11:11 a.m.
Hello!
Tell me please!
I need to release SubCA in the Dogtag.
And then with this SubCA certificate sign the CSR.
So I will have to get a chain of certificates.
How can I do this in Dogtag?
Is there an instruction manual?
Best regards.
Anatoly
11:50 p.m.
Hi,
http://pki.fedoraproject.org/wiki/PKI_Install_Guide
http://pki.fedoraproject.org/wiki/Quick_Start
http://pki.fedoraproject.org/wiki/Installing_CA
BR
-----Ursprüngliche Nachricht-----
Von: pki-users-bounces(a)redhat.com [mailto:pki-users-bounces@redhat.com] Im Auftrag von
anater dembelov
Gesendet: Sonntag, 21. Jänner 2018 18:11
An: Endi Sukma Dewata; pki-users(a)redhat.com
Betreff: [Pki-users] Issuing a subordinate CA certificate
[phishing][bayes][heur][dkim][html-removed]
Hello!
Tell me please!
I need to release SubCA in the Dogtag.
And then with this SubCA certificate sign the CSR.
So I will have to get a chain of certificates.
How can I do this in Dogtag?
Is there an instruction manual?
Best regards.
Anatoly
_______________________________________________
Pki-users mailing list
Pki-users(at)redhat . com
https : / / www . redhat . com / mailman / listinfo / pki-users
2:48 a.m.
Good afternoon!
It's not that.
I need the ability to support both the rootCA and the subCA on a single
dogtag server.
It is necessary to issue certificates signed by rootCA, and SubCA.
2018-01-22 8:50 GMT+03:00 Supper Florian 6342 sIT <
Florian.Supper(a)s-itsolutions.at>:
Hi,
http://pki.fedoraproject.org/wiki/PKI_Install_Guide
http://pki.fedoraproject.org/wiki/Quick_Start
http://pki.fedoraproject.org/wiki/Installing_CA
BR
-----Ursprüngliche Nachricht-----
Von: pki-users-bounces(a)redhat.com [mailto:pki-users-bounces@redhat.com]
Im Auftrag von anater dembelov
Gesendet: Sonntag, 21. Jänner 2018 18:11
An: Endi Sukma Dewata; pki-users(a)redhat.com
Betreff: [Pki-users] Issuing a subordinate CA certificate
[phishing][bayes][heur][dkim][html-removed]
Hello!
Tell me please!
I need to release SubCA in the Dogtag.
And then with this SubCA certificate sign the CSR.
So I will have to get a chain of certificates.
How can I do this in Dogtag?
Is there an instruction manual?
Best regards.
Anatoly
_______________________________________________
Pki-users mailing list
Pki-users(at)redhat . com
https : / / www . redhat . com / mailman / listinfo / pki-users
2:55 a.m.
Hi,
I think you need to setup a RootCA which is dogtag
(http://pki.fedoraproject.org/wiki/Installing_CA) and then try to setup
another CA which is signed by the RootCA i.e
SubCA(http://pki.fedoraproject.org/wiki/Installing_Subordinate_CA).
Hope that helps!!
Thanks
Geetika
On 01/22/2018 02:18 PM, anater dembelov wrote:
Good afternoon!
It's not that.
I need the ability to support both the rootCA and the subCA on a
single dogtag server.
It is necessary to issue certificates signed by rootCA, and SubCA.
2018-01-22 8:50 GMT+03:00 Supper Florian 6342 sIT
<Florian.Supper(a)s-itsolutions.at
<mailto:Florian.Supper@s-itsolutions.at>>:
Hi,
http://pki.fedoraproject.org/wiki/PKI_Install_Guide
<http://pki.fedoraproject.org/wiki/PKI_Install_Guide>
http://pki.fedoraproject.org/wiki/Quick_Start
<http://pki.fedoraproject.org/wiki/Quick_Start>
http://pki.fedoraproject.org/wiki/Installing_CA
<http://pki.fedoraproject.org/wiki/Installing_CA>
BR
-----Ursprüngliche Nachricht-----
Von: pki-users-bounces(a)redhat.com
<mailto:pki-users-bounces@redhat.com>
[mailto:pki-users-bounces@redhat.com
<mailto:pki-users-bounces@redhat.com>] Im Auftrag von anater dembelov
Gesendet: Sonntag, 21. Jänner 2018 18:11
An: Endi Sukma Dewata; pki-users(a)redhat.com
<mailto:pki-users@redhat.com>
Betreff: [Pki-users] Issuing a subordinate CA certificate
[phishing][bayes][heur][dkim][html-removed]
Hello!
Tell me please!
I need to release SubCA in the Dogtag.
And then with this SubCA certificate sign the CSR.
So I will have to get a chain of certificates.
How can I do this in Dogtag?
Is there an instruction manual?
Best regards.
Anatoly
_______________________________________________
Pki-users mailing list
Pki-users(at)redhat . com
https : / / www . redhat . com / mailman / listinfo / pki-users
_______________________________________________
Pki-users mailing list
Pki-users(a)redhat.com
https://www.redhat.com/mailman/listinfo/pki-users
11:39 p.m.
On Sun, Jan 21, 2018 at 08:11:11PM +0300, anater dembelov wrote:
Hello!
Tell me please!
I need to release SubCA in the Dogtag.
And then with this SubCA certificate sign the CSR.
So I will have to get a chain of certificates.
How can I do this in Dogtag?
Is there an instruction manual?
Best regards.
Anatoly
Hi Anatoly,
The "lightweight sub-CAs" feature lets you host sub-CAs within an
existing Dogtag instance:
http://pki.fedoraproject.org/wiki/Lightweight_sub-CAs
Use the `pki ca-authority' CLI commands to create and manage
lightweight CAs.
This feature was developed for FreeIPA to use, so it is not
documented as a standalone feature of Dogtag. It is also not a
supported part of standalone RHCS deployments.
But most of what you need should be in the link above or discernable
from the `pki ca-authority' CLI commands available to you. Feel
free to reply with any follow-up questions you have.
Cheers,
Fraser
2305
days inactive
2307
days old
4 comments
4 participants
participants (4)
-
anater dembelov -
Fraser Tweedale -
Geetika Kapoor -
Supper Florian 6342 sIT