Re: [Pki-users] Dogtag - subjectAltName not correctly substituted: $request.requestor_email$
Hi,
This happens because of the policy number 8 of the RA-Agent
authenticated Agent User Certificate Enrollment profile (caRAagentCert).
You can completely remove this policy as a workaround. I did that on our
CA.
This is also a problem when you use a certificate in MS Office Outlook
2007. There if you receive a signed email from a user it displays
"Signed by" as "$request.requestor_email$" where it suppose to be the
senders email.
Regards,
Harshana
On 09/21/2010 02:58 AM, Frederic d'Huart wrote:
FC12 latest update.
pki-ca v1.3.6-1.fc12 and pki-ra v 1.3.1-1.fc12
yum repo fetch from: http://pki.fedoraproject.org/pki/download/pki/pki.repo
When trying to generate a user certificate using the RA end user
interface, I have notice the subjectAltName was not substituted correctly.
My user certs always display:
X509v3 Subject Alternative Name:
email:$request.requestor_email$
The only reference found was related to RH Cert Manager on the following
link:
http://www.redhat.com/docs/manuals/cert-system/8.0/rel-notes/html/Release...
defined as Bug N° 238039 but no workaround proposed.
Does somebody knows how to fix this issue ?
Thank you.
_______________________________________________
Pki-users mailing list
Pki-users(a)redhat.com
https://www.redhat.com/mailman/listinfo/pki-users
Attachments:
- smime.p7s (application/pkcs7-signature — 3.9 KB)