IntenseWebs/freeipa
3
0
Fork 0
mirror of https://salsa.debian.org/freeipa-team/freeipa.git synced 2025-02-25 18:55:28 -06:00
Code Issues Packages Projects Releases Wiki Activity

Add profile for DNP3 / IEC 62351-8 certificates

Browse Source 
The DNP3 smart-grid standard uses certificate with the IEC 62351-8
IECUserRoles extension.  Add a profile for DNP3 certificates which
copies the IECUserRoles extension from the CSR, if present.

Also update cert-request to accept CSRs containing this extension.

Fixes: https://fedorahosted.org/freeipa/ticket/4752
Reviewed-By: Martin Babinsky <mbabinsk@redhat.com>
This commit is contained in:
Fraser Tweedale
2015-07-24 09:32:51 -04:00
committed by Jan Cholasta
parent aafc0e980b
commit 812ab600a3
4 changed files with 117 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

1
ipalib/plugins/cert.py
View File

@@ -312,6 +312,7 @@ class cert_request(VirtualCommand):
'2.5.29.17': 'request certificate with subjectaltname',
'2.5.29.19': None, # Basic Constraints
'2.5.29.37': None, # Extended Key Usage
'1.2.840.10070.8.1': None, # IECUserRoles (DNP3 / IEC 62351-8)
}
def execute(self, csr, **kw):