[IMP] Some improvements

manage_pki.py

@@ -27,14 +27,16 @@ def main():
     root_group = parser.add_argument_group('Root CA options')
     root_group.add_argument('--create-root', dest="initialize", action="store_true", help="Create PKI")
     root_group.add_argument('--full-create', dest="full_initialize", action="store_true", help="Create Root CA, intermediate CA and DC certificate. Use --name and --dc-name")
-    root_group.add_argument('--root-crl', dest='root_crl', help='Regenerate CRL for root CA')
+    root_group.add_argument('--root-crl', dest='root_crl', action="store_true", help='Regenerate CRL for root CA')
     root_group.add_argument('--root-show-certs','--root-show-certificates', dest="root_certs", help='List all certificates issues of root CA')
+    root_group.add_argument('--root-revoke', dest='root_revoke', help='Revoke an intermediate CA')
 
     intermediate_group = parser.add_argument_group('Intermediate CA options', 'Manage intermediate CA')
     intermediate_group.add_argument('--create-intermediate', dest="create_intermediate", action="store_true", help="Create an intermediate CA. Specify name with --name option.")
     intermediate_group.add_argument('--name', dest='intermediate_name', help='Specify what intermediate CA to manage')
     intermediate_group.add_argument('--crl', dest='intermediate_crl', help='Regenerate CRL for intermediate CA. Specify name with --name option.')
     intermediate_group.add_argument('--show-certs', '--show-certificates', dest='intermediate_list', help='List all certificates issues of intermediate CA. Specify name with --name option.')
+    intermediate_group.add_argument('--revoke-certs', dest='intermediate_revoke', help="Revoke certificate issue of an intermediate CA. Specify intermediate CA name with --name option")
 
     dc_cert = parser.add_argument_group('Domain Controler options', 'Manage DC certificates')
     dc_cert.add_argument('--dc-cert', dest="dc_cert", action="store_true", help="Create a DC certificate. Specify intermediate CA name with --name option. \
@@ -50,21 +52,33 @@ def main():
 
     args = parser.parse_args()
 
+    # Root CA
     if args.initialize:
         create_openssl_config(force=args.force,verbose=args.verbose)
 
+    if args.root_crl:
+        generate_root_crl(verbose=args.verbose)
+
+
+    # Intermediate CA
     if args.create_intermediate:
         if not args.intermediate_name:
             print('Add --name to create intermediate CA')
         else:
             create_openssl_intermediate(args.intermediate_name,args.force,args.verbose)
 
+
+    # DC certificates
     if args.dc_cert:
         if not args.dc_name or not args.intermediate_name:
             print('Add --dc-name or --name with this command')
         else:
             generate_dc_certificate(dc_name=args.dc_name, ca_name=args.intermediate_name, force=args.force, verbose=args.verbose)
 
+    # User certificates
+
+
+    # Other
     if args.full_initialize:
         if not args.dc_name or not args.intermediate_name:
             print('Add --dc-name or --name with this command')