ipa-server-certinstall(1)

📦 version 4.13.4, in centos-stream 10, centos-stream 9, fedora 43, fedora 44

💖 ipa-server-certinstall — bestie's guide to swapping out your SSL certs 💖

okay so this is a page from the IPA Manual Pages, and honestly? it's giving "certificate glow-up" energy. welcome to ipa-server-certinstall, the tool that lets you drop shiny new SSL server certs into your IPA setup. let's get into it ✨

🌸 NAME 🌸

ipa-server-certinstall — install new SSL server certificates. yes queen, that's literally it. no cap.

🎀 SYNOPSIS 🎀

ipa-server-certinstall [OPTION]... FILE...

✨ DESCRIPTION ✨

okay so here's the vibe: this command replaces your current Directory server SSL certificate, Apache server SSL certificate, and/or Kerberos KDC certificate with whatever certificate is sitting in the files you hand it. main character energy, fr fr. 💅

the files it accepts? it's flexible bestie:

  • PEM and DER certificate formats
  • PKCS#7 certificate chain
  • PKCS#8 and raw private key
  • PKCS#12

btw, quick lore drop: PKCS#12 is a file format used to safely transport SSL certificates and public/private keypairs. it's literally the lil suitcase your certs travel in. 🧳

and you can generate + manage all of this using the NSS pk12util command or the OpenSSL pkcs12 command. iykyk.

⚠️ GIRLIE LISTEN. The service(s) are not automatically restarted. so like, if you want to actually use the newly installed certificate(s), you will need to manually restart the Directory, Apache and/or Krb5kdc servers. don't be out here wondering why nothing changed, bestie. 😭

and one more thing — if the ACME service is enabled, then the web certificate must have a Subject Alternative Name (SAN) for ipa-ca.$DOMAIN. no SAN, no slay. periodt. 👑

🔥 OPTIONS 🔥

  • -d, --dirsrv — install the certificate on the Directory Server 🗂️
  • -w, --http — install the certificate in the Apache Web Server 🌐
  • -k, --kdc — install the certificate in the Kerberos KDC 🔐
  • --pin=PIN — the password to unlock the private key. it's giving "keys to the kingdom" ✨
  • --cert-name=NAME — name of the certificate to install 🏷️
  • -p, --dirman-password=DIRMAN_PASSWORD — Directory Manager password 🫶
  • --version — show the program's version and exit. bye bestie 👋
  • -h, --help — show the help for this program 🆘
  • -v, --verbose — print debugging information. talkative queen 💬
  • -q, --quiet — output only errors 🤫
  • --log-file=FILE — log to the given file 📝

💀 EXIT STATUS 💀

  • 0 if the installation was successful — ate and left no crumbs 💖
  • 1 if an error occurred — not the vibe, we cry 😭

🦋 SIGN-OFF 🦋

okay that's the whole page, bestie!! this lil masterpiece comes to you from IPA, dated Mar 14 2008 — an icon, a legend, and it is the moment. now go forth and install those certs responsibly. mwah 💋🌈✨

📦 where this page comes from