Description of problem:
Currently many of the enrollment profiles are shared between RSA and ECC certificates. As such the keyUsage extension is not conforming.
This task is to add needed ECC-specific enrollment profiles and make needed adjustments to existing ones for standard conformance.
Version-Release number of selected component (if applicable):
Steps to Reproduce:
* For installation, courtesy of Matt:
* For other profiles, just make sure the new or changed profiles are exercised. For example, for the CMC profiles (new or changed), just put that into the HttpClient config file under servlet.
Author: Christina Fu <email@example.com>
Date: Thu Mar 29 09:59:02 2018 -0700
quick fix on wrong keyType in profile
I tested this Bugzilla on version 10.5.9-5.el7.
I'm able to install CA without the workaround After the CMC request I tested it with different profiles with httpClient.
It working as expected.
Verifying this Bugzilla.
Since the problem described in this bug report should be
resolved in a recent advisory, it has been closed with a
resolution of ERRATA.
For information on the advisory, and where to find the updated
files, follow the link below.
If the solution does not work for you, open a new bug report.