[Freeipa-interest] Interest in certificate management functions in IPA

[Karl Wirth]

Hello,

One of the things we have talked about for IPAv2 is including some 
certificate system functionality.   The idea would be that an admin 
could join a machine to an IPA server realm and upon join IPA would 
issue the machine a cert.  It would also manage that cert -- renewing it 
automatically when needed. 

Do you have interest in this functionality?
If so, for certs for what applications and use cases?
Do you have something in place today (like your own openssl based simple 
PKI) that you would be looking to replace?
How important do you think this is vs. just leveraging kerberos for 
these kinds of functions?

Regards,
Karl