pki.git/base/java-tools/bin/pki, branch master

Added cascading configuration for PKI CLI.

2017-03-15T18:36:53+00:00

The PKI CLI has been modified to support cascading configuration
files: default, system-wide, and user-specific configuration.

The existing Python-based PKI CLI was moved into pki.cli.main
module. A new shell script was added as a replacement which will
read the configuration files and invoke the Python module.

Fixed Ctrl-C handling in PKI CLI.

2017-01-30T22:52:12+00:00

The PKI CLI has been modified to catch KeyboardInterrupt and exit
cleanly without displaying the stack trace.

Removed hard-coded paths in pki CLI.

2016-07-26T19:20:59+00:00

The pki CLI has been modified to use java.ext.dirs property to
load the dependencies instead of listing them individually. The
dependencies are stored as links in /usr/share/pki/lib folder.
This allows the RPM spec to customize the links for different
platforms.

https://fedorahosted.org/pki/ticket/2403

Removed excessive error message in pki CLI.

2016-07-01T01:54:58+00:00

A recent change in the pki CLI caused excessive error message in
normal usage. The change has been reverted.

https://fedorahosted.org/pki/ticket/2390

Added condition for checking instance id in kra commands

2016-06-30T23:42:21+00:00

Partially Fixes: https://bugzilla.redhat.com/show_bug.cgi?id=1351295

Fixed Java dependency.

2016-06-17T18:19:09+00:00

The code has been modified to use the JAVA_HOME path specified in
the pki.conf.

The spec file has been modified to depend specifically on OpenJDK
1.8.0 and to provide the default JAVA_HOME path for the pki.conf.

https://fedorahosted.org/pki/ticket/2363

Fixed missing trust flags in certificate backup.

2016-04-04T17:33:05+00:00

The ConfigurationUtils.backupKeys() has been modified to use
PKCS12Util to export the certificates and their trust flags into
a PKCS #12 file such that the file can be used for cloning.

The code to generate PFX object has been refactored from the
PKCS12Util.storeIntoFile() into a separate generatePFX() method.

The PKCS12Util.loadCertFromNSS() has been modified to provide
options to load a certificate from NSS database without the key
or the certificate chain. The CLIs have been modified to provide
the same options.

The PKCS12Util.getCertInfo() has modified to ignore missing
certificate attributes in the PKCS #12 file and generate a new
local ID.

https://fedorahosted.org/pki/ticket/2255

Added Python wrapper for pki pkcs12-import.

2016-02-26T18:12:14+00:00

A Python wrapper module has been added for the pki pkcs12-import
command to provide a mechanism to implement a workaround for JSS
import limitation.

Additional fixes by cheimes have been merged into this patch:

setup.py:
We must track all sub-packages manually.

pylint-build-scan.py:
pylint confuses the 'pki' package with the 'pki' command. The
workaround symlinks the command and analysis the command under its
alternative name.

https://fedorahosted.org/pki/ticket/1742

Added CLIs to inspect PKCS #12 file.

2016-02-12T22:20:45+00:00

The pki pkcs12-cert-find and pki pkcs12-key-find commands have
been added to list the certificates and keys in a PKCS #12 file.

https://fedorahosted.org/pki/ticket/1742

Py3 compatibility: encode output of subprocess call

2015-08-17T19:14:12+00:00

In Python 3 subprocess.Popen() and check_out() return bytes. The rest of
PKI expects text, so the output has to be decoded.

- ascii for dnsdomainname
- sys.getfilesystemencoding() for paths
- utf-8 for the rest