<html>
<head>
<meta content="text/html; charset=ISO-8859-1"
http-equiv="Content-Type">
</head>
<body bgcolor="#FFFFFF" text="#000000">
If you meant the following two:<br>
<a class="moz-txt-link-freetext"
href="https://fedorahosted.org/pki/ticket/1190">https://fedorahosted.org/pki/ticket/1190</a>
CA: issuer DN encoding not preserved at issuance with signing cert
signed by an external CA
<br>
<a class="moz-txt-link-freetext"
href="https://fedorahosted.org/pki/ticket/1110">https://fedorahosted.org/pki/ticket/1110</a>
- pkispawn (configuration) does not provide CA extensions in
subordinate certificate signing requests (CSR)
<br>
<br>
They have just recently been fixed upstream so I imagine you could
use Microsoft CA now. Theoretically any other CA can be used as an
external CA, but if you run into issues, please feel free to report.<br>
<br>
Christina<br>
<br>
<br>
<div class="moz-cite-prefix">On 10/27/2014 12:15 AM, kritee jhawar
wrote:<br>
</div>
<blockquote
cite="mid:CAGJVne1nUqkSEyZHpYEDpo-4em9yZY699gEgHQxRuhTKxa9iLQ@mail.gmail.com"
type="cite">
<div dir="ltr">Hi
<div><br>
</div>
<div>In my recent thread i read that there is a bug due to which
Microsoft CA can't work as external CA for dogtag.</div>
<div>Can OpenSSL be used ? </div>
<div><br>
</div>
<div>Thanks</div>
<div>Kritee</div>
</div>
<br>
<fieldset class="mimeAttachmentHeader"></fieldset>
<br>
<pre wrap="">_______________________________________________
Pki-users mailing list
<a class="moz-txt-link-abbreviated" href="mailto:Pki-users@redhat.com">Pki-users@redhat.com</a>
<a class="moz-txt-link-freetext" href="https://www.redhat.com/mailman/listinfo/pki-users">https://www.redhat.com/mailman/listinfo/pki-users</a></pre>
</blockquote>
<br>
</body>
</html>