00a7868 Reuse key type and size in certmonger resubmit

Authored and Committed by cheimes 5 years ago
    Reuse key type and size in certmonger resubmit
    
    Certmonger has hard-coded defaults for key size and key type. In case a
    request does not contain these values, certmonger uses 2048 RSA keys.
    Since the CA now has 3072, it will also rekey the CA to 2048 instead of
    resubmitting with the existing 2048 bit key.
    
    Use key-size and key-type from the existing request when resubmitting.
    
    Related: https://pagure.io/freeipa/issue/6790
    Signed-off-by: Christian Heimes <cheimes@redhat.com>
    Reviewed-By: Alexander Bokovoy <abokovoy@redhat.com>
    
        
file modified
+12 -0