[Freeipa-devel] [PATCH] 72 Fix uses of O=REALM instead of the configured certificate subject base

[Rob Crittenden]

Jan Cholasta wrote:
> https://fedorahosted.org/freeipa/ticket/2521
>
> Honza

You can still set a custom subject base for selfsign installations so 
you need a special case in valid_issuer(). I wonder if this comparison 
should be case insensitive too.

It may also be an optimization to cache the base in subject_base(). It 
can't change after install time so it should be valid the entire 
lifetime of the server.

rob