expected subject. Which parameters did you provide to the first run of ipa-server-install (the one that generated the CSR)? Did you specify --external-ca --ca-subject=SUBJECT --subject-base=BASE? flo On Sat, May 10, 2025 at 12:28 PM Entrepreneur AJ via FreeIPA-users < [email protected]> wrote: > If it helps the CSR file that ipa-server-install generated shows the > subject as: Subject: C=GB, OU=UK Internal Certificate Authority, O=EAJ > Global, CN=Certificate Authority > -- > _______________________________________________ > FreeIPA-users mailing list -- [email protected] > To unsubscribe send an email to [email protected] > Fedora Code of Conduct: > https://docs.fedoraproject.org/en-US/project/code-of-conduct/ > List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines > List Archives: > https://lists.fedorahosted.org/archives/list/[email protected] > Do not reply to spam, report it: > https://pagure.io/fedora-infrastructure/new_issue >
-- _______________________________________________ FreeIPA-users mailing list -- [email protected] To unsubscribe send an email to [email protected] Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedorahosted.org/archives/list/[email protected] Do not reply to spam, report it: https://pagure.io/fedora-infrastructure/new_issue
