Just call cli.manage directly to get produced exception, as it's what this
part of the test is really about.

argparse.__init__'s "version" argument is for backward-compatibility with
optparse, and is dropped in python3.

Make tests almost completely silent by default, while still printing output
generated during corresponding test on failure.
Produce more somewhat-apache-like error logs, both from httpd and wsgi
errors.

Show the error message without a traceback.

More consistent with address extraction.

Python was unexpectedly binding utils.until to this class, causing "self"
argument to be automatically generated, which is not expected by this
function.
Tests do not exercise this code path because they are overriding this
property, precisely to check that it gets called...
Also, add docstring.

Not sure what this is doing here. There are not any failure masked by this.

stdout is supposed to accept bytes, not unicode objects.
And byte-ify all printed values to satisfy python3.

toHTTPS was only taking care of scheme, which is not enough. So use
self._https_url directly.

Avoids hardcoding newline char.

Otherwise, verification against IP-only CA certificate will fail, as
common name is sometimes used to contain a domain name (which is
deprecated in favour of alternative names, but still checked).

What was not picked up by 2to3.

Using only 2to3 conversions which are python2-compatible.

Self-describe site structure in application/hal+json format.
Add Cross-Origin Resource Sharing support: pre-flight request support,
same-origin-only origin access control minimal html page. Access control
decision is stored client-side in a signed & time-limited cookie
supporting multiple concurrent origins. Origins may be pre-allowed (ex:
when caucase GUI is served from a trusted server).

This makes it safer to trust this CA certificate in general-purpose https
clients, like web browsers, as it prevents such trusted CA certificate
from issuing rogue certificates.
Bump pyOpenSSL to latest version (and, as a consequence of pyOpenSSL
18.0.0 itself requiring cryptography 2.1.1, bump it as well) as it seems to
fix a bug related to validating NameConstraints - and anyway fixes
worrying use-after-free errors.