URL:
https://github.com/freeipa/freeipa/pull/813
Title: #813: Add Subject Key Identifier to CA cert validity check
frasertweedale commented:
"""
@stlaz I don't think backport to 4.5 is essential. This issue is something that
should be
rare in practice, i.e. if a proper CA implementation signs the CSR (e.g.
MS/AD-CS) the SKI extension will be there.
"""
See the full comment at
https://github.com/freeipa/freeipa/pull/813#issuecomment-304219339