[Freeipa-devel] [PATCH/0028] Make selfsign CA creation an independent step
Simo Sorce
ssorce at redhat.com
Fri Dec 10 17:30:17 UTC 2010
On Fri, 10 Dec 2010 14:49:36 +0100
Jakub Hrozek <jhrozek at redhat.com> wrote:
> On 12/09/2010 12:52 AM, Simo Sorce wrote:
> >
> > When we are creating a selfsign file based CA, do it at the same
> > time we would do the dogtag CA creation instead of doing it within
> > the dsinstance.
> >
> > Also move around or changes some other related minor details to
> > clean-up a bit the code.
> >
> > Automatically publishes the CA cert to /etc/ipa/ca.crt, this fixes
> > #544 as now the code gets the cert from there and the cert is put
> > there at CA creation time before any instance has been invoked.
> >
> > Simo.
> >
> >
>
> Looks good to me and seems to work OK.
>
> Ack although I believe patches 25,26 need to be pushed first.
Thank you,
pushed to master after 25/26
Simo.
--
Simo Sorce * Red Hat, Inc * New York
More information about the Freeipa-devel
mailing list