From 812ab600a33f0a334e757420783583f700ec07e7 Mon Sep 17 00:00:00 2001 From: Fraser Tweedale Date: Fri, 24 Jul 2015 09:32:51 -0400 Subject: Add profile for DNP3 / IEC 62351-8 certificates The DNP3 smart-grid standard uses certificate with the IEC 62351-8 IECUserRoles extension. Add a profile for DNP3 certificates which copies the IECUserRoles extension from the CSR, if present. Also update cert-request to accept CSRs containing this extension. Fixes: https://fedorahosted.org/freeipa/ticket/4752 Reviewed-By: Martin Babinsky --- ipapython/dogtag.py | 1 + 1 file changed, 1 insertion(+) (limited to 'ipapython') diff --git a/ipapython/dogtag.py b/ipapython/dogtag.py index 53085f776..0782d360c 100644 --- a/ipapython/dogtag.py +++ b/ipapython/dogtag.py @@ -45,6 +45,7 @@ from ipapython.ipa_log_manager import * INCLUDED_PROFILES = { # ( profile_id , description , store_issued) (u'caIPAserviceCert', u'Standard profile for network services', True), + (u'IECUserRoles', u'User profile that includes IECUserRoles extension from request', True), } DEFAULT_PROFILE = u'caIPAserviceCert' -- cgit