Bug 234103

Summary:	AEP: try to fetch entire CA chain and import to CAPI/group policy/NTAuthCA stores
Product:	Red Hat Certificate System	Reporter:	Chandrasekar Kannan <ckannan>
Component:	Auto-Enrollment	Assignee:	Matthew Harmsen <mharmsen>
Status:	CLOSED WONTFIX	QA Contact:	Chandrasekar Kannan <ckannan>
Severity:	medium	Docs Contact:
Priority:	medium
Version:	7.3	CC:	benl, cfu, jmagne, mharmsen
Target Milestone:	rc
Target Release:	---
Hardware:	All
OS:	Linux
Whiteboard:
Fixed In Version:		Doc Type:	Bug Fix
Doc Text:		Story Points:	---
Clone Of:		Environment:
Last Closed:	2009-11-06 23:36:51 UTC	Type:	---
Regression:	---	Mount Type:	---
Documentation:	---	CRM:
Verified Versions:		Category:	---
oVirt Team:	---	RHEL 7.3 requirements from Atomic Host:
Cloudforms Team:	---	Target Upstream Version:
Embargoed:
Bug Depends On:
Bug Blocks:	445047

Description Chandrasekar Kannan 2007-03-27 01:05:12 UTC

AEP - auto enrollment proxy. Right now we have too many 
places to import CA certificates. 


1. Local Computer -> Trusted root certificates store
2. Active directory -> domain level group policy
3. publish certs to NTAuthCA store.
4. proxy configuration -> CA certificate to be pasted in base64 format.

We should try to see if we can automate this process. 

The ideal fix would be to specify the redhat CA host/port information
and have the AEP configuration UI fetch the entire CA chain and have
it imported in all the necessary places as required.

Comment 1 Red Hat Bugzilla 2007-11-05 04:21:38 UTC

User sparkins's account has been closed