This is in support of being able to migrate an existing dogtag CA - say from an older version of dogtag/rhcs to the latest.
The inputs would be: pk12 containing signing cert/chain ldif containing data.
We could use the existing certs mechanism + ability to add data from ldif here to generate CA.
Importing existing CA certificate is already implemented in ticket #456. Importing existing data (with LDIF) should not be done during install since, depending on the size, it might take a long time and if there are failures the whole installation (including importation) might have to be restarted from the beginning. It would be better to prepare a DS instance that already contains the old data (assuming pkispawn supports this), or do the import after the installation is done.
Metadata Update from @vakwetu: - Issue assigned to edewata - Issue set to the milestone: 10.3.1
Dogtag PKI is moving from Pagure issues to GitHub issues. This means that existing or new issues will be reported and tracked through Dogtag PKI's GitHub Issue tracker.
This issue has been cloned to GitHub and is available here: https://github.com/dogtagpki/pki/issues/2399
If you want to receive further updates on the issue, please navigate to the GitHub issue and click on Subscribe button.
Subscribe
Thank you for understanding, and we apologize for any inconvenience.
Login to comment on this ticket.