freeipa.git/ipaclient/plugins, branch master

csrgen: hide cert-get-requestdata in CLI

2017-03-14T12:26:16+00:00

The CSR generation feature is supposed to be used from cert-request, hide
the internal cert-get-requestdata command in the CLI.

https://fedorahosted.org/freeipa/ticket/4899

Reviewed-By: Stanislav Laznicka

cert: include certificate chain in cert command output

2017-03-14T11:58:45+00:00

Include the full certificate chain in the output of cert-request, cert-show
and cert-find if --chain or --all is specified.

If output file is specified in the CLI together with --chain, the full
certificate chain is written to the file.

https://pagure.io/freeipa/issue/6547

Reviewed-By: David Kupka

cert: add output file option to cert-request

2017-03-14T11:58:45+00:00

The certificate returned by cert-request can now be saved to a file in the
CLI using a new --certificate-out option.

Deprecate --out in cert-show in favor of --certificate-out.

https://pagure.io/freeipa/issue/6547

Reviewed-By: David Kupka

vault: cache the transport certificate on client

2017-03-13T15:02:16+00:00

Cache the KRA transport certificate on disk (in ~/.cache/ipa) as well as
in memory.

https://fedorahosted.org/freeipa/ticket/6652

Reviewed-By: Martin Basti 
Reviewed-By: Christian Heimes

certmap: load certificate from file in certmap-match CLI

2017-03-13T08:03:53+00:00

Load the certificate from a file specified in the first argument. Raw
certificate value can be specified using --certificate.

https://pagure.io/freeipa/issue/6646

Reviewed-By: Florence Blanc-Renaud

dns: fix `dnsrecord_add` interactive mode

2017-03-08T14:52:41+00:00

`dnsrecord_add` interactive mode might prompt for value of non-existent
arguments `a_part_create_reverse` and `aaaa_part_create_reverse`. This
happens because `dnsrecord_add` extra flags are incorrectly defined as
parts of the respective DNS records.

Remove extra flags from DNS record parts to fix the interactive mode on old
clients talking to new servers. Skip non-existent arguments in the
interactive mode to fix new clients talking to old servers.

https://fedorahosted.org/freeipa/ticket/6457

Reviewed-By: Martin Basti

Vault: port key wrapping to python-cryptography

2017-03-02T13:22:11+00:00

https://fedorahosted.org/freeipa/ticket/6650

Signed-off-by: Christian Heimes 
Reviewed-By: Stanislav Laznicka

Remove NSSConnection from otptoken plugin

2017-03-01T09:43:41+00:00

Replace NSSConnection with httplib.HTTPSConenction to be able to remove
NSSConnection for good.

https://fedorahosted.org/freeipa/ticket/5695

Reviewed-By: Jan Cholasta

csrgen: Support encrypted private keys

2017-02-28T09:02:49+00:00

https://fedorahosted.org/freeipa/ticket/4899

Reviewed-By: Jan Cholasta

csrgen: Allow overriding the CSR generation profile

2017-02-28T09:02:49+00:00

In case users want multiple CSR generation profiles that work with the
same dogtag profile, or in case the profiles are not named the same,
this flag allows specifying an alternative CSR generation profile.

https://fedorahosted.org/freeipa/ticket/4899

Reviewed-By: Jan Cholasta