Current root CA lifetime is 8 years. We need to make it longer by default.
The following Dogtag trac ticket has been created for the Dogtag team to provide details and recommendations on how to make this change:
https://fedorahosted.org/pki/ticket/466
Ticket has been cloned to Bugzilla: https://bugzilla.redhat.com/show_bug.cgi?id=891980
Packages be fixed in Fedora 18 soon after GA.
Fixed in dogtag 9.0.26 and dogtag 10
Metadata Update from @dpal: - Issue assigned to rcritten - Issue set to the milestone: FreeIPA 3.0.2
Login to comment on this ticket.