[Pki-devel] Fwd: Re: [Freeipa-users] Updating the CA certificate

Here is the same question I asked last week, this time by someone planning ahead. They have an externally-signed IPA dogtag CA whose external CA expires soon. How do they go about renewing things? I assume they need to renew the external CA first. Does it make a difference if the external CA is rekeyed? rob