Re: [Freeipa-devel] [PATCH 0001] ipa-server-certinstall should not tell certmonger to track 3rd party certificates

2016-02-07 Thread Thorsten Scherf
On [Wed, 13.01.2016 07:47], Jan Cholasta wrote: Hi Thorsten, thanks for the patch, but unfortunately it isn't as simple as this - if the provided certificate was issued by our CA, we should still track it. As part of installer improvements in 4.4, we plan to always track all certificates, e

Re: [Freeipa-devel] [PATCH 0001] ipa-server-certinstall should not tell certmonger to track 3rd party certificates

2016-01-12 Thread Jan Cholasta
Hi Thorsten, thanks for the patch, but unfortunately it isn't as simple as this - if the provided certificate was issued by our CA, we should still track it. As part of installer improvements in 4.4, we plan to always track all certificates, even 3rd party ones (this way we can have the same

[Freeipa-devel] [PATCH 0001] ipa-server-certinstall should not tell certmonger to track 3rd party certificates

2015-12-15 Thread Thorsten Scherf
>From 13c564e106300f19ba59531ebdf3ba90b7b8ef35 Mon Sep 17 00:00:00 2001 From: Thorsten Scherf Date: Tue, 15 Dec 2015 14:17:26 +0100 Subject: [PATCH] ipa-server-certinstall should not tell certmonger to track 3rd party certs There is no point in tracking a 3rd party cert, as it cannot be renewe