Bug 1133421

Summary: [RFE] [pki] remove pki-pkcs12-extract.sh in favor of setup specific module
Product: [oVirt] ovirt-engine Reporter: Alon Bar-Lev <alonbl>
Component: RFEsAssignee: Yedidyah Bar David <didi>
Status: CLOSED DEFERRED QA Contact: Pavel Stehlik <pstehlik>
Severity: low Docs Contact:
Priority: medium    
Version: ---CC: bugs, rbalakri, sbonazzo, srevivo, ykaul, ylavi
Target Milestone: ---Keywords: FutureFeature, Improvement
Target Release: ---Flags: ylavi: ovirt-future?
ylavi: planning_ack?
ylavi: devel_ack?
ylavi: testing_ack?
Hardware: Unspecified   
OS: Unspecified   
Whiteboard:
Fixed In Version: Doc Type: Enhancement
Doc Text:
Story Points: ---
Clone Of: Environment:
Last Closed: 2017-06-07 21:51:59 UTC Type: Bug
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: Integration RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:
Embargoed:

Description Alon Bar-Lev 2014-08-25 06:33:59 UTC
CURRENT IMPLEMENTATION

pki-* scripts are scripts that manages the engine specific CA artifacts.
these scripts are used to manage the internal CA.

the pki-pkcs12-extract.sh is an exception it is a utility script that wraps openssl utility, it is used only for setup and has no value outside of the setup scope.

NEW IMPLEMENTATION

remove the pki-pkcs12-extract.sh script from our cli interface, add similar functionality as pki module (or any other) of setup-common python module. this python module can execute openssl the same manner that is used within the script.

having this within setup will also enable the usage of openssl wrapper within other components which runs outside of engine scope.

Thanks!

Comment 2 Yaniv Kaul 2017-06-07 21:51:59 UTC
Closing old RFEs. Please reopen if relevant.