diff options
| author | Fraser Tweedale <ftweedal@redhat.com> | 2015-08-13 01:42:06 -0400 |
|---|---|---|
| committer | Jan Cholasta <jcholast@redhat.com> | 2015-08-19 12:31:03 +0200 |
| commit | 02969d09d868907c6d2d5b2aee3089f2f5540dda (patch) | |
| tree | 21e03bb9f66db8a212465bba1fbf633da2397953 /ipapython | |
| parent | 556e97bf23657cb11d93c7d8a37b5ed4840fdb7a (diff) | |
| download | freeipa-02969d09d868907c6d2d5b2aee3089f2f5540dda.tar.gz freeipa-02969d09d868907c6d2d5b2aee3089f2f5540dda.tar.xz freeipa-02969d09d868907c6d2d5b2aee3089f2f5540dda.zip | |
cert-request: remove allowed extensions check
cert-request currently permits a limited number of request
extensions; uncommon and esoteric extensions are prohibited and this
limits the usefulness of custom profiles.
The Dogtag profile has total control over what goes into the final
certificate and has the option to reject request based on the
request extensions present or their values, so there is little
reason to restrict what extensions can be used in FreeIPA. Remove
the check.
Fixes: https://fedorahosted.org/freeipa/ticket/5205
Reviewed-By: Jan Cholasta <jcholast@redhat.com>
Diffstat (limited to 'ipapython')
0 files changed, 0 insertions, 0 deletions