FreeIPA uses dogtag and NSS for PKI. Ubuntu and a lot of the world uses OpenSSL. I now have a pair of FreeIPA test servers replicating certificate functionality, and the single interface for authentication, authorization, and DNS is convenient. I'm more familiar with OpenSSL
I do not understand, however, how to configure Apache2's HTTPd to authenticate a site based on dogtag certificates. I'm trying to Apache module mod_ssl to work using these instructions: https://pagure.io/mod_nss. My certificate is valid. How do I get a site to be trusted (similar to 'SSLCertificateFile /path/to/cert.pem' and the associated key file)?
I'd appreciate a snippet of how that part of the VirtualHost directive should look.
Edit: I know I could convert/export the cert, but this would require manual work to renew/replace the cert. (http://itdoc.hitachi.co.jp/manuals/3020/30203Y1800e/EY180073.HTM)