On Fri, Jun 03, 2016 at 05:17:12PM +0200, Petr Vobornik wrote:
> On 05/10/2016 04:52 PM, Pavel Vomacka wrote:
> > Hi all,
> > 
> > please review the patch for webUI which adds SAN names into 'Issue new
> > certificate' dialog. The SAN names are mentioned only in dialogs for
> > requesting for host and service certificate, according to the design page:
> > http://www.freeipa.org/page/V4/RFC_2818_certificate_compliance . I'm not
> > sure whether this change provides enough information. If you think that
> > we should add more information to these dialogs or even extend also
> > dialog on Authentication -> Certificates page, just let me know.
> > 
> 
> Should we also include SAN for user certs?
> 
> E.g.:
>   -7 emailAddrs
> 
> Adding Fraser to loop...
> 
> Otherwise the patch looks good.
>
We *could* add rfc822Name example for user certs, but I don't think
we should.

Especially for user certs, we might as well hold off because the
"CSR templates" feature is intended to relieve users of having to
generate CSRs themselves.

Cheers,
Fraser

-- 
Manage your subscription for the Freeipa-devel mailing list:
https://www.redhat.com/mailman/listinfo/freeipa-devel
Contribute to FreeIPA: http://www.freeipa.org/page/Contribute/Code

Reply via email to