Issue #7123: External CA renewal fails when IPA CA subject DN does not match "CN=Certificate Authority, {subject-base}" - freeipa

freeipa

#7123 External CA renewal fails when IPA CA subject DN does not match "CN=Certificate Authority, {subject-base}"

Closed: fixed 6 years ago Opened 6 years ago by ftweedal.

When running ipa-cacert-manage renew --external-ca with an
IPA CA having a subject DN that does not correspond to
CN=Certificate Authority, {subject-base}, the CSR for submission to
the external CA does not generated.

ftweedal commented 6 years ago

PR: https://github.com/freeipa/freeipa/pull/1002

Metadata Update from @tkrizek:
- Issue priority set to: major
- Issue set to the milestone: FreeIPA 4.5.4

6 years ago

tkrizek commented 6 years ago

master:

504c303 Fix external renewal for CA with non-default subject DN

tkrizek commented 6 years ago

ipa-4-5:

5b9f7c9 Fix external renewal for CA with non-default subject DN

Metadata Update from @tkrizek:
- Issue close_status updated to: fixed
- Issue status updated to: Closed (was: Open)

6 years ago

Metadata

Assignee

None

Tags

None

Blocking

None

Depending on

None

Priority

normal

Milestone

FreeIPA 4.5.4

None

affects_doc

None

source

None

knownissue

None

type

None

blockedby

None

test_case

None

component

None

blocking

None

on_review

None

keywords

None

test_coverage

None

reviewer

None

external_tracker

None

rhbz

None

tester

None

changelog

None

design

None

freeipa

Source Code

#7123 External CA renewal fails when IPA CA subject DN does not match "CN=Certificate Authority, {subject-base}" Closed: fixed 6 years ago Opened 6 years ago by ftweedal.

Metadata

#7123 External CA renewal fails when IPA CA subject DN does not match "CN=Certificate Authority, {subject-base}"

Closed: fixed 6 years ago Opened 6 years ago by ftweedal.