URL: https://github.com/freeipa/freeipa/pull/3023 Author: tiran Title: #3023: [Backport][ipa-4-7] Add PKI config override option Action: opened PR body: """ Manual backport of PR #2976 Add an option to override CA and KRA settings passed to pkispawn. The feature allows users to change key size, signature algorithm, and other parameters. It's a prerequisite for HSM support. The patchset also simplifies and improves how IPA creates the pki.ini files that gets passed to pkispawn. See pagure.io/freeipa/issue/5608 """ To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/3023/head:pr3023 git checkout pr3023