Imported Upstream version 4.7.2

ipaclient/csrgen/rules/dataDNS.json

@@ -0,0 +1,8 @@
+{
+  "rule": {
+    "template": "DNS = {{subject.krbprincipalname.0.partition('/')[2].partition('@')[0]}}"
+  },
+  "options": {
+    "data_source": "subject.krbprincipalname.0.partition('/')[2].partition('@')[0]"
+  }
+}

ipaclient/csrgen/rules/dataEmail.json

@@ -0,0 +1,8 @@
+{
+  "rule": {
+    "template": "email = {{subject.mail.0}}"
+  },
+  "options": {
+    "data_source": "subject.mail.0"
+  }
+}

ipaclient/csrgen/rules/dataHostCN.json

@@ -0,0 +1,8 @@
+{
+  "rule": {
+    "template": "CN={{subject.krbprincipalname.0.partition('/')[2].partition('@')[0]}}"
+  },
+  "options": {
+    "data_source": "subject.krbprincipalname.0.partition('/')[2].partition('@')[0]"
+  }
+}

ipaclient/csrgen/rules/dataSubjectBase.json

@@ -0,0 +1,8 @@
+{
+  "rule": {
+    "template": "{{config.ipacertificatesubjectbase.0}}"
+  },
+  "options": {
+    "data_source": "config.ipacertificatesubjectbase.0"
+  }
+}

ipaclient/csrgen/rules/dataUsernameCN.json

@@ -0,0 +1,8 @@
+{
+  "rule": {
+    "template": "CN={{subject.uid.0}}"
+  },
+  "options": {
+    "data_source": "subject.uid.0"
+  }
+}

ipaclient/csrgen/rules/syntaxSAN.json

@@ -0,0 +1,8 @@
+{
+  "rule": {
+    "template": "subjectAltName = @{% call openssl.section() %}{{ datarules|join('\n') }}{% endcall %}"
+  },
+  "options": {
+    "extension": true
+  }
+}

ipaclient/csrgen/rules/syntaxSubject.json

@@ -0,0 +1,9 @@
+{
+  "rule": {
+    "template": "distinguished_name = {% call openssl.section() %}{{ datarules|reverse|join('\n') }}{% endcall %}"
+  },
+  "options": {
+    "required": true,
+    "data_source_combinator": "and"
+  }
+}