freeipa.git/ipaclient/plugins, branch cakeysfix

vault: piped input for ipa vault-add fails

2017-04-28T11:19:51+00:00

An exception is raised when using echo "Secret123\n" | ipa vault-add myvault

This happens because the code is using (string).decode(sys.stdin.encoding)
and sys.stdin.encoding is None when the input is read from a pipe.
The fix is using the prompt_password method defined by Backend.textui,
which gracefully handles this issue.

https://pagure.io/freeipa/issue/6907

Reviewed-By: Christian Heimes 
Reviewed-By: Abhijeet Kasurde 
Reviewed-By: Stanislav Laznicka

csrgen: Modify cert_get_requestdata to return a CertificationRequestInfo

2017-04-03T07:46:30+00:00

Also modify cert_request to use this new format. Note, only PEM private
keys are supported for now. NSS databases are not.

https://pagure.io/freeipa/issue/4899

Reviewed-By: Jan Cholasta

csrgen: Change to pure openssl config format (no script)

2017-04-03T07:46:30+00:00

https://pagure.io/freeipa/issue/4899

Reviewed-By: Jan Cholasta

csrgen: Remove helper abstraction

2017-04-03T07:46:30+00:00

All requests now use the OpenSSL formatter. However, we keep Formatter
a separate class so that it can be changed out for tests.

https://pagure.io/freeipa/issue/4899

Reviewed-By: Jan Cholasta

Simplify KRA transport cert cache

2017-03-28T08:10:03+00:00

In-memory cache causes problem in forking servers. A file based cache is
good enough. It's easier to understand and avoids performance regression
and synchronization issues when cert becomes out-of-date.

https://pagure.io/freeipa/issue/6787
Signed-off-by: Christian Heimes 
Reviewed-By: Jan Cholasta

csrgen: hide cert-get-requestdata in CLI

2017-03-14T12:26:16+00:00

The CSR generation feature is supposed to be used from cert-request, hide
the internal cert-get-requestdata command in the CLI.

https://fedorahosted.org/freeipa/ticket/4899

Reviewed-By: Stanislav Laznicka

cert: include certificate chain in cert command output

2017-03-14T11:58:45+00:00

Include the full certificate chain in the output of cert-request, cert-show
and cert-find if --chain or --all is specified.

If output file is specified in the CLI together with --chain, the full
certificate chain is written to the file.

https://pagure.io/freeipa/issue/6547

Reviewed-By: David Kupka

cert: add output file option to cert-request

2017-03-14T11:58:45+00:00

The certificate returned by cert-request can now be saved to a file in the
CLI using a new --certificate-out option.

Deprecate --out in cert-show in favor of --certificate-out.

https://pagure.io/freeipa/issue/6547

Reviewed-By: David Kupka

vault: cache the transport certificate on client

2017-03-13T15:02:16+00:00

Cache the KRA transport certificate on disk (in ~/.cache/ipa) as well as
in memory.

https://fedorahosted.org/freeipa/ticket/6652

Reviewed-By: Martin Basti 
Reviewed-By: Christian Heimes

certmap: load certificate from file in certmap-match CLI

2017-03-13T08:03:53+00:00

Load the certificate from a file specified in the first argument. Raw
certificate value can be specified using --certificate.

https://pagure.io/freeipa/issue/6646

Reviewed-By: Florence Blanc-Renaud