ubccr / mokey

FreeIPA self-service account management portal
BSD 3-Clause "New" or "Revised" License
194 stars 46 forks source link

Certicate issue #34

Closed jproutycct closed 5 years ago

jproutycct commented 5 years ago

I am getting invalid UI x509: certificate is not valid for any names, but expected the name of ipa server

aebruno commented 5 years ago

This is likely due to your ipa server certificate missing a Subject Alternative Name. Should look something like this:

X509v3 Subject Alternative Name: 
     DNS:ipa.yourdomain.com, othername:<unsupported>, othername:<unsupported>

Your ipa server domain should be listed in the DNS:ipa.yourdomain.com above. If it's missing then that is likely the problem.