Lightweight CAs currently do not provide an option to configure whether certificates are issued with random or sequential serial numbers. Add the ability to configure this on a per-CA basis.
Is it sufficient to provide this as a subca create-time option, or should it be possible to change the configuration at any time?
Lightweight CAs now share a single certificate repository (that of the host CA). Therefore there is reduced possibility to configure sequential or random serial numbers; whatever is configured for the host CA applies to lightweight CAs as well.
Closing now; if there is a demand for this in future, please reopen.
Metadata Update from @ftweedal: - Issue set to the milestone: UNTRIAGED
Dogtag PKI is moving from Pagure issues to GitHub issues. This means that existing or new issues will be reported and tracked through Dogtag PKI's GitHub Issue tracker.
This issue has been cloned to GitHub and is available here: https://github.com/dogtagpki/pki/issues/1882
If you want to receive further updates on the issue, please navigate to the GitHub issue and click on Subscribe button.
Subscribe
Thank you for understanding, and we apologize for any inconvenience.
Login to comment on this ticket.