freeipa

#3504 [RFE] Use system shared CA trust
Closed: Fixed Opened by rcritten.

Closed: Fixed
Reopen Issue

F-19 is introducing a new feature that will make publishing a CA certificate both easier and system-wide for all crypto libraries:

https://fedoraproject.org/wiki/Features/SharedSystemCertificates

This will make it possible to avoid the CA trust issues in client browsers on enrolled systems.

Linked to Bugzilla bug: https://bugzilla.redhat.com/show_bug.cgi?id=928478 (Fedora)

Steps how to add the certificate to trust store:

https://fedoraproject.org/wiki/Features/SharedSystemCertificates:Testing#How_to_add_a_systemwide_CA

3.4 development was shifted by one month, moving tickets to reflect reality better.

Adjusting time plan - 3.4 development was postponed as we focused on 3.3.x testing and stabilization.

Linked to Bugzilla bug: https://bugzilla.redhat.com/show_bug.cgi?id=1031111 (Red Hat Enterprise Linux 7)
  • master: 60b472479d6427243b5ef51c4dd60cdcd9e52afd - Add f19 platform file
  • master: 4a0e91449e2b65304ae8d660d1a480200b1a13d3 - Publish CA certificate to systemwide store

Metadata Update from @rcritten:
- Issue assigned to tbabej
- Issue set to the milestone: FreeIPA 4.0 - 2013/11
Metadata
None
None
None
Normal
enhancement
Certificate management
1
N/A (minor feature)
ipa-client-install now uploads FreeIPA CA certificate in a system-wide certificate store, thus making it trusted by all other services on the OS.
Static archive. pagure.io was sunset in 2026; this is a read-only snapshot.
Red Hat Logo

Fedora is sponsored by Red Hat. Learn more about the relationship between Red Hat and Fedora »

© Red Hat, Inc. and others.