URL: https://github.com/freeipa/freeipa/pull/813
Title: #813: Add Subject Key Identifier to CA cert validity check

frasertweedale commented:
@stlaz I don't think backport to 4.5 is essential.  This issue is something 
that should be
rare in practice, i.e. if a proper CA implementation signs the CSR (e.g.
MS/AD-CS) the SKI extension will be there.

See the full comment at 
FreeIPA-devel mailing list -- freeipa-devel@lists.fedorahosted.org
To unsubscribe send an email to freeipa-devel-le...@lists.fedorahosted.org

Reply via email to