On Fri, Aug 09, 2019 at 11:06:58PM -0000, Boyd Ako via FreeIPA-users
wrote:
It will need Subject Alternative Name (SAN) extension with the
correct DNS name for the server, and Extended Key Usage with
id-kp-serverAuth (1.3.6.1.5.5.7.3.1).
Thanks... I guess my plan for that doesn't work. My CA doesn't provide that EKU.
Or at least in the normal profile.