[Pki-devel] [pki-devel][PATCH] 0039-Ability-to-toggle-profile-usablity-in-Web-vs-CLI-too.patch

John Magne jmagne at redhat.com
Wed Jul 1 23:11:11 UTC 2015


ACKd by edewata :


Pushed to master.



----- Original Message -----
> From: "John Magne" <jmagne at redhat.com>
> To: "pki-devel" <pki-devel at redhat.com>
> Sent: Wednesday, July 1, 2015 3:11:15 PM
> Subject: [Pki-devel] [pki-devel][PATCH] 0039-Ability-to-toggle-profile-usablity-in-Web-vs-CLI-too.patch
> 
> [PATCH] Ability to toggle profile usablity in Web vs CLI tools.
> 
> Ticket #1442.
> 
> This fix gives the command line enrollment commands the ability to enroll a
> cert against a profile
> that has been marked as not visible but "enabled".
> 
> With the simple fix the following scenarios tested to work:
> 
> The "caUserCert" Profile was marked as not visible, but enabled.
> 
> 1. pki -c Secret123 client-cert-request --profile caUserCert uid=jmagne
>     This is the simplest form of user cert enrollment.
> 
> 2. pki ca-cert-request-profile-show caUserCert --output testuser.xml
>    pki ca-cert-request-submit testuser.xml
> 
>     The first command gives us the profile's xml file, which after
>     modification is used to enroll.
> 
> 3. pki -d ~/.dogtag/pki -c "" -n "PKI Administrator for localdomain"
> ca-profile-show caUserCert
> 
>     This one shows that we can view the contents of a non visible profile.
>     Listing is not allowed.
>     We felt this appropiate to allow a command line user to get the details
>     of a non visible profile that
>     they know aobut and want to use.
> 
> _______________________________________________
> Pki-devel mailing list
> Pki-devel at redhat.com
> https://www.redhat.com/mailman/listinfo/pki-devel




More information about the Pki-devel mailing list