1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 64 65 66 67 68 69 70 71 72 73 74 75 76 77 78 79 80 81 82 83 84 85 86 87 88 89 90 91 92 93 94 95 96
| WARNING
ipa-cert-fix is intended for recovery when expired certificates prevent the normal operation of IPA. It should ONLY be used in such scenarios, and backup of the system, especially certificates and keys, is STRONGLY RECOMMENDED.
The following certificates will be renewed:
Dogtag sslserver certificate: Subject: CN=freeipa.baofoo.cn,O=BAOFOO.CN Serial: 3 Expires: 2021-08-19 07:42:09
Dogtag subsystem certificate: Subject: CN=CA Subsystem,O=BAOFOO.CN Serial: 4 Expires: 2021-08-19 07:42:09
Dogtag ca_ocsp_signing certificate: Subject: CN=OCSP Subsystem,O=BAOFOO.CN Serial: 2 Expires: 2021-08-19 07:42:09
Dogtag ca_audit_signing certificate: Subject: CN=CA Audit,O=BAOFOO.CN Serial: 5 Expires: 2021-08-19 07:42:09
IPA IPA RA certificate: Subject: CN=IPA RA,O=BAOFOO.CN Serial: 7 Expires: 2021-08-19 07:42:30
IPA Apache HTTPS certificate: Subject: CN=freeipa.baofoo.cn,O=BAOFOO.CN Serial: 9 Expires: 2021-08-30 07:43:31
IPA LDAP certificate: Subject: CN=freeipa.baofoo.cn,O=BAOFOO.CN Serial: 8 Expires: 2021-08-30 07:43:01
IPA KDC certificate: Subject: CN=freeipa.baofoo.cn,O=BAOFOO.CN Serial: 10 Expires: 2021-08-30 07:43:38
Enter "yes" to proceed: yes Proceeding. Renewed Dogtag sslserver certificate: Subject: CN=freeipa.baofoo.cn,O=BAOFOO.CN Serial: 11 Expires: 2023-11-30 01:22:29
Renewed Dogtag subsystem certificate: Subject: CN=CA Subsystem,O=BAOFOO.CN Serial: 12 Expires: 2023-11-30 01:22:30
Renewed Dogtag ca_ocsp_signing certificate: Subject: CN=OCSP Subsystem,O=BAOFOO.CN Serial: 13 Expires: 2023-11-30 01:22:31
Renewed Dogtag ca_audit_signing certificate: Subject: CN=CA Audit,O=BAOFOO.CN Serial: 14 Expires: 2023-11-30 01:22:31
Renewed IPA IPA RA certificate: Subject: CN=IPA RA,O=BAOFOO.CN Serial: 15 Expires: 2023-11-30 01:22:32
Renewed IPA Apache HTTPS certificate: Subject: CN=freeipa.baofoo.cn,O=BAOFOO.CN Serial: 16 Expires: 2023-12-11 01:22:32
Renewed IPA LDAP certificate: Subject: CN=freeipa.baofoo.cn,O=BAOFOO.CN Serial: 17 Expires: 2023-12-11 01:22:32
Renewed IPA KDC certificate: Subject: CN=freeipa.baofoo.cn,O=BAOFOO.CN Serial: 18 Expires: 2023-12-11 01:22:33
Becoming renewal master. The ipa-cert-fix command was successful [root@freeipa ~]# ipactl restart
|