From b8016807ebb95b97f0a4631574be484371f4dcd0 Mon Sep 17 00:00:00 2001 From: Rob Crittenden Date: Fri, 18 Dec 2009 11:01:00 -0500 Subject: Use the caIPAserviceCert profile for issuing service certs. This profile enables subject validation and ensures that the subject that the CA issues is uniform. The client can only request a specific CN, the rest of the subject is fixed. This is the first step of allowing the subject to be set at installation time. Also fix 2 more issues related to the return results migration. --- ipaserver/plugins/dogtag.py | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) (limited to 'ipaserver') diff --git a/ipaserver/plugins/dogtag.py b/ipaserver/plugins/dogtag.py index 710a50a3d..9b799d45d 100644 --- a/ipaserver/plugins/dogtag.py +++ b/ipaserver/plugins/dogtag.py @@ -1511,7 +1511,7 @@ class ra(rabase.rabase): http_status, http_reason_phrase, http_headers, http_body = \ self._sslget('/ca/ee/ca/profileSubmit', self.env.ca_ee_port, - profileId='caRAserverCert', + profileId='caIPAserviceCert', cert_request_type=request_type, cert_request=csr, xml='true') -- cgit