[Freeipa-devel] [PATCH] fix PKCS#12 file import

Martin Nagy mnagy at redhat.com
Sat Jul 12 16:20:53 UTC 2008


Rob Crittenden wrote:
> Fairly major changes to the way PKCS#12 files are handled.
> 
> One can now pass in PKCS#12 files to be installed during initial 
> installation and when a replica is prepared.
> 
> ipa-server-certinstall should finally work as one would expect. This
> can be used to install from a PKCS#12 file post-installation.
> 
> A few gotchas:
> 
> - If you use your own certs you'll need to also get an object signing 
> cert to sign the jar file we use for Firefox auto-config. See the
> docs here 
> http://freeipa.org/page/AdministratorsGuide#Using_Your_Own_Certificate_with_Firefox
> - A PIN is required for all PKCS#12 files
> - When using ipa-server-certinstall services are not automatically 
> restarted after installing a new cert.
> 
> rob

Hi,
there are few minor whitespace issues. Could you search for "[^ ] $"
pattern and fix them?

Martin




More information about the Freeipa-devel mailing list