sanderw / freeipa

Forked from freeipa 5 years ago
Clone

bb95282 renew agent: get rid of virtual profiles

8 files Authored by jcholast 7 years ago, Committed by dkupka 7 years ago,
    renew agent: get rid of virtual profiles
    
    Replace all uses of virtual profiles with `dogtag-ipa-ca-renew-agent-reuse`
    and remove profile from the IPA CA certificate tracking request.
    
    This prevents virtual profiles from making their way into CSRs and in turn
    being rejected by certain CAs. This affected the IPA CA CSR with Microsoft
    CS in particular.
    
    https://pagure.io/freeipa/issue/5799
    
    Reviewed-By: David Kupka <dkupka@redhat.com>
    Reviewed-By: Stanislav Laznicka <slaznick@redhat.com>
    
        
file modified
+18 -7