Hello,
Please note that when you make a request for a certificate to
certmonger, it uses different representation of the "Subject" that you
provide to it, based on the storage you aim for (LDAP representation
when storing to NSS DB, X509 representation when storing to a file).
This issue was worked around in
https://github.com/freeipa/freeipa/commit/595f9b64e31dc9e4f035119e834db7e6cb152dce
for FreeIPA and a ticket was created in Pagure:
https://pagure.io/certmonger/issue/62 (you can read more thorough
description there).
Happy coding,
Standa
--
Manage your subscription for the Freeipa-devel mailing list:
https://www.redhat.com/mailman/listinfo/freeipa-devel
Contribute to FreeIPA: http://www.freeipa.org/page/Contribute/Code
