Re: [Pki-devel] Dogtag
On 06/13/12 15:02, Bob St. Clair wrote:
All,
Is this internal only?
No - pki-devel is a public mailing list
I have a customer that wants to use smart cards in their own linux
environment. They will need to issue their own certs on their smart
cards.
Since certificate system has certain requirements... Can a customer
use Fedora dogtag in a RHEL 6.2 IDM environment? It would not be
supported, but would it work?
A non-GUI set of Dogtag 9 "pki-core" packages (including "pki-ca") are
part of the RHEL 6 release as used by IPA, but they are not intended to
be used as a stand-alone certificate system.
We don't presently supply EPEL packages for the Dogtag GUI nor any of
the other PKI subsystems for RHEL 6, nor are we likely to for the
foreseeable future.
A customer would simply need to install any additional packages and see
if they work; they would need to replace the "ipa-theme" non-GUI
packages with "dogtag-theme" GUI packages, and add the Fedora versions
of "pki-kra", "pki-ocsp", "pki-tks",
"pki-console", "pki-ra", and/or
"pki-tps" packages as needed to support the other PKI subsystems.
There might be an issue if the customer attempted to use some of the
Fedora "pki-core" packages such as "pki-selinux" as these may be based
upon a version of SELinux that is newer in Fedora. Less likely, although
possible, the "pki-tps" compiled for certain versions of Fedora could be
non-compatible with the RHEL 6 platform.
I do not know if replacement of the non-GUI packages with GUI packages
would disable the customer's ability to utilize IPA on their RHEL 6
installation (I would not think so, but I have never tried it).
-- Matt
Thanks,
Bob