Title: #534: Move csrgen templates into ipaclient package
I think this is a much better way to make it configurable than how I had it,
and the implementation looks good to me. Thanks!
See the full comment at
Manage your subscription for the Freeipa-devel mailing list:
Contribute to FreeIPA: http://www.freeipa.org/page/Contribute/Code