Change the subject of the RA to not confuse dogtag users. We used 'RA Subsystem' and this might confuse some to think we're using the dogtag RA which we are not.

This won't affect existing installations, only new ones.
>From 56fef3a2b2b8fcfe684915de220d88e5d6073f0e Mon Sep 17 00:00:00 2001
From: Rob Crittenden <>
Date: Sat, 16 Jul 2011 13:31:12 -0400
Subject: [PATCH] Set nickname of the RA to 'IPA RA' to avoid confusion with dogtag RA

The old nickname was 'RA Subsystem' and this may confuse some users
with the dogtag RA subsystem which we do not use.

This will only affect new installs. Existing installations will
continue to work fine.
 ipaserver/install/ |    4 ++--
 1 files changed, 2 insertions(+), 2 deletions(-)

diff --git a/ipaserver/install/ b/ipaserver/install/
index 121b651bcc962ff3d2c317e164ca044da30a5e7b..3561dc9e43522532bc62a74b85a7c0e3baf7b5d0 100644
--- a/ipaserver/install/
+++ b/ipaserver/install/
@@ -846,7 +846,7 @@ class CAInstance(service.Service):
         ('usertype', "agentType"),
         ('userstate', "1"),
         ('userCertificate', decoded),
-        ('description', '2;%s;CN=Certificate Authority,%s;CN=RA Subsystem,%s' % (str(self.requestId), self.subject_base, self.subject_base)),]
+        ('description', '2;%s;CN=Certificate Authority,%s;CN=IPA RA,%s' % (str(self.requestId), self.subject_base, self.subject_base)),]
         ld.add_s(entry_dn, entry)
@@ -964,7 +964,7 @@ class CAInstance(service.Service):
         # Generate our CSR. The result gets put into stdout
-            (stdout, stderr, returncode) = self.__run_certutil(["-R", "-k", "rsa", "-g", "2048", "-s", "CN=RA Subsystem,%s" % self.subject_base, "-z", noise_name, "-a"])
+            (stdout, stderr, returncode) = self.__run_certutil(["-R", "-k", "rsa", "-g", "2048", "-s", "CN=IPA RA,%s" % self.subject_base, "-z", noise_name, "-a"])

Freeipa-devel mailing list

Reply via email to