<html> <head> <meta http-equiv="content-type" content="text/html; charset=ISO-8859-1"> </head> <body bgcolor="#FFFFFF" text="#000000"> The attached patch addresses the following TRAC ticket: <ul> <li><a class="moz-txt-link-freetext" href="https://fedorahosted.org/pki/ticket/667">https://fedorahosted.org/pki/ticket/667</a> TRAC Ticket #667 - provide option for ca-less drm install</li> </ul> Unlike the previous patch which did not utilize a security domain and utilized the legacy GUI panel configuration, this patch only pertains to the non-GUI 'pkispawn' installation/configuration process as documented at: <ul> <li><a class="moz-txt-link-freetext" href="http://pki.fedoraproject.org/wiki/Stand-alone_PKI_Subsystems">http://pki.fedoraproject.org/wiki/Stand-alone_PKI_Subsystems</a></li> </ul> Using this code, I have successfully installed a stand-alone DRM utilizing a separate PKI CA as my external CA for testing purposes. Should this code be approved, I will add the following: <ul> <li>update the 'pkispawn' man page</li> <li>add similar default values as parameters to OCSP</li> </ul> At this stage, this code has not been tested to see if a DRM can be successfully cloned from a Stand-Alone DRM. -- Matt </body> </html>