URL:
https://github.com/freeipa/freeipa/pull/1002
Author: frasertweedale
Title: #1002: Fix external renewal for CA with non-default subject DN
Action: opened
PR body:
"""
When running ``ipa-cacert-manage renew --external-ca`` with an IPA
CA having a subject DN that does not correspond to ``CN=Certificate
Authority, {subject-base}``, the CSR for submission to the external
CA does not generated. dogtag-ipa-ca-renew-agent-submit is wrongly
assuming the default form of the CA subject DN.
Update dogtag-ipa-ca-renew-agent-submit to look up the actual
subject DN.
Fixes:
https://pagure.io/freeipa/issue/7123
"""
To pull the PR as Git branch:
git remote add ghfreeipa
https://github.com/freeipa/freeipa
git fetch ghfreeipa pull/1002/head:pr1002
git checkout pr1002