Re: [Freeipa-devel] FreeIPA Sub-CA: certificate subject

2016-06-28 Thread Martin Kosek
On 06/28/2016 02:05 PM, Fraser Tweedale wrote: > On Tue, Jun 28, 2016 at 12:49:26PM +0200, Martin Kosek wrote: >> On 06/28/2016 12:49 PM, Jan Cholasta wrote: >>> On 28.6.2016 12:33, Martin Kosek wrote: On 06/28/2016 12:23 PM, Fraser Tweedale wrote: > On Tue, Jun 28, 2016 at 11:00:17AM +020

Re: [Freeipa-devel] FreeIPA Sub-CA: certificate subject

2016-06-28 Thread Fraser Tweedale
On Tue, Jun 28, 2016 at 12:49:26PM +0200, Martin Kosek wrote: > On 06/28/2016 12:49 PM, Jan Cholasta wrote: > > On 28.6.2016 12:33, Martin Kosek wrote: > >> On 06/28/2016 12:23 PM, Fraser Tweedale wrote: > >>> On Tue, Jun 28, 2016 at 11:00:17AM +0200, Martin Kosek wrote: > Hi Fraser, > >

Re: [Freeipa-devel] FreeIPA Sub-CA: certificate subject

2016-06-28 Thread Christian Heimes
On 2016-06-28 12:49, Martin Kosek wrote: > On 06/28/2016 12:49 PM, Jan Cholasta wrote: >> On 28.6.2016 12:33, Martin Kosek wrote: >>> On 06/28/2016 12:23 PM, Fraser Tweedale wrote: On Tue, Jun 28, 2016 at 11:00:17AM +0200, Martin Kosek wrote: > Hi Fraser, > > I was testing FreeIPA

Re: [Freeipa-devel] FreeIPA Sub-CA: certificate subject

2016-06-28 Thread Martin Kosek
On 06/28/2016 12:49 PM, Jan Cholasta wrote: > On 28.6.2016 12:33, Martin Kosek wrote: >> On 06/28/2016 12:23 PM, Fraser Tweedale wrote: >>> On Tue, Jun 28, 2016 at 11:00:17AM +0200, Martin Kosek wrote: Hi Fraser, I was testing FreeIPA Sub-CA feature and setup a Sub-CA: CN=C

Re: [Freeipa-devel] FreeIPA Sub-CA: certificate subject

2016-06-28 Thread Jan Cholasta
On 28.6.2016 12:33, Martin Kosek wrote: On 06/28/2016 12:23 PM, Fraser Tweedale wrote: On Tue, Jun 28, 2016 at 11:00:17AM +0200, Martin Kosek wrote: Hi Fraser, I was testing FreeIPA Sub-CA feature and setup a Sub-CA: CN=Certificate Authority,O=VPN,O=DEMO1.FREEIPA.ORG Then I set up ACL and ge

Re: [Freeipa-devel] FreeIPA Sub-CA: certificate subject

2016-06-28 Thread Martin Kosek
On 06/28/2016 12:23 PM, Fraser Tweedale wrote: > On Tue, Jun 28, 2016 at 11:00:17AM +0200, Martin Kosek wrote: >> Hi Fraser, >> >> I was testing FreeIPA Sub-CA feature and setup a Sub-CA: >> >> CN=Certificate Authority,O=VPN,O=DEMO1.FREEIPA.ORG >> >> Then I set up ACL and generated a certificate re

Re: [Freeipa-devel] FreeIPA Sub-CA: certificate subject

2016-06-28 Thread Fraser Tweedale
On Tue, Jun 28, 2016 at 11:00:17AM +0200, Martin Kosek wrote: > Hi Fraser, > > I was testing FreeIPA Sub-CA feature and setup a Sub-CA: > > CN=Certificate Authority,O=VPN,O=DEMO1.FREEIPA.ORG > > Then I set up ACL and generated a certificate request by: > > $ certutil -R -d . -a -g 2048 -s > 'CN