Red Hat Bugzilla – Bug 856282
[Web UI] Improve instructions to generate certificate
Last modified: 2013-02-21 04:19:44 EST
This bug is created as a clone of upstream ticket:
Endi proposed that we should improve instructions to generate certificate to be more simple (shorter). Might be good if reviewed by native speaker.
1. Create a certificate database or use an existing one. To create a
# certutil -N -d <database path>
See certutil documentation for more info.
2. Create a CSR with subject "CN=<hostname>,O=<realm>", for example:
# certutil -R -d <database path> -a -g <key size>
3. Copy and paste the CSR (from "-----BEGIN NEW CERTIFICATE
REQUEST-----" to "-----END NEW CERTIFICATE REQUEST-----") into the
text area below:
Note, the '#' is meant to indicate the command prompt. The <em> tag was not quite visible, most likely people won't see the tooltips for key size, so it might be better to mention <key size> explicitly.
ipa-3-0: 49fb0835c7393bc305b0f859460c4943e562c38b Simpler instructions to generate certificate
master: fed5bbd2989a20e1562598033791a0b03d2898be Simpler instructions to generate certificate
Created attachment 685453 [details]
Created attachment 685454 [details]
verified in ipa-server-3.0.0-22.el6.x86_64
Since the problem described in this bug report should be
resolved in a recent advisory, it has been closed with a
resolution of ERRATA.
For information on the advisory, and where to find the updated
files, follow the link below.
If the solution does not work for you, open a new bug report.