Re: [Freeipa-devel] [PATCH] 72 Fix uses of O=REALM instead of the configured certificate subject base

2012-03-27 Thread Jan Cholasta
On 26.3.2012 22:17, Rob Crittenden wrote: Jan Cholasta wrote: On 26.3.2012 16:15, Rob Crittenden wrote: Jan Cholasta wrote: https://fedorahosted.org/freeipa/ticket/2521 Honza You can still set a custom subject base for selfsign installations so you need a special case in valid_issuer().

Re: [Freeipa-devel] [PATCH] 72 Fix uses of O=REALM instead of the configured certificate subject base

2012-03-27 Thread Rob Crittenden
Jan Cholasta wrote: On 26.3.2012 22:17, Rob Crittenden wrote: Jan Cholasta wrote: On 26.3.2012 16:15, Rob Crittenden wrote: Jan Cholasta wrote: https://fedorahosted.org/freeipa/ticket/2521 Honza You can still set a custom subject base for selfsign installations so you need a special case

[Freeipa-devel] [PATCH] 72 Fix uses of O=REALM instead of the configured certificate subject base

2012-03-26 Thread Jan Cholasta
https://fedorahosted.org/freeipa/ticket/2521 Honza -- Jan Cholasta From 8c078285b4703f3ddb991665ec4a548b44a3e97d Mon Sep 17 00:00:00 2001 From: Jan Cholasta jchol...@redhat.com Date: Mon, 26 Mar 2012 07:11:41 -0400 Subject: [PATCH] Fix uses of O=REALM instead of the configured certificate

Re: [Freeipa-devel] [PATCH] 72 Fix uses of O=REALM instead of the configured certificate subject base

2012-03-26 Thread Rob Crittenden
Jan Cholasta wrote: https://fedorahosted.org/freeipa/ticket/2521 Honza You can still set a custom subject base for selfsign installations so you need a special case in valid_issuer(). I wonder if this comparison should be case insensitive too. It may also be an optimization to cache the

Re: [Freeipa-devel] [PATCH] 72 Fix uses of O=REALM instead of the configured certificate subject base

2012-03-26 Thread Jan Cholasta
On 26.3.2012 16:15, Rob Crittenden wrote: Jan Cholasta wrote: https://fedorahosted.org/freeipa/ticket/2521 Honza You can still set a custom subject base for selfsign installations so you need a special case in valid_issuer(). For selfsign installations, the issuer is always CN=REALM

Re: [Freeipa-devel] [PATCH] 72 Fix uses of O=REALM instead of the configured certificate subject base

2012-03-26 Thread Jenny Galipeau
On 03/26/2012 11:28 AM, Jan Cholasta wrote: On 26.3.2012 16:15, Rob Crittenden wrote: Jan Cholasta wrote: https://fedorahosted.org/freeipa/ticket/2521 Honza You can still set a custom subject base for selfsign installations so you need a special case in valid_issuer(). For selfsign

Re: [Freeipa-devel] [PATCH] 72 Fix uses of O=REALM instead of the configured certificate subject base

2012-03-26 Thread Rob Crittenden
Jenny Galipeau wrote: On 03/26/2012 11:28 AM, Jan Cholasta wrote: On 26.3.2012 16:15, Rob Crittenden wrote: Jan Cholasta wrote: https://fedorahosted.org/freeipa/ticket/2521 Honza You can still set a custom subject base for selfsign installations so you need a special case in

Re: [Freeipa-devel] [PATCH] 72 Fix uses of O=REALM instead of the configured certificate subject base

2012-03-26 Thread Jenny Galipeau
On 03/26/2012 01:40 PM, Rob Crittenden wrote: Jenny Galipeau wrote: On 03/26/2012 11:28 AM, Jan Cholasta wrote: On 26.3.2012 16:15, Rob Crittenden wrote: Jan Cholasta wrote: https://fedorahosted.org/freeipa/ticket/2521 Honza You can still set a custom subject base for selfsign

Re: [Freeipa-devel] [PATCH] 72 Fix uses of O=REALM instead of the configured certificate subject base

2012-03-26 Thread Rob Crittenden
Jan Cholasta wrote: On 26.3.2012 16:15, Rob Crittenden wrote: Jan Cholasta wrote: https://fedorahosted.org/freeipa/ticket/2521 Honza You can still set a custom subject base for selfsign installations so you need a special case in valid_issuer(). For selfsign installations, the issuer is