This update adds a few new features: * Corrects bugs which prevented activation when the "getcert" command was run. * It adds initial support for using SCEP to communicate with CAs. The service will need to be told about such CAs using either getcert's "add-scep-ca" or "add-ca" commands. * getcert's "request" command can now be passed a ChallengePassword value to include in signing requests using the new -L and -l flags. * getcert's "list" command now displays the contents of an issued certificate's enrollment certificate type extension.

Additionally, it fixes some bugs: * ipa-submit no longer crashes when it's unable to reach a server and attempts to select an alternate server using DNS service discovery. * getcert's "list" command correctly displays the pre- and post-save commands associated with a certificate again. * getcert's "list" command no longer prints the values of PINs which were previously supplied using the -P option.