[Freeipa-devel] [PATCH] 260 allow a CA to be regenerated

[Simo Sorce]

On Fri, 2009-08-28 at 13:38 -0400, Rob Crittenden wrote:
> Add an option so we can generate a new cert for a CA. This is so we
> can 
> ultimately fix the missing CA basic constraint but it will also allow 
> the CA to be renewed.
> 
> This also fixes a small bug when generating the CA basic constraint.
> It 
> wasn't getting set as Critical because somehow I had it sending a 7 
> instead of a y :-(

Ack.

Simo.

-- 
Simo Sorce * Red Hat, Inc * New York