From d4fbfa984f0038fe58affa027b971c1032d6ab03 Mon Sep 17 00:00:00 2001
From: puiterwijk <patrick@puiterwijk.org>
Date: Feb 11 2017 08:46:02 +0000
Subject: Add --really flag to fedora-cert


Most users don't actually need a certificate anymore.
This change will tell them as such, with an info link, while keeping the option to get a
certificate for people that need to, like releng for sigul communication.

Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com>

---

diff --git a/src/fedora-cert.py b/src/fedora-cert.py
index 19ed6d5..9c77551 100755
--- a/src/fedora-cert.py
+++ b/src/fedora-cert.py
@@ -17,6 +17,16 @@ import os.path
 import sys
 
 def main(opts):
+    if not opts.confkrb and not opts.really:
+        print("Unless you are very sure you need to, you probably "
+              "don't need to run this tool. Certificates are no "
+              "longer used by Fedora koji.")
+        print("Please see https://fedoraproject.org/wiki/ReleaseEngineering/FlagDay2016 "
+              "for more information. Pass -r if you really want a "
+              "certificate")
+        sys.exit(1)
+        return
+
     # lets read in the existing cert if it exists.
     # gets us existing acc info
     if not opts.username:
@@ -71,6 +81,8 @@ def main(opts):
 
 if __name__ == '__main__':
     opt_p = optparse.OptionParser(usage="%prog [OPTIONS] ")
+    opt_p.add_option('-r', '--really', action='store_true', dest='really',
+                     default=False, help="Really get a certificate.")
     opt_p.add_option('-u', '--username', action='store', dest='username',
                      default=False, help="FAS Username.")
     opt_p.add_option('-n', '--new-cert', action='store_true', dest='newcert',