The patch implements https://fedorahosted.org/pki/ticket/1739. We have a bit of a chicken and egg problem. The pki-upgrade command depends on Python 2 code. Ade suggested to have both Python 2 and 3 code in pki-base. The approach has the disadvantage to pull in python3 dependencies like python3-nss, python3-requests and python3-six. The patch uses a different approach: - new package 'pki-base-python3' depends on 'pki-base' - 'pki-base' now also provides 'pki-base-python2' You still can't have pki-base-python3 without pki-base-python2 but you can have pki-base-python2 without Python 3. Once we switch to Python 3 for pki.server (10.4?), we can switch dependencies and have pki-base-python2 as extra package. Christian