[freeipa PR#1700][opened] Allow issuing certificates with IP addresses in subjectAltName

[ipilcher]

   URL: https://github.com/freeipa/freeipa/pull/1700
Author: ipilcher
 Title: #1700: Allow issuing certificates with IP addresses in subjectAltName
Action: opened

PR body:
"""
Allow issuing certificates with IP addresses in the subject
alternative name (SAN), if all of the following are true.

* One of the DNS names in the SAN resolves to the IP address
  (possibly through a CNAME).
* All of the DNS entries in the resolution chain are managed by
  this IPA instance.
* The IP address has a (correct) reverse DNS entry that is managed
  by this IPA instance
"""

To pull the PR as Git branch:
git remote add ghfreeipa https://github.com/freeipa/freeipa
git fetch ghfreeipa pull/1700/head:pr1700
git checkout pr1700