[Freeipa-devel] [freeipa PR#728][comment] ipa-cacert-manage: add --external-ca-type

[dkupka]

  URL: https://github.com/freeipa/freeipa/pull/728
Title: #728: ipa-cacert-manage: add --external-ca-type

dkupka commented:
"""
master:

* ce9eefe53b398b73f956df420ea8694b90e24f76 renew agent: respect CA renewal master setting
* 5abd9bb99680df45b6cd87de3b08466d612344bb server upgrade: always fix certmonger tracking request
* 09a49ad45846e3c2e76c5a035a27d0fa95b347b9 cainstance: use correct profile for lightweight CA certificates
* 25aeeaf46dd92e06f14de83459ab9be8ab846922 renew agent: allow reusing existing certs
* 0bf41e804e89937fc72502cfbe1363dd7591675e renew agent: always export CSR on IPA CA certificate renewal
* 21f4cbf8da8091b898fc8032fff65e821223d042 renew agent: get rid of virtual profiles
* b03ede87963bc5933691c9e3f88768e1bf92736f ipa-cacert-manage: add --external-ca-type
ipa-4-5:

* 36fc44b90ceb9e98abd93a3abb1e5b8d18df6ff0 renew agent: respect CA renewal master setting
* b55dd9cee5c2161002f56c63d7e0ae86e792fbbd server upgrade: always fix certmonger tracking request
* 4a01114f1e49fd73e88e2d9f1512a11cbab0176e cainstance: use correct profile for lightweight CA certificates
* 920d56a8f0321c4b092da6c173961c82aa1d6bd3 renew agent: allow reusing existing certs
* 25b0a9cf6c60c709cacb74ad188cd6e91d4b60ea renew agent: always export CSR on IPA CA certificate renewal
* bb952827b84d7b47ffd77549b3a7c9da2fe537ae renew agent: get rid of virtual profiles
* c56d12aeaccb455a193271a31362b7412b2d2e60 ipa-cacert-manage: add --external-ca-type
"""

See the full comment at https://github.com/freeipa/freeipa/pull/728#issuecomment-301435675