The 'cert-request' command checks that all rfc822Name altNames in the SAN extension request match one of the user's email addresses, however, it does a case-sensitive comparison of the whole email address.
The domain part should be compared case-insensitively.
Metadata Update from @ftweedal: - Issue assigned to someone - Issue set to the milestone: Future Releases
Metadata Update from @fbarreto: - Custom field component reset (from Certificate management) - Custom field keywords reset (from easyfix) - Custom field on_review reset (from 0) - Custom field rhbz reset (from todo) - Custom field type reset (from defect) - Issue close_status updated to: None
PR to fix it: https://github.com/freeipa/freeipa/pull/736
Moving to 4.6 given the PR.
Metadata Update from @pvoborni: - Issue set to the milestone: FreeIPA 4.6 (was: Future Releases)
Metadata Update from @simo: - Assignee reset
Metadata Update from @simo: - Issue assigned to fbarreto
master:
Metadata Update from @mbasti: - Issue close_status updated to: fixed - Issue status updated to: Closed (was: Open)
ipa-4-5:
Metadata Update from @frenaud: - Issue set to the milestone: FreeIPA 4.5.5 (was: FreeIPA 4.6)
Milestone updated to FreeIPA 4.5.5 as there was a backport to 4-5 branch
Login to comment on this ticket.