Hi,
On Tue, Apr 2, 2024 at 8:50 PM Travis West via FreeIPA-users <
freeipa-users(a)lists.fedorahosted.org> wrote:
As Rob wrote, it's not a problem that getcert list, OpenssL and NSS
libraries show the subject in a DN order (RFC2253) or DN reverse order, but
I find it suspect that issuer and subject have picked inconsistent order.
In my f35 instance, getcert list shows the following:
issuer: CN=Certificate Authority,O=IPA.TEST
subject: CN=CA Subsystem,O=IPA.TEST
I'm not sure I follow. My getcert list output looks like that, except the CN and O
are reversed in the Subject line
issuer: CN=Certificate
Authority,O=IPA.****.NET
subject: O=IPA.****.NET,CN=OCSP Subsystem
issuer: CN=Certificate
Authority,O=IPA.****.NET
subject: O=IPA.****.NET,CN=CA Subsystem
issuer: CN=Certificate
Authority,O=IPA.****.NET
subject: O=IPA.****.NET,CN=CA Audit