Description of problem:

Revoking certificate is causing an internal error and tracebace.  ipa cert-revoke is being executed without supplying  --revocation-reason=

The default should be zero .. but the trace back indicates reason 7
https://bugzilla.redhat.com/show_bug.cgi?id=712889  (existing bug)


errors_log traceback:

[Thu Jul 21 13:44:47 2011] [error] ipa: ERROR: non-public: KeyError: 'revocation_reason'
[Thu Jul 21 13:44:47 2011] [error] Traceback (most recent call last):
[Thu Jul 21 13:44:47 2011] [error]   File "/usr/lib/python2.6/site-packages/ipaserver/rpcserver.py", line 220, in wsgi_execute
[Thu Jul 21 13:44:47 2011] [error]     result = self.Command[name](*args, **options)
[Thu Jul 21 13:44:47 2011] [error]   File "/usr/lib/python2.6/site-packages/ipalib/frontend.py", line 425, in __call__
[Thu Jul 21 13:44:47 2011] [error]     ret = self.run(*args, **options)
[Thu Jul 21 13:44:47 2011] [error]   File "/usr/lib/python2.6/site-packages/ipalib/frontend.py", line 731, in run
[Thu Jul 21 13:44:47 2011] [error]     return self.execute(*args, **options)
[Thu Jul 21 13:44:47 2011] [error]   File "/usr/lib/python2.6/site-packages/ipalib/plugins/cert.py", line 554, in execute
[Thu Jul 21 13:44:47 2011] [error]     if kw['revocation_reason'] == 7:
[Thu Jul 21 13:44:47 2011] [error] KeyError: 'revocation_reason'

Automated Test:

::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::
:: [   LOG    ] :: ipa-functionalservices-ldap-006: Revoke certificate
::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::

kdestroy: No credentials cache found while destroying cache
spawn /usr/bin/kinit -V admin
Using default cache: /tmp/krb5cc_0
Using principal: admin@TESTRELM
Password for admin@TESTRELM: 
Authenticated to Kerberos v5
Default principal: admin@TESTRELM
:: [02:11:49] ::  kinit as admin with password Secret123 was successful.
:: [   PASS   ] :: Get administrator credentials
:: [02:11:52] ::  ldap/hp-dl360g5-02.testrelm certificate serial number: 14
ipa: ERROR: an internal error has occurred
:: [   FAIL   ] :: Revoke LDAP server's certificate (Expected 0, got 1)
:: [02:11:54] ::  Checking certificate revokation via OCSP
:: [02:11:54] ::  EXECUTING: /usr/lib64/nss/unsupported-tools/ocspclnt -S "hp-dl360g5-02.testrelm" -d /etc/dirsrv/slapd-instance1/
:: [   PASS   ] :: Running ocspclnt
:: [   FAIL   ] :: File '/tmp/ocsp.out' should contain 'Peer's Certificate has been revoked.' 

Version-Release number of selected component (if applicable):
# rpm -qi ipa-server
Name        : ipa-server                   Relocations: (not relocatable)
Version     : 2.0.99                            Vendor: (none)
Release     : 3.20110721T0516zgit8e8ad51.el6   Build Date: Thu 21 Jul 2011 01:29:18 AM EDT
Install Date: Thu 21 Jul 2011 12:43:27 PM EDT      Build Host: goofy-vm16.dsdev.sjc.redhat.com
Group       : System Environment/Base       Source RPM: ipa-2.0.99-3.20110721T0516zgit8e8ad51.el6.src.rpm
Size        : 3314423                          License: GPLv3+
Signature   : (none)
URL         : http://www.freeipa.org/
Summary     : The IPA authentication server
Description :
IPA is an integrated solution to provide centrally managed Identity (machine,
user, virtual machines, groups, authentication credentials), Policy
(configuration settings, access control information) and Audit (events,
logs, analysis thereof). If you are installing an IPA server you need
to install this package (in other words, most people should NOT install
this package).


How reproducible:


Steps to Reproduce:
1. ipa cert-revoke <servial_number>
2.
3.
  
Actual results:
# ipa cert-revoke 15
ipa: ERROR: an internal error has occurred

Expected results:
successful revocation with default reason 0

Additional info: