Fix deprecation warning for the sha library on Python 2.6

sha has been replaced by hashlib. We need to support Python 2.4 - 2.6 so
this will use hashlib if available but fall back onto sha if not.
Fortunately they use the same API for the function we need.

509042

Identify CAs to trust from an imported PKCS#12 file

We used to use certutil -O to determine the cert chain to trust. This
behavior changed in F-11 such that untrusted CAs are not displayed.
This is only used when we import PKCS#12 files so use pk12util -l to
display the list of certs and keys in the file to determine the nickname(s)
of the CAs to trust.

509111

No need to trust NSS built-in CA's, more specific regex for finding CA nickname

- Add some logging so we have a better idea of what happened if things fail
- Default to self-signed CA to trust if one is not found. This will fix
  the self-signed CA case where certutil doesn't return untrusted CA's in
  -O output.
- Remove unused httplib import

Also rename some variables, type and filter, that shadowed builtins
Fixed the naming of some private functions

Also shut down logging different in ipa_webui. Rather than calling
logging.shutdown() pull all the log handlers and close them.

505686

The attributes on the group new, edit, etc pages are limited to a few
known/needed ones. Add dn to the list of hidden fields so we can pass
this onto the subcontroller group.delete().

484050

as an update so that if it is not there it will be added