Sven Höxter

use python version define in PY_BIN if it exists

1

Check if we've an executable file provided in an env var called `PY_BIN`. If that's the case make it the first choice for the validation of the python version requirements....

drop usage of cat when sed is already invoked

2

ymmv :)

The debian default "/bin/sh" is dash. The build in echo implementation in dash does not support "-e", so it echos a verbatim "-e" but the \t are none the less...

invoke-rc.d is able to handle SysV init scripts and systemd, thus it makes sense to be Debian policy conform and use that, instead of forcing the usage of the init...

Add policy AC_GCP_0297 - certificate path length set to 0

4

If you configure only `max_issuer_path_length = 0`, without setting `zero_max_issuer_path_length = true`, the `pathlen` attribute will be left unset in the ca pool policy. This policy makes sure that `zero_max_issuer_path_length`...

That one was reported in 2013 in the Debian BTS at https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=720056 because someone failed to deal with sourceforge.

Fix: do not install manpage in doc dir

4

This solves two issues: a) Avoids adding the manpage also to the `${CMAKE_INSTALL_DOCDIR}` while it only belongs into the manpage folder. b) Does not create a "doc" subfolder inside the...

fix: provide a sensible example for a privateca Root CA example

2

This one looks a lot like someone copied by accident the subordinate example out of `certificate_authority_subordinate/main.tf` as a root CA. Thus it contains a lot of values set which are...

privateca root ca example is invalid for a standard compliant root ca

2

### TL;DR The sample in privateca/certificate_authority_basic/main.tf looks like it's a copy of the subordinate setup and not for the root. ### Expected behavior Sample should be somewhat compliant to RFC...