Pan-python

------------------

- Don't override default Exception class __init__() and __str__()
methods since we don't change anything.

- pan.wfapi: Restore behaviour of allowing non-2XX response codes to
fall through urlopen() that was erroneously removed in previous SSL
handling/PEP 476 changes.

- pan.xapi: For commit sync=True, sleep at the top of the loop so we
don't poll immediately after commit.

- pan.wfapi: Mention WildFire appliance in the module docstring.

- pan.wfapi, panwfapi.py: Rework SSL handling to use SSL context and
recognize PEP 476 changes in Python 2.7.9 and 3.4.3. Greatly
simplifies SSL certificate verification.

NOTE INCOMPATIBLE CHANGES:

pan.wfapi.PanWFapi(): cacloud, cafile, capath removed.
ssl_context added.

panwfapi.py: --cacloud removed. --ssl added.

- panxapi.py: If a .panrc tagname is specified with -k the output will
be hostname and api_key varname values for use in a .panrc file.

- panwfapi.rst: hostname can also specify a WildFire appliance.

- panwfapi.py: Allow --date to be specified as -days or 0 for today.

- Use 7.0 links to documentation.

- reStructuredText blank line cleanup.

- pan.wfapi, panwfapi.py: Add support for /publicapi/submit/link(s)
requests.

- pan.wfapi, panwfapi.py: Add support for WildFire API
/publicapi/submit/change-request request.

------------------

- pan.xapi: Allow xml_result() to match result in report output.

- pan.config: Fix typo causing Panorama 6.1 xpaths to not be used.

- panrc.rst: Add section on .panrc file permissions.

- panxapi.py: Use lstrip('\r\n').rstrip() on response XML and message
before printing.

- Fix a bug where we only processed the first node for -pjr when there
was more than one node.

- Move .panrc documentation to a separate document.

- Documentation: /publicapi/get/verdicts allows up to 500 hashes.

------------------

- Don't name the internal log function log as this steps on the log()
method in pan.xapi; change in all modules for consistency.

- panwfapi.rst: Typo in WildFire .panrc example.

- pan.xapi: type=report&reporttype=predefined response does not return
charset in content-type. Fix to be more liberal in what we accept.

- pan.wfapi.rst: Fix wrong variable in Debugging and Logging example.

- pan.xapi: Document element_root data attribute.

- panxapi.py: Missed a use of pan.xapi.xml_python() when it was
removed.

- panxapi.py: Fix --ls (formatted PCAP listing), which has been broken
since 5.0 due to XML response format changes.

- pan.xapi: Workaround bug in 5.0 and 6.0: export PCAP response
incorrectly uses content-type text/plain instead of
application/octet-stream.

- panxapi.py, pan.xapi: Add support for the extended packet capture
feature added in PAN-OS 6.0 which is used for threat PCAPs.

- panxapi.py: Files besides PCAP can be exported that are returned as
attachments (e.g., device-state), so rename save_pcap() to
save_attachment().

- pan.xapi: Add text_document data attribute which contains the
message body from the previous API request when the response
content-type is text/plain.

- panxapi.py: Add --text option to print text to stdout.

- panxapi.py, pan.xapi: Allow --ad-hoc to be used to modify (replace)
and augment (add to) the standard parameters in the request.

- Add reference to PAN-OS and WildFire documentation to SEE ALSO
sections of the documentation.

- panxapi.py: Can export more than PCAP files; update documentation
and usage.

- Add Python 3.4 to supported list.

- pan.xapi: When an XML response does not contain a status attribute
(e.g., export configuration), set to 'success'.

- pan.xapi: If ElementTree has text use for start of xml_result()
string.

- pan.xapi.op(): Handle multiple double quoted arguments for
cmd_xml=True.

- panxapi.py: When -r is specified without any of -xjp, -x is now
implied.

- pan.config: Add PAN-OS 6.1 for set CLI.

- pan.wfapi: Don't override self._msg in __set_response() if already
set. Handle case on non 2XX HTTP code and no content-type in
response.

- panxapi.py: Print warning if extra arguments after xpath.

- pan.xapi: Address changes to Python 2.7.9 and 3.4.3 which now
perform SSL server certificate verification by default (see PEP
476). Maintains past behaviour of no verification by default.

NOTE: this removes the cafile and capath arguments from PanXapi()
and adds ssl_context.

- pan.wfapi, panwfapi.py: Add support for:
get sample verdict /publicapi/get/verdict
get sample verdicts /publicapi/get/verdicts
get verdicts changed /publicapi/get/verdicts/changed

- pan.wfapi.rst: Add table with HTTP status codes that can be
returned.

- pan.wfapi: Add constants for verdict integer values.

- pan.wfapi: Remove HTTP status code reason phrases that are returned
by default now.

- Set SIGPIPE to SIG_DFL in panxapi.py for consistency with panconf.py
and panwfapi.py. This is needed on some systems when piping to
programs like head so we don't see BrokenPipeError. Also handle
AttributeError for Windows which doesn't have SIGPIPE.

------------------

- Change debug messages in modules from print to stderr to log using
the logging module. See the section 'Debugging and Logging' in
pan.wfapi.rst and pan.xapi.rst for an example of configuring the
logging module to enable debug output.

IMPORTANT NOTE: the debug argument has been removed from the
constructors, so programs using them must be modified.

- Add platform ID for Windows 7 64-bit sandbox to WildFire
documentaton.

- Fix bug in panconf.py: positional arguments not initialized to none
in conf_set()

- Remove undocumented xml_python() method from pan.xapi and pan.wfapi.
Use pan.config if you need this.

- Add 'serial' varname to .panrc. Allows you to have tags which
reference a Panorama managed device via redirection. Suggested by
Jonathan Kaplan.

- Add example to panxapi.rst: Print operational command variable using
shell pipeline.

- Document --sync, --interval, --timeout for panxapi.py

- Add --validate to panxapy.py which runs commit with a cmd argument
of <commit><validate></validate></commit> to validate the
configuration. This is a new feature in PAN-OS 6.0.

- Fix keygen() to return api_key as documented.

- Add support for type=config&action=override. From btorres-gil

------------------

- WildFire API support.

------------------

- PEP8 cleanup.

- fix unintended _valid_part to valid_part variable name change in
pan.config.

- handle type=user-id register and unregister response messages.
suggested and initial diff by btorresgil.

- fix serial number (target API argument) not set in type=commit;
from btorresgil.

- fix debug print to stdout vs. stderr in pan.xapi.

- changes for PyPI upload in setup.py.