[Pki-devel] [pki-devel][PATCH] 0076-MAN-Apply-generateCRMFRequest-removed-from-Firefox-w.patch

John Magne jmagne at redhat.com
Thu Jul 14 18:42:36 UTC 2016


 [MAN] Apply 'generateCRMFRequest() removed from Firefox'
 workarounds to appropriate 'pki' man page

Ticket #1285 

This fix will involve the following changes to the source tree.

1. Fixes to the CS.cfg to add two new cert profiles.
2. Make the caDualCert.cfg profile invisible since it has little chance of
working any more in Firefox.
3. Create caSigningUserCert.cfg and caSigningECUserCert.cfg to allow the CLI
to have convenient profiles from which to enroll signing ONLY certificates.

To go along with this I have filed a downstream release note bug that shows exactly how to
deploy the new  profile to separately create one signing cert and one encryption cert (with archival),
which allows one to accomplish what the formater caDualCert profile used to do when Firefox supported it.
-------------- next part --------------
A non-text attachment was scrubbed...
Name: 0076-MAN-Apply-generateCRMFRequest-removed-from-Firefox-w.patch
Type: text/x-patch
Size: 16735 bytes
Desc: not available
URL: <http://listman.redhat.com/archives/pki-devel/attachments/20160714/d266ebc0/attachment.bin>


More information about the Pki-devel mailing list