On 4/8/2016 7:32 AM, Fraser Tweedale wrote:
On Fri, Apr 08, 2016 at 01:34:24AM -0500, Endi Sukma Dewata wrote:
> For backward compatibility the pki pkcs12-import has been modified
> to generate default nicknames and trust flags for CA certificates
> if they are not specified in the PKCS #12 file. The PKCS12Util was
> also modified to find the certificate corresponding to a key more
> accurately using the local ID instead of the subject DN.
>
> The configuration servlet has been modified to provide better
> debugging information when updating the security domain.
>
>
https://fedorahosted.org/pki/ticket/2255
>
> --
> Endi S. Dewata
>
ACK. This patch has made my dreams** come true.
** lightweight CA key replication
Thanks! Pushed to master and 10.2 branch.
--
Endi S. Dewata