<html>
<head>
<meta content="text/html; charset=ISO-8859-1"
http-equiv="Content-Type">
</head>
<body bgcolor="#FFFFFF" text="#000000">
I have replied to your original email. Please let us know whether
you have tried the existing method I suggested in the email and what
the result was.<br>
<br>
thanks,<br>
Christina<br>
<br>
<div class="moz-cite-prefix">On 06/17/2014 10:54 PM, Fraser Tweedale
wrote:<br>
</div>
<blockquote
cite="mid:20140618055456.GK11349@dhcp-40-8.bne.redhat.com"
type="cite">
<pre wrap="">On Mon, Jun 16, 2014 at 05:57:03PM +1000, Fraser Tweedale wrote:
</pre>
<blockquote type="cite">
<pre wrap="">Hi all,
These patches implement support for copying the ExtendedKeyUsage
extension from a signing request to the certificate, addressing
<a class="moz-txt-link-freetext" href="https://fedorahosted.org/freeipa/ticket/2915">https://fedorahosted.org/freeipa/ticket/2915</a>.
My email from a few days ago goes into a bit more detail and puts
forward the question of whether this is even a reasonable approach
to solving #2915. Since I haven't yet received any feedback I
figured I'd go ahead and publish the patches.
Patch 0002:
Add appropriate ExtendedKeyUsage constraints to all profiles that
support this extension. To check that none were missed:
$ ag -l extendedKeyUsageExtDefaultImpl \
| xargs ag -L extendedKeyUsageExtConstraintImpl
Patch 0003:
The actual fix: EKU extension is copied from signing request, or the
default is used when the extension does not appear in the request.
</pre>
</blockquote>
<pre wrap="">
New patch versions; fixed commit author (hadn't changed .gitconfig
from personal email address :). Rebased also, but no other changes.
</pre>
<br>
<fieldset class="mimeAttachmentHeader"></fieldset>
<br>
<pre wrap="">_______________________________________________
Pki-devel mailing list
<a class="moz-txt-link-abbreviated" href="mailto:Pki-devel@redhat.com">Pki-devel@redhat.com</a>
<a class="moz-txt-link-freetext" href="https://www.redhat.com/mailman/listinfo/pki-devel">https://www.redhat.com/mailman/listinfo/pki-devel</a></pre>
</blockquote>
<br>
</body>
</html>