[Freeipa-devel] [freeipa PR#245][opened] Allow full customisability of IPA CA subject DN

[frasertweedale]

   URL: https://github.com/freeipa/freeipa/pull/245
Author: frasertweedale
 Title: #245: Allow full customisability of IPA CA subject DN
Action: opened

PR body:
"""
This patchset adds full customisability of CA subject DN apart from
subject base, via the ipa-server-install `--ca-subject` option.  It
also renames ipa-server-install `--subject` option to
`--subject-base`, and adds `--ca-subject` and `--subject-base`
options to ipa-ca-install.

Earlier version of this patchset was previously reviewed by
@jcholast on freeipa-devel:
https://www.redhat.com/archives/freeipa-devel/2016-August/msg00570.html

All review items have been addressed, except for item 9.  The
suggestion will not work because a fair bit of code besides
what's in `ipaserver.install.ca` requires knowing the CA Subject DN
and/or subject base.  So the defaults must be applied close to the
"entry points".

I also carved a few smaller commits out of the main patch (but it is
still pretty big and hairy to review).

https://fedorahosted.org/freeipa/ticket/2614
"""

To pull the PR as Git branch:
git remote add ghfreeipa https://github.com/freeipa/freeipa
git fetch ghfreeipa pull/245/head:pr245
git checkout pr245
-------------- next part --------------
A non-text attachment was scrubbed...
Name: freeipa-pr-245.patch
Type: text/x-diff
Size: 55230 bytes
Desc: not available
URL: <http://listman.redhat.com/archives/freeipa-devel/attachments/20161116/5c57b803/attachment.bin>