URL:
https://github.com/freeipa/freeipa/pull/3023
Author: tiran
Title: #3023: [Backport][ipa-4-7] Add PKI config override option
Action: opened
PR body:
"""
Manual backport of PR #2976
Add an option to override CA and KRA settings passed to pkispawn. The feature allows users
to change key size, signature algorithm, and other parameters. It's a prerequisite for
HSM support.
The patchset also simplifies and improves how IPA creates the pki.ini files that gets
passed to pkispawn.
See pagure.io/freeipa/issue/5608
"""
To pull the PR as Git branch:
git remote add ghfreeipa
https://github.com/freeipa/freeipa
git fetch ghfreeipa pull/3023/head:pr3023
git checkout pr3023