1a35a2e Add CommonNameToSANDefault to default cert profile

2 files Authored by ftweedal 6 years ago, Committed by jcholast 6 years ago,
    Add CommonNameToSANDefault to default cert profile
    
    The CommonNameToSANDefault component was added to Dogtag 10.4.  When
    a profile is configured to use it, this profile copies the CN in the
    certificate to the Subject Alternative Name extension as a dNSName
    (if and only if it does look like a DNS name).
    
    It is desirable that the default service profile use this component.
    Add it to the default profile, for new installations only.  For
    existing installations, until a proper profile update mechanism is
    implemented, administrators who wish to use it must configure it via
    the 'certprofile-mod' command.
    
    Fixes: https://pagure.io/freeipa/issue/7007
    Reviewed-By: Jan Cholasta <jcholast@redhat.com>
    
        
file modified
+2 -2