{"action":"created","issue":{"url":"https://api.github.com/repos/cloudflare/cfssl/issues/621","repository_url":"https://api.github.com/repos/cloudflare/cfssl","labels_url":"https://api.github.com/repos/cloudflare/cfssl/issues/621/labels{/name}","comments_url":"https://api.github.com/repos/cloudflare/cfssl/issues/621/comments","events_url":"https://api.github.com/repos/cloudflare/cfssl/issues/621/events","html_url":"https://github.com/cloudflare/cfssl/issues/621","id":162058349,"number":621,"title":"gencert remote argument doesn't honor is_ca in config.json","user":{"login":"ronlipke","id":222259,"avatar_url":"https://avatars.githubusercontent.com/u/222259?v=3","gravatar_id":"","url":"https://api.github.com/users/ronlipke","html_url":"https://github.com/ronlipke","followers_url":"https://api.github.com/users/ronlipke/followers","following_url":"https://api.github.com/users/ronlipke/following{/other_user}","gists_url":"https://api.github.com/users/ronlipke/gists{/gist_id}","starred_url":"https://api.github.com/users/ronlipke/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/ronlipke/subscriptions","organizations_url":"https://api.github.com/users/ronlipke/orgs","repos_url":"https://api.github.com/users/ronlipke/repos","events_url":"https://api.github.com/users/ronlipke/events{/privacy}","received_events_url":"https://api.github.com/users/ronlipke/received_events","type":"User","site_admin":false},"labels":[],"state":"open","locked":false,"assignee":{"login":"lziest","id":1222706,"avatar_url":"https://avatars.githubusercontent.com/u/1222706?v=3","gravatar_id":"","url":"https://api.github.com/users/lziest","html_url":"https://github.com/lziest","followers_url":"https://api.github.com/users/lziest/followers","following_url":"https://api.github.com/users/lziest/following{/other_user}","gists_url":"https://api.github.com/users/lziest/gists{/gist_id}","starred_url":"https://api.github.com/users/lziest/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/lziest/subscriptions","organizations_url":"https://api.github.com/users/lziest/orgs","repos_url":"https://api.github.com/users/lziest/repos","events_url":"https://api.github.com/users/lziest/events{/privacy}","received_events_url":"https://api.github.com/users/lziest/received_events","type":"User","site_admin":false},"assignees":[{"login":"lziest","id":1222706,"avatar_url":"https://avatars.githubusercontent.com/u/1222706?v=3","gravatar_id":"","url":"https://api.github.com/users/lziest","html_url":"https://github.com/lziest","followers_url":"https://api.github.com/users/lziest/followers","following_url":"https://api.github.com/users/lziest/following{/other_user}","gists_url":"https://api.github.com/users/lziest/gists{/gist_id}","starred_url":"https://api.github.com/users/lziest/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/lziest/subscriptions","organizations_url":"https://api.github.com/users/lziest/orgs","repos_url":"https://api.github.com/users/lziest/repos","events_url":"https://api.github.com/users/lziest/events{/privacy}","received_events_url":"https://api.github.com/users/lziest/received_events","type":"User","site_admin":false}],"milestone":null,"comments":4,"created_at":"2016-06-24T01:32:01Z","updated_at":"2016-07-19T18:44:47Z","closed_at":null,"body":"We're seeing an issue when generating intermediate CA certs with `gencert` and the `-remote` argument.  It doesn't seem to honor the `is_ca` line in config.json.  If we remove the remote endpoint and run `gencert` with the `-ca` and `-ca-key` switch it works fine and sets the correct Basic Constraints.\r\n\r\nIs this intentional?  Is there a method to generating intermediate CA certs without requiring a local copy of the root's cert and key?"},"comment":{"url":"https://api.github.com/repos/cloudflare/cfssl/issues/comments/233728021","html_url":"https://github.com/cloudflare/cfssl/issues/621#issuecomment-233728021","issue_url":"https://api.github.com/repos/cloudflare/cfssl/issues/621","id":233728021,"user":{"login":"lziest","id":1222706,"avatar_url":"https://avatars.githubusercontent.com/u/1222706?v=3","gravatar_id":"","url":"https://api.github.com/users/lziest","html_url":"https://github.com/lziest","followers_url":"https://api.github.com/users/lziest/followers","following_url":"https://api.github.com/users/lziest/following{/other_user}","gists_url":"https://api.github.com/users/lziest/gists{/gist_id}","starred_url":"https://api.github.com/users/lziest/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/lziest/subscriptions","organizations_url":"https://api.github.com/users/lziest/orgs","repos_url":"https://api.github.com/users/lziest/repos","events_url":"https://api.github.com/users/lziest/events{/privacy}","received_events_url":"https://api.github.com/users/lziest/received_events","type":"User","site_admin":false},"created_at":"2016-07-19T18:44:47Z","updated_at":"2016-07-19T18:44:47Z","body":"Now `cfssl` will warn about ignored signing config as well."}}
{"actor":{"display_login":"lziest"}}