On 03/06/2013 10:57 PM, Rob Crittenden wrote:
> When the CA cert was added via the update plugin we were double-encoding it.
> just need to store the DER value.
> See the ticket for reproduction details.
This works fine. The certificate is now stored correctly in the attribute and
it can be properly read by ldapsearch and also decoded by tools like Apache
Directory Studio. Surprisingly, the double encoded format worked OK in the
ACK. Pushed to master, ipa-3-1.
Freeipa-devel mailing list