[Pki-devel] [pki-devel][PATCH] 0039-Ability-to-toggle-profile-usablity-in-Web-vs-CLI-too.patch
John Magne
jmagne at redhat.com
Wed Jul 1 23:11:11 UTC 2015
ACKd by edewata :
Pushed to master.
----- Original Message -----
> From: "John Magne" <jmagne at redhat.com>
> To: "pki-devel" <pki-devel at redhat.com>
> Sent: Wednesday, July 1, 2015 3:11:15 PM
> Subject: [Pki-devel] [pki-devel][PATCH] 0039-Ability-to-toggle-profile-usablity-in-Web-vs-CLI-too.patch
>
> [PATCH] Ability to toggle profile usablity in Web vs CLI tools.
>
> Ticket #1442.
>
> This fix gives the command line enrollment commands the ability to enroll a
> cert against a profile
> that has been marked as not visible but "enabled".
>
> With the simple fix the following scenarios tested to work:
>
> The "caUserCert" Profile was marked as not visible, but enabled.
>
> 1. pki -c Secret123 client-cert-request --profile caUserCert uid=jmagne
> This is the simplest form of user cert enrollment.
>
> 2. pki ca-cert-request-profile-show caUserCert --output testuser.xml
> pki ca-cert-request-submit testuser.xml
>
> The first command gives us the profile's xml file, which after
> modification is used to enroll.
>
> 3. pki -d ~/.dogtag/pki -c "" -n "PKI Administrator for localdomain"
> ca-profile-show caUserCert
>
> This one shows that we can view the contents of a non visible profile.
> Listing is not allowed.
> We felt this appropiate to allow a command line user to get the details
> of a non visible profile that
> they know aobut and want to use.
>
> _______________________________________________
> Pki-devel mailing list
> Pki-devel at redhat.com
> https://www.redhat.com/mailman/listinfo/pki-devel
More information about the Pki-devel
mailing list