From 7b1144eadcf2dd66fba43ce6dc884940bc2771e8 Mon Sep 17 00:00:00 2001
From: Matus Honek <mhonek@redhat.com>
Date: Nov 20 2019 14:59:05 +0000
Subject: Issue 50711 - `dsconf security` lacks option for setting nsTLSAllowClientRenegotiation attribute


Bug Description:
dsconf security is not able to handle nsTLSAllowClientRenegotiation attribute.

Fix Description:
Add the respective option for dsconf.

Relates https://pagure.io/389-ds-base/issue/50711

Author: Matus Honek <mhonek@redhat.com>

Review by: spichugin, mreynolds (thanks!)

---

diff --git a/src/lib389/lib389/cli_conf/security.py b/src/lib389/lib389/cli_conf/security.py
index 0273817..1d60a2f 100644
--- a/src/lib389/lib389/cli_conf/security.py
+++ b/src/lib389/lib389/cli_conf/security.py
@@ -30,6 +30,9 @@ SECURITY_ATTRS_MAP = OrderedDict([
     ('tls-client-auth', Props(Encryption, 'nsSSLClientAuth',
                               'Client authentication requirement',
                               ('off', 'allowed', 'required'))),
+    ('tls-client-renegotiation', Props(Encryption, 'nsTLSAllowClientRenegotiation',
+                                       'Allow client TLS renegotiation',
+                                       onoff)),
     ('require-secure-authentication', Props(Config, 'nsslapd-require-secure-binds',
                                             'Require binds over LDAPS, StartTLS, or SASL',
                                             onoff)),