Hi Christina <div><br></div><div>I was undertaking this activity last month where Microsoft CA didn&#39;t work out but Dogtag as external CA did. </div><div><br></div><div>While using Microsoft CA or OpenSSL CA, pki spawn goes through without any error but dogtag stops communications to 389ds. Upon calling the rest Api /ca/rest/certs I get a &quot;PKIException error listing the certs&quot;. </div><div><br></div><div>Is there a particular format for the ca cert chain that we need to provide ? I was trying to reverse engineer the chain provided by dogtag. </div><div><br></div><div>Thanks </div><div>Kritee<span></span></div><div><br></div><div><br><br>On Monday, 27 October 2014, Christina Fu &lt;<a href="mailto:cfu@redhat.com">cfu@redhat.com</a>&gt; wrote:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">
  
    
  
  <div bgcolor="#FFFFFF" text="#000000">
    If you meant the following two:<br>
    <a href="https://fedorahosted.org/pki/ticket/1190" target="_blank">https://fedorahosted.org/pki/ticket/1190</a>
    CA: issuer DN encoding not preserved at issuance with signing cert
    signed by an external CA
    <br>
    <a href="https://fedorahosted.org/pki/ticket/1110" target="_blank">https://fedorahosted.org/pki/ticket/1110</a>
    - pkispawn (configuration) does not provide CA extensions in
    subordinate certificate signing requests (CSR)
    <br>
    <br>
    They have just recently been fixed upstream so I imagine you could
    use Microsoft CA now.  Theoretically any other CA can be used as an
    external CA, but if you run into issues, please feel free to report.<br>
    <br>
    Christina<br>
    <br>
    <br>
    <div>On 10/27/2014 12:15 AM, kritee jhawar
      wrote:<br>
    </div>
    <blockquote type="cite">
      <div dir="ltr">Hi
        <div><br>
        </div>
        <div>In my recent thread i read that there is a bug due to which
          Microsoft CA can&#39;t work as external CA for dogtag.</div>
        <div>Can OpenSSL be used ? </div>
        <div><br>
        </div>
        <div>Thanks</div>
        <div>Kritee</div>
      </div>
      <br>
      <fieldset></fieldset>
      <br>
      <pre>_______________________________________________
Pki-users mailing list
<a href="javascript:_e(%7B%7D,&#39;cvml&#39;,&#39;Pki-users@redhat.com&#39;);" target="_blank">Pki-users@redhat.com</a>
<a href="https://www.redhat.com/mailman/listinfo/pki-users" target="_blank">https://www.redhat.com/mailman/listinfo/pki-users</a></pre>
    </blockquote>
    <br>
  </div>

</blockquote></div>