If you meant the following two:
https://fedorahosted.org/pki/ticket/1190 CA: issuer DN encoding not preserved at issuance with signing cert signed by an external CA
https://fedorahosted.org/pki/ticket/1110 - pkispawn (configuration) does not provide CA extensions in subordinate certificate signing requests (CSR)

They have just recently been fixed upstream so I imagine you could use Microsoft CA now. Theoretically any other CA can be used as an external CA, but if you run into issues, please feel free to report.

Christina

On 10/27/2014 12:15 AM, kritee jhawar wrote:

Hi

In my recent thread i read that there is a bug due to which Microsoft CA can't work as external CA for dogtag.

Can OpenSSL be used ?

Thanks

Kritee
_______________________________________________
Pki-users mailing list
Pki-users@redhat.com
https://www.redhat.com/mailman/listinfo/pki-users