|
 |
590d18 |
From 056d185b4b2bfd7de423da7ff7a80f764c043810 Mon Sep 17 00:00:00 2001
|
|
|
590d18 |
From: Fraser Tweedale <ftweedal@redhat.com>
|
|
|
590d18 |
Date: Thu, 23 Jul 2015 23:07:10 -0400
|
|
|
590d18 |
Subject: [PATCH] certprofile: add profile format explanation
|
|
|
590d18 |
|
|
|
590d18 |
Part of: https://fedorahosted.org/freeipa/ticket/5089
|
|
|
590d18 |
|
|
|
590d18 |
Reviewed-By: Tomas Babej <tbabej@redhat.com>
|
|
|
590d18 |
---
|
|
|
590d18 |
ipalib/plugins/certprofile.py | 20 ++++++++++++++++++++
|
|
|
590d18 |
1 file changed, 20 insertions(+)
|
|
|
590d18 |
|
|
|
590d18 |
diff --git a/ipalib/plugins/certprofile.py b/ipalib/plugins/certprofile.py
|
|
|
590d18 |
index 658fbca3b4eb851eb5a22190c443044f6ceb8491..1dd4f403ee4461b83c053eb36019a8896506bb81 100644
|
|
|
590d18 |
--- a/ipalib/plugins/certprofile.py
|
|
|
590d18 |
+++ b/ipalib/plugins/certprofile.py
|
|
|
590d18 |
@@ -47,9 +47,29 @@ EXAMPLES:
|
|
|
590d18 |
Show information about a profile:
|
|
|
590d18 |
ipa certprofile-show ShortLivedUserCert
|
|
|
590d18 |
|
|
|
590d18 |
+ Save profile configuration to a file:
|
|
|
590d18 |
+ ipa certprofile-show caIPAserviceCert --out caIPAserviceCert.cfg
|
|
|
590d18 |
+
|
|
|
590d18 |
Search for profiles that do not store certificates:
|
|
|
590d18 |
ipa certprofile-find --store=false
|
|
|
590d18 |
|
|
|
590d18 |
+PROFILE CONFIGURATION FORMAT:
|
|
|
590d18 |
+
|
|
|
590d18 |
+The profile configuration format is the raw property-list format
|
|
|
590d18 |
+used by Dogtag Certificate System. The XML format is not supported.
|
|
|
590d18 |
+
|
|
|
590d18 |
+The following restrictions apply to profiles managed by FreeIPA:
|
|
|
590d18 |
+
|
|
|
590d18 |
+- When importing a profile the "profileId" field, if present, must
|
|
|
590d18 |
+ match the ID given on the command line.
|
|
|
590d18 |
+
|
|
|
590d18 |
+- The "classId" field must be set to "caEnrollImpl"
|
|
|
590d18 |
+
|
|
|
590d18 |
+- The "auth.instance_id" field must be set to "raCertAuth"
|
|
|
590d18 |
+
|
|
|
590d18 |
+- The "certReqInputImpl" input class and "certOutputImpl" output
|
|
|
590d18 |
+ class must be used.
|
|
|
590d18 |
+
|
|
|
590d18 |
""")
|
|
|
590d18 |
|
|
|
590d18 |
|
|
|
590d18 |
--
|
|
|
590d18 |
2.4.3
|
|
|
590d18 |
|