search

SilleBille / pki

Dogtag PKI Issues should be reported to the Dogtag PKI Pagure Issues site
https://pagure.io/dogtagpki/issues
GNU General Public License v2.0
1 stars 1 forks source link

RFE: CMC : Pkispawn should be able to request for certificate issuance using CMC during subsystem installation #446

Closed SilleBille closed 4 years ago

SilleBille commented 5 years ago

This issue was migrated from Pagure Issue #2991.Originally filed by mharmsen on 2018-04-17

There should be some mechanism using which while doing pkispawn we should be able request for certificate issuance using CMC .

This way, a user has flexibility to generate certificates using CMC during run time without going through the manual process of generating subsystem certificate as mentioned in https://pki.fedoraproject.org/wiki/PKI_10.4_CMC_Feature_Update_%28RFC5272%29#Examples_.28User_Certificates.29

Maybe some property that we could set in CS.cfg file of subsystems and while contacting CA they request for CMC certs.

Steps to Reproduce:

Refer 

* https://pki.fedoraproject.org/wiki/PKI_10.4_CMC_Feature_Update_%28RFC5272%29#Examples_.28User_Certificates.29