[Freeipa-devel] [PATCH] 0033 webui: Mention SAN names in 'Issue new certificate'

Petr Vobornik pvoborni at redhat.com
Mon Jun 6 16:35:40 UTC 2016


On 06/04/2016 02:17 AM, Fraser Tweedale wrote:
> On Fri, Jun 03, 2016 at 05:17:12PM +0200, Petr Vobornik wrote:
>> On 05/10/2016 04:52 PM, Pavel Vomacka wrote:
>>> Hi all,
>>>
>>> please review the patch for webUI which adds SAN names into 'Issue new
>>> certificate' dialog. The SAN names are mentioned only in dialogs for
>>> requesting for host and service certificate, according to the design page:
>>> http://www.freeipa.org/page/V4/RFC_2818_certificate_compliance . I'm not
>>> sure whether this change provides enough information. If you think that
>>> we should add more information to these dialogs or even extend also
>>> dialog on Authentication -> Certificates page, just let me know.
>>>
>>
>> Should we also include SAN for user certs?
>>
>> E.g.:
>>   -7 emailAddrs
>>
>> Adding Fraser to loop...
>>
>> Otherwise the patch looks good.
>>
> We *could* add rfc822Name example for user certs, but I don't think
> we should.
> 
> Especially for user certs, we might as well hold off because the
> "CSR templates" feature is intended to relieve users of having to
> generate CSRs themselves.
> 

Thanks for the info Fraser.

ACK then.

master:
* 91ac959fe5df817e2322428acff392d735fa414e Extend the certificate
request dialog
-- 
Petr Vobornik




More information about the Freeipa-devel mailing list