On 9.8.2016 22:07, Ben Lipton wrote: > Aaand there's a typo in patch 15. Updated version attached.
Ben, it would be great if you can always send whole patch set, including the patches which were not changed from the previous iteration. It is getting quite hard to follow and mix-and-match patches from e-mails into one patch set. As a nice to have addition, you can push the whole patch set to Github (or somewhere else) so we can just clone the repo and be done with it :-) Thank you for understanding. Petr^2 Spacek > > On 08/09/2016 02:22 PM, Ben Lipton wrote: >> Hello, >> >> The attached patches improve upon my last patchset to: >> >> 0013: Add support for generating a full script that makes a CSR, rather than >> just a config, and use that support to automate the full flow from script >> generation through cert issuance >> Usage note: the UI for this could probably use work. I currently have the >> --helper-args param that allows additional data to be passed to the helper. >> Commonly this would be something like: >> Certutil: --helper-args '-d /path/to/nss/db' (precreated with certutil -N -d >> /path/to/nss/db) >> Openssl: --helper-args 'd /path/to/keyfile' (precreated with openssl genrsa >> -out /path/to/keyfile) >> See the commit message for a full command line. >> >> 0014: Allow the feature to be used by non-admin users >> >> 0015: Improve error handling by reporting a nice message if the mapping >> rules are broken, or if the data required to generate the subject DN is >> missing >> >> These improvements may make it easier to test the other patches. >> >> Thanks, >> Ben >> >> > > > > -- Petr^2 Spacek -- Manage your subscription for the Freeipa-devel mailing list: https://www.redhat.com/mailman/listinfo/freeipa-devel Contribute to FreeIPA: http://www.freeipa.org/page/Contribute/Code
