freeipa

#9882 RFE: support ML-DSA key and signatures in CA profiles
Opened by mfargett. Modified

Open
Close Issue

Request for enhancement

Dogtag PKI version 11.9 will include the support for ML-DSA keys and signatures. To make them available in IPA CA deployments the CA profiles have to be updated.

Issue

[description of the issue]
In order to use ML-DSA profiles have to be updated.
As a reference profiles distributed with dogtag have been update with the PR https://github.com/dogtagpki/pki/pull/5228

Steps to Reproduce

Create a certificate with ML-DSA key or using ML-DSA in root key is not allowed.

Metadata Update from @abbra:
- Issue set to the milestone: Post Quantum Cryptography
Metadata
None
None
None
None
None
Static archive. pagure.io was sunset in 2026; this is a read-only snapshot.
Red Hat Logo

Fedora is sponsored by Red Hat. Learn more about the relationship between Red Hat and Fedora »

© Red Hat, Inc. and others.