[Pki-devel] [PATCH] 773 Migrating system certificates.

Endi Sukma Dewata edewata at redhat.com
Wed Jun 15 21:36:49 UTC 2016


Attached is a preliminary patch to provide a mechanism to import all 
existing CA system certificates into a new CA instance. It's not ready 
to be checked in yet. It's posted for evaluation only.

Here's the doc:

http://pki.fedoraproject.org/wiki/Installing_CA_with_Existing_System_Certificates

The patch has only been tested with PKCS #12 installation. It has not 
been tested with HSM. Also currently it breaks the external CA case. 
Nevertheless, I think it's pretty close to complete, but it will need 
more thorough testing.

-- 
Endi S. Dewata
-------------- next part --------------
A non-text attachment was scrubbed...
Name: pki-edewata-0773-Migrating-system-certificates.patch
Type: text/x-patch
Size: 19982 bytes
Desc: not available
URL: <http://listman.redhat.com/archives/pki-devel/attachments/20160615/b2ab9646/attachment.bin>


More information about the Pki-devel mailing list