Allow ACME PKI issuer to specify authority to issue certificates #4902
Comments
abbra
added a commit
to abbra/pki
that referenced
this issue
Nov 18, 2024
Allow issuing ACME certificates using a specific authority. This would allow FreeIPA to specify a particular subCA to handle ACME certificates. Fixes: dogtagpki#4902 Signed-off-by: Alexander Bokovoy <[email protected]>
abbra
added a commit
to abbra/pki
that referenced
this issue
Nov 18, 2024
Allow issuing ACME certificates using a specific authority. This would allow FreeIPA to specify a particular subCA to handle ACME certificates. Fixes: dogtagpki#4902 Signed-off-by: Alexander Bokovoy <[email protected]>
abbra
added a commit
to abbra/pki
that referenced
this issue
Nov 18, 2024
Allow issuing ACME certificates using a specific authority. This would allow FreeIPA to specify a particular subCA to handle ACME certificates. Fixes: dogtagpki#4902 Signed-off-by: Alexander Bokovoy <[email protected]>
abbra
added a commit
to abbra/pki
that referenced
this issue
Nov 18, 2024
Allow issuing ACME certificates using a specific authority. This would allow FreeIPA to specify a particular subCA to handle ACME certificates. Fixes: dogtagpki#4902 Signed-off-by: Alexander Bokovoy <[email protected]>
abbra
added a commit
to abbra/pki
that referenced
this issue
Nov 18, 2024
Allow issuing ACME certificates using a specific authority. This would allow FreeIPA to specify a particular subCA to handle ACME certificates. Fixes: dogtagpki#4902 Signed-off-by: Alexander Bokovoy <[email protected]>
fmarco76
pushed a commit
that referenced
this issue
Nov 18, 2024
Allow issuing ACME certificates using a specific authority. This would allow FreeIPA to specify a particular subCA to handle ACME certificates. Fixes: #4902 Signed-off-by: Alexander Bokovoy <[email protected]>
abbra
added a commit
to abbra/pki
that referenced
this issue
Nov 19, 2024
Fixes: dogtagpki#4902 Signed-off-by: Alexander Bokovoy <[email protected]>
fmarco76
pushed a commit
that referenced
this issue
Nov 21, 2024
Fixes: #4902 Signed-off-by: Alexander Bokovoy <[email protected]>
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
It is currently not possible to issue ACME certificates using a particular CA authority. In FreeIPA case this makes it impossible to designate a particular subCA to issue ACME certificates and allow individual management of the certificate profiles associated with the CA.
This is due to ACME Issuer class always passing 'null' to both
aidandadnwhen callingCACertClient.enrollRequest()method.The text was updated successfully, but these errors were encountered: