<?xml version="1.0" encoding="utf-8" standalone="yes"?><rss version="2.0" xmlns:atom="http://www.w3.org/2005/Atom" xmlns:content="http://purl.org/rss/1.0/modules/content/"><channel><title>Freeipa on Chris Zinda</title><link>https://czinda.io/tags/freeipa/</link><description>Recent content in Freeipa on Chris Zinda</description><generator>Hugo -- 0.146.0</generator><language>en-us</language><lastBuildDate>Thu, 14 May 2026 00:00:00 +0000</lastBuildDate><atom:link href="https://czinda.io/tags/freeipa/index.xml" rel="self" type="application/rss+xml"/><item><title>PKI.Next Part 6: Replacing Dogtag PKI</title><link>https://czinda.io/posts/pki-next-part6-replacing-dogtag/</link><pubDate>Thu, 14 May 2026 00:00:00 +0000</pubDate><guid>https://czinda.io/posts/pki-next-part6-replacing-dogtag/</guid><description>What twenty years of operating Dogtag PKI taught us about building its replacement, the compatibility proxy that makes migration possible, and the architectural bets that will define the next twenty years of certificate management.</description></item></channel></rss>