[Freeipa-users] Re: IPA certs expired, pki-tomcatd fails to start

Hi,

pki-server version is 10.5.17, if I hit pki-server-upgrade it says this:

# pki-server-upgrade Upgrading from version 10.5.17 to 10.5.18: 1. Fix EC admin certificate profile (Yes/No) [Y]:

could be helpful?

I also found this: https://www.dogtagpki.org/wiki/Tomcat_SSL_Configuration_with_OpenSSL

could generating a self signed sslserver.crt a good idea?

in the bugzilla link you sent, do I have to download and run that pyscript?

About the old method with turn the date before expiration, what I have to do precisely? Because I already done this:

#getcert list //list all the cert IDs

#ipa-getcert resubmit -i <ID> //for every cert listed before

#systemctl certmonger restart

Thanks for the support Flo

Manuel