[Freeipa-devel] [PATCHES] 295-299 Allow changing chaining of the IPA CA certificate

[Rob Crittenden]

Jan Cholasta wrote:
> On 16.6.2014 15:35, Jan Cholasta wrote:
>> Hi,
>>
>> the attached patches implement
>> <https://fedorahosted.org/freeipa/ticket/3737>.
>>
>> My patches 241-253 and 262-294 are required for this
>> (<http://www.redhat.com/archives/freeipa-devel/2014-June/msg00276.html>,
>> <http://www.redhat.com/archives/freeipa-devel/2014-June/msg00307.html>).
>>
>> The installation/testing guidelines from
>> <http://www.redhat.com/archives/freeipa-devel/2014-March/msg00385.html>
>> apply here as well.
>>
>> Honza
> 
> Rebased on top of current master.

295 ACK

296, 297 & 299

TBD, need to test but no problems seen so far.

298

The man page, if not usage, should include what the valid trust flags
are or point to NSS documentation.

rob