From 5f8a9b9849ea81d0400d915dee055968d8c680e6 Mon Sep 17 00:00:00 2001 From: Rob Crittenden Date: Fri, 10 Dec 2010 10:53:20 -0500 Subject: Add --out option to service, host and cert-show to save the cert to a file. Override forward() to grab the result and if a certificate is in the entry and the file is writable then dump the certificate in PEM format. ticket 473 --- ipalib/plugins/host.py | 21 +++++++++++++++++++++ 1 file changed, 21 insertions(+) (limited to 'ipalib/plugins/host.py') diff --git a/ipalib/plugins/host.py b/ipalib/plugins/host.py index a823fe00..22cd424e 100644 --- a/ipalib/plugins/host.py +++ b/ipalib/plugins/host.py @@ -81,6 +81,8 @@ from ipalib.plugins.service import split_principal from ipalib.plugins.service import validate_certificate from ipalib.plugins.service import normalize_certificate from ipalib.plugins.service import set_certificate_attrs +from ipalib.plugins.service import make_pem, check_writable_file +from ipalib.plugins.service import write_certificate from ipalib.plugins.dns import dns_container_exists, _attribute_types from ipalib import _, ngettext from ipalib import x509 @@ -577,6 +579,12 @@ class host_show(LDAPRetrieve): Display information about a host. """ has_output_params = LDAPRetrieve.has_output_params + host_output_params + takes_options = LDAPRetrieve.takes_options + ( + Str('out?', + doc=_('file to store certificate in'), + ), + ) + member_attributes = ['managedby'] def post_callback(self, ldap, dn, entry_attrs, *keys, **options): @@ -591,6 +599,19 @@ class host_show(LDAPRetrieve): return dn + def forward(self, *keys, **options): + if 'out' in options: + check_writable_file(options['out']) + result = super(host_show, self).forward(*keys, **options) + if 'usercertificate' in result['result']: + write_certificate(result['result']['usercertificate'][0], options['out']) + result['summary'] = _('Certificate stored in file \'%(file)s\'') % dict(file=options['out']) + return result + else: + raise errors.NoCertificateError(entry=keys[-1]) + else: + return super(host_show, self).forward(*keys, **options) + api.register(host_show) -- cgit