Dogtag's http interface
by Melton, Lawrence
Since CMS 6.0 through CS 7.1, we've been using a Java application (instead
of a web browser) to access the CA's http interface, such as this:
//* This is the relative URL for submitting cert requests to the CA
public static final String caProfileSubmit = "/ca/profileSubmit";
//* This is the relative URL for accessing the end entity web page at
the CA
public static final String caEndEntity = "/ca/index.html";
//* This is the relative URL for accessing the agent web page at the CA
public static final String caAgent = "/ca/index.html";
//* This is a relative URL for POSTing a request for certificate
requests; only an agent should be able to get to this page
public static final String caAgentAccess = "/ca/queryReq";
//* This is the relative URL for accessing the agent web page at the DRM
for searching for archived keys
public static final String drmSearchForKey = "/kra/srchKeyForRecovery";
//* This is the relative URL for accessing the agent web page at the DRM
for diplaying archived keys by certificate serial number
public static final String drmDisplayBySerialNumber =
"/kra/displayBySerialForRecovery";
//* This is the relative URL for accessing the agent web page at the DRM
for requesting recovery of archived private keys by certificate serial
number
public static final String drmRecoverBySerialNumber =
"/kra/recoverBySerial";
//* This is the relative URL for accessing the agent web page at the DRM
for granting key recovery requests
public static final String drmGrantRecovery = "/kra/grantRecovery";
//* This is the relative URL for retrieving a key in a PKCS#12 message
from the DRM
public static final String drmGetPKCS12Message = "/kra/getPk12";
//* This is the relative URL for accessing the agent web page at the DRM
public static final String drmAgent = "/kra/index.html";
//* This is the relative URL for retrieving the DRM's transport
certificate
public static final String drmDisplayTransportCert =
"/kra/displayTransportCert";
Now with CS 7.3 and Dogtag, the interface is different. I think the end
entity page is found at "/ca/ee/ca/index.html" and the agent page is found
at "/ca/agent/ca/index.html". I'm still trying to figure out the rest.
Is there an http interface document for Dogtag? Is there an intuitive
formula or a web.xml document that shows the new interface?
Thanks,
Larry
15 years, 3 months
- 2
- 2
Error in pki/base/common/src/com/netscape/cms/authentication/FlatFileAuth.java
by Jung, Alexander (Allianz ASIC SE)
Hello,
we tried to use the FlatFileAuth authentication filter for some tests. It
did not work correctly, as it just used the first username/password pair in
the flat authentication file.
I tracked this down to the getValueNames() method in FlatFileAuth which
simply returns a null pointer, which causes the username/password compare to
shortcut and work only for the first username/password pair in the
authentication file.
When replaced with this method implementation:
/**
* Retrieves a list of names of the value parameter.
*/
public Enumeration getValueNames() {
Vector retVal = new Vector();
for (int i = 0; i < authAttrs.length; i++) {
retVal.add(authAttrs[i]);
}
for (int i = 0; i < keyAttrs.length; i++) {
retVal.add(keyAttrs[i]);
}
return retVal.elements();
}
the authenticator works as expected. This bug is not yet fixed in the 14561
revision of FlatFileAuth that I checked out of the SVN last thursday (Feb
12th 09).
The fix also helps our historic iplanet Certificate Server 4.7 SP1
installation :-)
Yours,
Alexander Jung
--
Allianz Shared Infrastructure Services SE
AG6DCI02 Security and Internet
VGU B01 126
Dieselstraße 6
D-85774 Unterföhring
Phone +49 89 3800 16026
Fax +49 89 3800 816026
Mobile +49 172 6349812
E-Mail alexander.jung(a)allianz.com
Allianz Shared Infrastructure Services SE:
Chairman of the Supervisory Board: Oliver Bäte
Board of Management: Dr. Markus T. Müller (CEO), Bertrand d'Origny (CDO),
Dr. Martin Elspermann (COO)
For VAT-Purposes: VAT-Registration Number: DE 815 001 893
Registered Office: Munich
Registration Court: Munich HRB 173 388
Please note: This email and any files transmitted with it is intended only
for the named recipients and may contain confidential and/or privileged
information. If you are not the intended recipient, please do not read,
copy, use or disclose the contents of this communication to others and
notify the sender immediately. Then please delete the email and any copies
of it. Thank you.
15 years, 10 months
- 1
- 0
- ← Newer
- 1
- Older →