Support NSSDB in Python API

This issue was migrated from Pagure Issue #1360. Originally filed by ftweedal (@frasertweedale) on 2015-04-30 03:32:59:

Assigned to nobody

The pki Python API is difficult to use with FreeIPA because it expects certificates in PEM format, but FreeIPA stores certificates in an NSSDB.

The way FreeIPA does requests is to use httplib with a custom connection factory that establishes the secure connection and handles the client certificate. The Dogtag API uses python-requests, so options seem to be:

find a way to make python-requests work with NSSDB certificates (which should not be exported)
refactor the Python code to not use python-requests and implement support for user-supplied connection factory.

pki-bot / pki-issues-final

Support NSSDB in Python API #1350