here is an update to certificate profile test plan based on
the latest version of the design document [1,2].
The test itself is merely CRUD test at the moment.
To write a functional test for the feature, I will need to write a test
for CA ACLs (to implement the caacl tracker class). Together the
trackers for these two (once Sub CAs are implemented, three)
classes  can be used to extend cert-request tests as to check
whether the ACLs and profiles are being enforced.
the show command in the design has an 'output' option to retrieve
the profile itself. Will this be implemented or did you just forget to
remove it from the design page?
Manage your subscription for the Freeipa-devel mailing list:
Contribute to FreeIPA: http://www.freeipa.org/page/Contribute/Code