Bug 1364709

Summary:	cert-request: allow DirectoryName SAN
Product:	Red Hat Enterprise Linux 7	Reporter:	Petr Vobornik <pvoborni>
Component:	ipa	Assignee:	IPA Maintainers <ipa-maint>
Status:	CLOSED WONTFIX	QA Contact:	Kaleem <ksiddiqu>
Severity:	unspecified	Docs Contact:
Priority:	unspecified
Version:	7.3	CC:	ftweedal, pvoborni, rcritten
Target Milestone:	rc
Target Release:	---
Hardware:	Unspecified
OS:	Unspecified
Whiteboard:
Fixed In Version:		Doc Type:	If docs needed, set a value
Doc Text:		Story Points:	---
Clone Of:		Environment:
Last Closed:	2016-12-02 06:56:42 UTC	Type:	---
Regression:	---	Mount Type:	---
Documentation:	---	CRM:
Verified Versions:		Category:	---
oVirt Team:	---	RHEL 7.3 requirements from Atomic Host:
Cloudforms Team:	---	Target Upstream Version:
Embargoed:

Description Petr Vobornik 2016-08-06 11:19:44 UTC

This bug is created as a clone of upstream ticket:
https://fedorahosted.org/freeipa/ticket/6112

It is defect of one usage of Sub-CAs - bug 1200731.

The DirectoryName SAN type should be allowed, provided the
value matches the principal's DN in the IPA directory.

Comment 2 Fraser Tweedale 2016-12-02 06:56:42 UTC

Closing WONTFIX.  See discussion at https://github.com/freeipa/freeipa/pull/228.