The help text and man pages for ipa-server-install's --external_cert_file and --external_ca_file state that the options take PKCS#10 files. That doesn't make much sense as PKCS#10 is a format for CSRs.
ipa-server-install
--external_cert_file
--external_ca_file
The options actually take PEM certs.
Ticket has been cloned to Bugzilla: https://bugzilla.redhat.com/show_bug.cgi?id=947912
master: b36380f
Metadata Update from @pviktori: - Issue assigned to pviktori - Issue set to the milestone: FreeIPA 3.2 - 2013/04 (Beta)
Login to comment on this ticket.