Lightweight CAs: generate sub-CAs via profile subsystem

[pki-bot]

This issue was migrated from Pagure Issue #1624. Originally filed by ftweedal (@frasertweedale) on 2015-09-29 10:41:07:

• Closed as Fixed
• Assigned to ftweedal (@frasertweedale)

---

Currently sub-CA creation is a hack using a partial CS.cfg and the
methods that are used during installation to generate the CA and
server / subsystem certs.

Refactor to use the profile subsystem so that certificate issuance
results in the usual audit events, etc.

[pki-bot]

Comment from mharmsen (@mharmsen) at 2015-10-12 20:53:37

Per CS/DS Meeting of 10/12/2015 - 10.3

[pki-bot]

Comment from ftweedal (@frasertweedale) at 2015-10-13 03:42:13

attachment
pki-frasertweedale-0052-Lightweight-CAs-enrol-cert-via-profile-subsystem.patch

[pki-bot]

Comment from mharmsen (@mharmsen) at 2016-01-27 01:15:30

Lightweight CA should be covered as a new feature on Idm side

[pki-bot]

Comment from ftweedal (@frasertweedale) at 2016-02-22 23:50:25

Pushed to master (da4ca36)

[pki-bot]

Comment from ftweedal (@frasertweedale) at 2017-02-27 14:01:08

Metadata Update from @frasertweedale:

• Issue assigned to frasertweedale
• Issue set to the milestone: 10.3.0.a2