Re: [Pki-devel] [Freeipa-devel] [DESIGN] Lightweight CA renewal

2016-06-23 Thread Jan Cholasta
support in certmonger (add new 'request' / 'start-tracking' option for CA name, store it in tracking requests, pass it to CA helpers in a new environment variable). Honza -- Jan Cholasta ___ Pki-devel mailing list Pki-devel@redhat.com https://www.redhat.com/mailman/listinfo/pki-devel

Re: [Pki-devel] [Freeipa-devel] [DESIGN] Lightweight CA renewal

2016-06-23 Thread Jan Cholasta
On 9.5.2016 18:27, Petr Vobornik wrote: On 05/09/2016 09:35 AM, Jan Cholasta wrote: Hi, On 6.5.2016 08:01, Fraser Tweedale wrote: Hullo all, FreeIPA Lightweight CAs implementation is progressing well. The remaining big unknown in the design is how to do renewal. I have put my ideas into

Re: [Pki-devel] [Freeipa-devel] [DESIGN] Lightweight CA renewal

2016-06-23 Thread Jan Cholasta
On 18.6.2016 02:38, Fraser Tweedale wrote: On Fri, Jun 17, 2016 at 03:21:07PM +0200, Jan Cholasta wrote: On 17.6.2016 09:34, Fraser Tweedale wrote: On Mon, May 09, 2016 at 09:35:06AM +0200, Jan Cholasta wrote: Hi, On 6.5.2016 08:01, Fraser Tweedale wrote: Hullo all, FreeIPA Lightweight CAs

Re: [Pki-devel] [Freeipa-devel] [DESIGN] Lightweight CA renewal

2016-06-23 Thread Jan Cholasta
On 17.6.2016 09:34, Fraser Tweedale wrote: On Mon, May 09, 2016 at 09:35:06AM +0200, Jan Cholasta wrote: Hi, On 6.5.2016 08:01, Fraser Tweedale wrote: Hullo all, FreeIPA Lightweight CAs implementation is progressing well. The remaining big unknown in the design is how to do renewal. I have