Red Hat Bugzilla – Bug 1466065
CC: Add config knob to disable lightweight CAs
Last modified: 2017-09-25 18:03:50 EDT
It might be useful, especially for Common Criteria, to have a config
knob for disabling lightweight CAs.
Does this mean that if we don't "disable" lightweight CAs, they are created by default? if they are not created by default, then for CC we could just put in CC installation guide to warn people not to use it.
No lightweight CAs get created by default; but by default a lightweight
CA *record* (database entry) does get created for the main CA. Operationally
this has no effect if you are not using lightweight CAs - it's just "there".
Per CS/DS Meeting 09/25/2017: Close WONTFIX