URL: https://github.com/freeipa/freeipa/pull/5868 Author: rcritten Title: #5868: Add SHA384withRSA as a certificate signing algorithm Action: opened
PR body: """ It required support in dogtag which was added in 10.5.0.
This is only easily configurable during installation because it will set ca.signing.defaultSigningAlgorithm to the selected algorithm in CS.cfg
The certificate profiles will generally by default set default.params.signingAlg=- which means use the CA default.
So while an existing installation will technically allow SHA384withRSA it will require profile changes and/or changing the defaultSigningAlgorithm in CS.cfg and restarting (completely untested). And that won't affect already issued-certificates.
https://pagure.io/freeipa/issue/8906
Signed-off-by: Rob Crittenden rcritten@redhat.com """
To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/5868/head:pr5868 git checkout pr5868
URL: https://github.com/freeipa/freeipa/pull/5868 Author: rcritten Title: #5868: Add SHA384withRSA as a certificate signing algorithm Action: closed
To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/5868/head:pr5868 git checkout pr5868
freeipa-devel@lists.fedorahosted.org