URL:
https://github.com/freeipa/freeipa/pull/3190
Author: frasertweedale
Title: #3190: add test for external CA key size sanity check
Action: opened
PR body:
"""
We recently added validation of externally-signed CA certificate to ensure
certificates signed by external CAs with too-small keys
(according to system crypto policy) are rejected.
Add an integration test that attempts to renew with a 1024-bit external CA,
and asserts failure.
Part of:
https://pagure.io/freeipa/issue/7761
"""
To pull the PR as Git branch:
git remote add ghfreeipa
https://github.com/freeipa/freeipa
git fetch ghfreeipa pull/3190/head:pr3190
git checkout pr3190