[Pki-users] keygen support in RA

[Mike Helm]

Mike Helm writes:
> Andrew Wnuk writes:
> > There are keygen samples in current RA and CA UI but they were only 

We're good.

My colleague, who understands the CA & the profile framework, added
a subject parameter & extended the profile we were using; I added
this parameter to the package I was posting to the CA, so the CA
now picks up the right subject name and signs good certificates.

I believe the UI on the CA will support keygen platforms, but the
RA wasn't doing this.  The CA may not support them well or completely
but I think it supported the one that is the most important to us
(Safari on MacOS).  The RA didn't, tho, which was not good.

I need to do some housecleaning before I provide a patch.  I think the
things we did could be generalized but at the moment we are only 
interested in some very basic certificate attributes & that is probably
as much as I will do.  I would certainly like to have a review & 
advice on the best way to do this - more in a few weeks.

Thanks, ==mwh
Michael Helm
ESnet/LBNL