IntenseWebs/freeipa
3
0
Fork 0
mirror of https://salsa.debian.org/freeipa-team/freeipa.git synced 2025-02-25 18:55:28 -06:00
Code Issues Packages Projects Releases Wiki Activity

Use the caIPAserviceCert profile for issuing service certs.

Browse Source 
This profile enables subject validation and ensures that the subject
that the CA issues is uniform. The client can only request a specific
CN, the rest of the subject is fixed.

This is the first step of allowing the subject to be set at
installation time.

Also fix 2 more issues related to the return results migration.
This commit is contained in:
Rob Crittenden
2009-12-18 11:01:00 -05:00
committed by Jason Gerard DeRose
parent 864490ff41
commit b8016807eb
2 changed files with 3 additions and 3 deletions
Download Patch File Download Diff File Expand all files Collapse all files

2
ipaserver/plugins/dogtag.py
View File

@@ -1511,7 +1511,7 @@ class ra(rabase.rabase):
http_status, http_reason_phrase, http_headers, http_body = \
self._sslget('/ca/ee/ca/profileSubmit',
self.env.ca_ee_port,
profileId='caRAserverCert',
profileId='caIPAserviceCert',
cert_request_type=request_type,
cert_request=csr,
xml='true')