aafc0e9 Allow SAN extension for cert-request self-service

1 file Authored by ftweedal 8 years ago, Committed by jcholast 8 years ago,
    Allow SAN extension for cert-request self-service
    
    Users cannot self-issue a certificate with a subjectAltName
    extension (e.g. with rfc822Name altNames).  Suppress the
    cert-request "request certificate with subjectaltname" permission
    check when the bind principal is the target principal (i.e.
    cert-request self-service).
    
    Fixes: https://fedorahosted.org/freeipa/ticket/5190
    Reviewed-By: Martin Babinsky <mbabinsk@redhat.com>
    
        
file modified
+1 -1