Increment serial number in gencert.
This commit is contained in:
parent
66920f1fbd
commit
ed90fe2333
4 changed files with 6 additions and 2 deletions
|
@ -354,6 +354,7 @@ class Person(object):
|
|||
'givenName' : givenName,
|
||||
'mail' : mail,
|
||||
'fedoraPersonKeyId' : '',
|
||||
'fedoraPersonCertSerial' : -1,
|
||||
'description' : '',
|
||||
'fedoraPersonCreationDate' : str(now),
|
||||
'telephoneNumber' : telephoneNumber,
|
||||
|
|
|
@ -347,6 +347,7 @@ class User(controllers.Controller):
|
|||
def gencert(self):
|
||||
from fas.openssl_fas import *
|
||||
user = Person.byUserName(turbogears.identity.current.user_name)
|
||||
user.fedoraPersonCertSerial = int(user.fedoraPersonCertSerial) + 1
|
||||
|
||||
pkey = createKeyPair(TYPE_RSA, 1024);
|
||||
|
||||
|
@ -367,7 +368,7 @@ class User(controllers.Controller):
|
|||
emailAddress=user.mail,
|
||||
)
|
||||
|
||||
cert = createCertificate(req, (cacert, cakey), 0, (0, expire), digest='md5')
|
||||
cert = createCertificate(req, (cacert, cakey), int(user.fedoraPersonCertSerial), (0, expire), digest='md5')
|
||||
certdump = crypto.dump_certificate(crypto.FILETYPE_PEM, cert)
|
||||
keydump = crypto.dump_privatekey(crypto.FILETYPE_PEM, pkey)
|
||||
return dict(cert=certdump, key=keydump)
|
||||
|
|
|
@ -10,8 +10,9 @@ attributeTypes: ( 2.5.444.16 NAME 'fedoraPersonIrcNick' DESC 'irc nick of the us
|
|||
attributetypes: ( 2.5.444.17 NAME 'fedoraPersonCreationDate' DESC 'date entry was created' EQUALITY caseIgnoreIA5Match SUBSTR caseIgnoreIA5SubstringsMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.26 SINGLE-VALUE )
|
||||
attributeTypes: ( 2.5.444.18 NAME 'fedoraPersonApprovalStatus' DESC 'users approval status' EQUALITY caseIgnoreMatch SUBSTR caseIgnoreSubstringsMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.15{50} )
|
||||
attributeTypes: ( 2.5.444.19 NAME 'fedoraPersonKeyId' DESC 'users GPG key ID' EQUALITY caseIgnoreMatch SUBSTR caseIgnoreSubstringsMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.15{50} )
|
||||
attributeTypes: ( 2.5.444.22 NAME 'fedoraPersonCertSerial' DESC 'users SSL cert serial' EQUALITY IntegerMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.27 SINGLE-VALUE )
|
||||
# fedoraPerson
|
||||
# The fedoraPerson represents people who are a member of the fedora project
|
||||
# in some way. It is a structural class and inherits
|
||||
# from the inetOrgPerson class
|
||||
objectClasses: ( 2.5.555.1 NAME 'fedoraPerson' DESC 'A member of the fedoraproject group' SUP inetOrgPerson STRUCTURAL MUST ( fedoraPersonSshKey $ mail $ fedoraPersonCreationDate ) MAY (fedoraPersonIrcNick $ fedoraPersonApprovalStatus $ fedoraPersonBugzillaMail $ fedoraPersonKeyId ) )
|
||||
objectClasses: ( 2.5.555.1 NAME 'fedoraPerson' DESC 'A member of the fedoraproject group' SUP inetOrgPerson STRUCTURAL MUST ( fedoraPersonSshKey $ mail $ fedoraPersonCreationDate ) MAY (fedoraPersonIrcNick $ fedoraPersonApprovalStatus $ fedoraPersonBugzillaMail $ fedoraPersonKeyId $ fedoraPersonCertSerial ) )
|
||||
|
|
|
@ -241,6 +241,7 @@ def main():
|
|||
userLdif.append(["cn",[str(user[1])]])
|
||||
userLdif.append(["givenName",[str(user[3])]])
|
||||
userLdif.append(["fedoraPersonKeyId",[str(user[4])]])
|
||||
userLdif.append(["fedoraPersonCertSerial",'-1'])
|
||||
userLdif.append(["fedoraPersonSshKey",[str(user[5])]])
|
||||
userLdif.append(["userPassword",[encode_SSHA_password(str(user[6]))]])
|
||||
userLdif.append(["postalAddress",[str(user[8])]])
|
||||
|
|
Loading…
Add table
Add a link
Reference in a new issue