[Freeipa-devel] [freeipa PR#3764][opened] krainstance: set correct issuer DN in uid=ipakra entry

[frasertweedale]

   URL: https://github.com/freeipa/freeipa/pull/3764
Author: frasertweedale
 Title: #3764: krainstance: set correct issuer DN in uid=ipakra entry
Action: opened

PR body:
"""
If IPA CA has custom subject DN (not "CN=Certificate
Authority,{subject_base}"), the uid=ipakra people entry gets an
incorrect 'description' attribute.  The issuer DN in the
'description' attribute is based on the aforementioned pattern,
instead of the actual IPA CA subject DN.

Update KRAInstance.configure_instance() to require the CA subject DN
argument.  Update ipaserver.install.kra.install() to pass the CA
subject DN.

Fixes: https://pagure.io/freeipa/issue/8084
"""

To pull the PR as Git branch:
git remote add ghfreeipa https://github.com/freeipa/freeipa
git fetch ghfreeipa pull/3764/head:pr3764
git checkout pr3764