[Pki-devel] [PATCH] 698 Added support for cloning 3rd-party CA certificates.

[Endi Sukma Dewata]

The installation code has been modified such that it imports all
CA certificates from the PKCS #12 file for cloning before the
server is started using certutil. The user certificates will
continue to be imported using the existing JSS code after the
server is started. This is necessary since JSS is unable to
preserve the CA certificate nicknames.

The PKCS12Util has been modified to support multiple certificates
with the same nicknames.

The pki pkcs12-cert-find has been modified to show certificate ID
and another field indicating whether the certificate has a key.

The pki pkcs12-cert-export has been modified to accept either
certificate nickname or ID.

The pki pkcs12-import has been modified to provide options for
importing only user certificates or CA certificates.

https://fedorahosted.org/pki/ticket/1742

-- 
Endi S. Dewata
-------------- next part --------------
A non-text attachment was scrubbed...
Name: pki-edewata-0698-Added-support-for-cloning-3rd-party-CA-certificates.patch
Type: text/x-patch
Size: 32292 bytes
Desc: not available
URL: <http://listman.redhat.com/archives/pki-devel/attachments/20160318/8c59f76c/attachment.bin>