freeipa

#9984 cert profiles: support ECDSA subject keys in default and ACME profiles
Closed: fixed by rcritten. Opened by sumedhs.

Closed: fixed
Reopen Issue

Update IPA default and ACME profiles to support ECDSA subject keys (alongside RSA).

Acceptance criteria:

profile updated to support ECDSA (nistp256, nistp384, nistp521 curves)  – DONE
there are tests to test ECDSA cert issuance
    for the caIPAserviceCert profile (ipa cert-request)
    for the acmeIPAserviceCert profile (ACME protocol)

The value of this for the PQC deliverables is that it verifies that the profiles work OK with multiple subject key types.

master:

  • 870f0afb4f3bea85a38656e6b484233abbbcfce5 cert profiles: support ECDSA subject keys in default and ACME profiles
  • 2963dcb3ce2fb4ec0904afcb3acd959f68021371 ipatests: add ECDSA subject key tests for service cert profiles

Metadata Update from @rcritten:
- Issue close_status updated to: fixed
- Issue status updated to: Closed (was: Open)
Metadata
None
None
None
None
None
None
Static archive. pagure.io was sunset in 2026; this is a read-only snapshot.
Red Hat Logo

Fedora is sponsored by Red Hat. Learn more about the relationship between Red Hat and Fedora »

© Red Hat, Inc. and others.