Pki-devel

Download

devel@lists.dogtagpki.org

February 2009

2 participants
2 discussions

Dogtag's http interface
by Melton, Lawrence 14 Sep '09

14 Sep '09

Since CMS 6.0 through CS 7.1, we've been using a Java application (instead of a web browser) to access the CA's http interface, such as this: //* This is the relative URL for submitting cert requests to the CA public static final String caProfileSubmit = "/ca/profileSubmit"; //* This is the relative URL for accessing the end entity web page at the CA public static final String caEndEntity = "/ca/index.html"; //* This is the relative URL for accessing the agent web page at the CA public static final String caAgent = "/ca/index.html"; //* This is a relative URL for POSTing a request for certificate requests; only an agent should be able to get to this page public static final String caAgentAccess = "/ca/queryReq"; //* This is the relative URL for accessing the agent web page at the DRM for searching for archived keys public static final String drmSearchForKey = "/kra/srchKeyForRecovery"; //* This is the relative URL for accessing the agent web page at the DRM for diplaying archived keys by certificate serial number public static final String drmDisplayBySerialNumber = "/kra/displayBySerialForRecovery"; //* This is the relative URL for accessing the agent web page at the DRM for requesting recovery of archived private keys by certificate serial number public static final String drmRecoverBySerialNumber = "/kra/recoverBySerial"; //* This is the relative URL for accessing the agent web page at the DRM for granting key recovery requests public static final String drmGrantRecovery = "/kra/grantRecovery"; //* This is the relative URL for retrieving a key in a PKCS#12 message from the DRM public static final String drmGetPKCS12Message = "/kra/getPk12"; //* This is the relative URL for accessing the agent web page at the DRM public static final String drmAgent = "/kra/index.html"; //* This is the relative URL for retrieving the DRM's transport certificate public static final String drmDisplayTransportCert = "/kra/displayTransportCert"; Now with CS 7.3 and Dogtag, the interface is different. I think the end entity page is found at "/ca/ee/ca/index.html" and the agent page is found at "/ca/agent/ca/index.html". I'm still trying to figure out the rest. Is there an http interface document for Dogtag? Is there an intuitive formula or a web.xml document that shows the new interface? Thanks, Larry

2 2

Error in pki/base/common/src/com/netscape/cms/authentication/FlatFileAuth.java
by Jung, Alexander (Allianz ASIC SE) 17 Feb '09

17 Feb '09

Hello, we tried to use the FlatFileAuth authentication filter for some tests. It did not work correctly, as it just used the first username/password pair in the flat authentication file. I tracked this down to the getValueNames() method in FlatFileAuth which simply returns a null pointer, which causes the username/password compare to shortcut and work only for the first username/password pair in the authentication file. When replaced with this method implementation: /** * Retrieves a list of names of the value parameter. */ public Enumeration getValueNames() { Vector retVal = new Vector(); for (int i = 0; i < authAttrs.length; i++) { retVal.add(authAttrs[i]); } for (int i = 0; i < keyAttrs.length; i++) { retVal.add(keyAttrs[i]); } return retVal.elements(); } the authenticator works as expected. This bug is not yet fixed in the 14561 revision of FlatFileAuth that I checked out of the SVN last thursday (Feb 12th 09). The fix also helps our historic iplanet Certificate Server 4.7 SP1 installation :-) Yours, Alexander Jung -- Allianz Shared Infrastructure Services SE AG6DCI02 Security and Internet VGU B01 126 Dieselstraße 6 D-85774 Unterföhring Phone +49 89 3800 16026 Fax +49 89 3800 816026 Mobile +49 172 6349812 E-Mail alexander.jung(a)allianz.com Allianz Shared Infrastructure Services SE: Chairman of the Supervisory Board: Oliver Bäte Board of Management: Dr. Markus T. Müller (CEO), Bertrand d'Origny (CDO), Dr. Martin Elspermann (COO) For VAT-Purposes: VAT-Registration Number: DE 815 001 893 Registered Office: Munich Registration Court: Munich HRB 173 388 Please note: This email and any files transmitted with it is intended only for the named recipients and may contain confidential and/or privileged information. If you are not the intended recipient, please do not read, copy, use or disclose the contents of this communication to others and notify the sender immediately. Then please delete the email and any copies of it. Thank you.

1 0