Christina Fu

Thank you @borama I think this looks straight forward. I'm holding off on https://github.com/dogtagpki/pki/pull/542 (pending some more tests) for now so I'll temporarily remove "POSTPKIOperation" from the patch before I...

new associated Bugzilla bug: https://bugzilla.redhat.com/show_bug.cgi?id=2075363

> 1. Yes please add it into all *CMC* profiles by default 2. if not already done, please follow https://bugzilla.redhat.com/show_bug.cgi?id=2105471#c3 to give the code change a quick test and see...

@ckelleyRH sorry I thought you were still online so put the message in the chat room. in the example I gave: PKCS10Client -d /root/.dogtag/pki_bootstrap/certs_db -p SECret.123 -n "" -o noSubject.p10...

@ckelleyRH sorry I missed your other issue. Yes I do know a thing or two about the issue with adding profile with raw format. As a matter of fact, this...

@ckelleyRH I'm a bit lost with the attached patch. So is mConfig pointing to the profiile cfg file? I pulled up the latest master but don't even see mConfig defined...

@ckelleyRH about mConfig .. Ah, yes, of course. Please keep me updated on the test and debugging. Thanks again for taking care of the 100 copies of the bug! ;-)

@ckelleyRH come to think of it, the DN pattern is being parsed using regex so that's why the example I gave on policyset.userCertSet.1.constraint.params.pattern=UID=.* is being parsed correctly. For the new...

OID.2.5.29.17="critical,URI:http://t3f3.example.com" is the subjectAltName extension embedded in the CSR that I attached to the bug. You might want to share your test profile (unless I missed it) so we know...

@jmagne , my memory may be a bit hazy on this, but wasn't there a time when some smart cards had issues with 2048 and that's why we set the...