<html>
  <head>
    <meta content="text/html; charset=ISO-8859-1"
      http-equiv="Content-Type">
  </head>
  <body bgcolor="#FFFFFF" text="#000000">
    <div class="moz-cite-prefix">On 04/15/2013 10:20 AM, Petr Viktorin
      wrote:<br>
    </div>
    <blockquote cite="mid:516BB846.10704@redhat.com" type="cite">Hello,
      <br>
      this fixes incorrect descriptions of the --external_cert_file
      & --external_ca_file options.
      <br>
      <br>
      <br>
      <a class="moz-txt-link-freetext" href="https://fedorahosted.org/freeipa/ticket/3523">https://fedorahosted.org/freeipa/ticket/3523</a>
      <br>
      <br>
      <br>
      <fieldset class="mimeAttachmentHeader"></fieldset>
      <br>
      <pre wrap="">_______________________________________________
Freeipa-devel mailing list
<a class="moz-txt-link-abbreviated" href="mailto:Freeipa-devel@redhat.com">Freeipa-devel@redhat.com</a>
<a class="moz-txt-link-freetext" href="https://www.redhat.com/mailman/listinfo/freeipa-devel">https://www.redhat.com/mailman/listinfo/freeipa-devel</a></pre>
    </blockquote>
    <br>
    There are also 3 error messages in install/tools/ipa-server-install,
    that refer to <br>
    PKCS#10 certificates. Do we also need to fix these?<br>
    <br>
    [akrivoka@server freeipa]$ git grep 'PKCS#10'
    install/tools/ipa-server-install<br>
    install/tools/ipa-server-install:            print "Can't load the
    PKCS#10 certificate: %s." % str(e)<br>
    install/tools/ipa-server-install:            print "Subject of the
    PKCS#10 certificate is not correct (got %s, expected %s)." %
    (certsubject, wantsubject)<br>
    install/tools/ipa-server-install:            print "The PKCS#10
    certificate is not signed by the external CA (unknown issuer %s)." %
    certissuer<br>
    <br>
    <br>
    <br>
    <pre class="moz-signature" cols="72">-- 
Regards,

Ana Krivokapic
Associate Software Engineer
FreeIPA team
Red Hat Inc.</pre>
  </body>
</html>