January 2012 - Pki-devel - Dogtag PKI List Archives

[PATCH] resteasy drm client patches
by Ade Lee 08 Feb '12

08 Feb '12

These patches provide the DRM test client that is currently being used to test DRM functionality. The patches need to be updated sequentially. The future plan (next week) is to convert these to junit format. For now, though, my focus is on the Python client code. jmagne is already working with these tests, but he will submit his corrections in separate patches. Please review, Ade

2 3

[PATCH] Fix Basic auth handling for passwords containing a colon
by Joshua Roys 06 Feb '12

06 Feb '12

Hello, Attached is a patch to fix the parsing of HTTP Basic auth. Thanks, Joshua Roys

2 2

git push
by Christina 24 Jan '12

24 Jan '12

forgive me as this is my first checkin using git. Something unexpected happened. I was on the master branch and when ready I did "git push" and it unexpectedly told me the following: Counting objects: 50, done. Delta compression using up to 4 threads. Compressing objects: 100% (23/23), done. Writing objects: 100% (28/28), 2.89 KiB, done. Total 28 (delta 19), reused 0 (delta 0) To ssh://git.fedorahosted.org/git/pki.git 5bf257b..5314d04 DOGTAG_9_BRANCH -> DOGTAG_9_BRANCH I did happen to have worked on DOGTAG_9_BRANCH as well but I did not expect it to be pushed as I was on the master at the time, although I was getting it ready as well. I just did not expect it to be pushed. So does git push push everything even though you are not on that branch at the moment? Now I see something called Merge branch 'DOGTAG_9_BRANCH' of ssh://git.fedorahoste.. <http://git.fedorahosted.org/git?p=pki.git;a=commit;h=5314d049fadd54666dbdae…> being pushed onto DOGTAG_9_BRANCH. Is it supposed to be? thanks, Christina

3 4

Some recent systemd security features ( tunable in unit-files)
by Kashyap Chamarthy 20 Jan '12

20 Jan '12

Hi, Just came across this blog post from Lennart Poettering on security features in systemd, which seem to be relatively easy to use by configuring a directive in systemd unit files. Wondering, if we can use any of these for dogtag systemd unit files. http://0pointer.de/blog/projects/security.html Quick notes from the above long post: - Isolating services from the network + A service and all its processes can be disconnected via n/w (I guess this won't be much helpful in our case as dogtag operates mostly over network) - Service-private /tmp + An isolated private /tmp from host system's /tmp - Making directories appear read-only or inaccessible to services - Taking away capabilities from services + Ability to limit kernel capabilities to services - Disallowing forking, limiting file creation for services - Controlling device node access of services + Ex: Like allowing access to a specific device (like/dev/null, and only to this device) -- /kashyap

2 2

[Patch] 0004-File-signing-hash-fix.patch
by Andrew Wnuk 19 Jan '12

19 Jan '12

File signing hash fix. This patch resolves issue of "Agent-Authenticated File Signing" enrollment altering some file hashes. Bug: 771768.

2 3

Please review [PATCH] Fix of broken build of pki-tps in git repo
by Matthew Harmsen 19 Jan '12

19 Jan '12

Please review this patch. It was generated for the DOGTAG_9_BRANCH of ssh://git.fedorahosted.org/git/pki.git. CMakeLists.txt file was changed to account for the removal of empty directories from the source code. Bugzilla Bug #782953

2 1

[PATCH] Fix of broken build of pki-tps in git repo
by Matthew Harmsen 19 Jan '12

19 Jan '12

CMakeLists.txt file was changed to account for the removal of empty directories from the source code. Bugzilla Bug #782953 --- pki/base/tps/CMakeLists.txt | 91 +++++++++++++++++++++++++++++++------------ 1 files changed, 66 insertions(+), 25 deletions(-) diff --git a/pki/base/tps/CMakeLists.txt b/pki/base/tps/CMakeLists.txt index cefe11c..96d23fe 100644 --- a/pki/base/tps/CMakeLists.txt +++ b/pki/base/tps/CMakeLists.txt @@ -98,31 +98,6 @@ install( install( DIRECTORY - forms/esc/demo - forms/esc/home - forms/esc/so - forms/esc/sow - forms/tps - DESTINATION - ${SHARE_INSTALL_PREFIX}/${APPLICATION_NAME}/${PROJECT_NAME}/docroot - PATTERN - "forms/esc/sow/css" EXCLUDE - PATTERN - "forms/esc/sow/images"EXCLUDE - PATTERN - "forms/esc/sow/js"EXCLUDE - PATTERN - "forms/tps/admin/console/css"EXCLUDE -) - -install( - DIRECTORY - DESTINATION - ${SHARE_INSTALL_PREFIX}/${APPLICATION_NAME}/${PROJECT_NAME}/docroot/tokendb -) - -install( - DIRECTORY lib DESTINATION ${SHARE_INSTALL_PREFIX}/${APPLICATION_NAME}/${PROJECT_NAME} @@ -165,3 +140,69 @@ install( ${VAR_INSTALL_DIR}/run/pki/tps ) +install( + DIRECTORY + DESTINATION + ${SHARE_INSTALL_PREFIX}/${APPLICATION_NAME}/${PROJECT_NAME}/docroot/demo +) + +install( + DIRECTORY + DESTINATION + ${SHARE_INSTALL_PREFIX}/${APPLICATION_NAME}/${PROJECT_NAME}/docroot/home +) + +install( + DIRECTORY + DESTINATION + ${SHARE_INSTALL_PREFIX}/${APPLICATION_NAME}/${PROJECT_NAME}/docroot/so +) + +install( + DIRECTORY + DESTINATION + ${SHARE_INSTALL_PREFIX}/${APPLICATION_NAME}/${PROJECT_NAME}/docroot/sow +) + +install( + DIRECTORY + DESTINATION + ${SHARE_INSTALL_PREFIX}/${APPLICATION_NAME}/${PROJECT_NAME}/docroot/tokendb +) + +install( + DIRECTORY + DESTINATION + ${SHARE_INSTALL_PREFIX}/${APPLICATION_NAME}/${PROJECT_NAME}/docroot/tps +) + +install( + DIRECTORY + DESTINATION + ${SHARE_INSTALL_PREFIX}/${APPLICATION_NAME}/${PROJECT_NAME}/docroot/tps/admin +) + +install( + DIRECTORY + DESTINATION + ${SHARE_INSTALL_PREFIX}/${APPLICATION_NAME}/${PROJECT_NAME}/docroot/tps/admin/console +) + +install( + DIRECTORY + DESTINATION + ${SHARE_INSTALL_PREFIX}/${APPLICATION_NAME}/${PROJECT_NAME}/docroot/tps/admin/console/config +) + +install( + DIRECTORY + DESTINATION + ${SHARE_INSTALL_PREFIX}/${APPLICATION_NAME}/${PROJECT_NAME}/docroot/tps/admin/console/img +) + +install( + DIRECTORY + DESTINATION + ${SHARE_INSTALL_PREFIX}/${APPLICATION_NAME}/${PROJECT_NAME}/docroot/tps/admin/console/js +) + -- 1.7.7.1

1 0

osutil: some issues regarding copyright, code
by Timo Aaltonen 18 Jan '12

18 Jan '12

Hi! I'm currently packaging Dogtag et al for Debian and Ubuntu, so I filed an intend-to-package bugreport on the Debian bugtracker about osutil. It got reviewed, and here's a summary of the issues that were found: - src/com/netscape/osutil/unixdefs.h has a Netscape copyright, that forbids distribution and copying. Is it merely a mistake? - "Signal.java has one architecture's signal numbers hardcoded in". Is it still portable to more obscure architectures? - the java files have hardcoded library paths, which will break with multiarch (http://wiki.debian.org/Multiarch) - "full of error messages printed to stdout / stderr" - some of the functionality is apparently duplicated from (current) standard java? (string to byte conversion was mentioned) so it would be great to see at least the copyright issue sorted out, soon, since it prevents inclusion. link to the original bugreport: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=654689 (you can reply there by sending email to 654689(a)bugs.debian.org) -- t

2 3

Please review 0001-BZ-771790-spec-file-version-update-for-0025-BZ-77179.patch
by Matthew Harmsen 18 Jan '12

18 Jan '12

This patch merely updates the spec file to patch the RHEL 6 version of the following bug: * *Bugzilla Bug #771790* <https://bugzilla.redhat.com/show_bug.cgi?id=771790> -sslget does not work after FEDORA-2011-17400 update, breaking FreeIPA install

2 2

[PATCH] 12 Added generics (part 2).
by Endi Sukma Dewata 18 Jan '12

18 Jan '12

This patch brings down the warnings from 4656 to 3999. Ticket #2 http://fedorapeople.org/gitweb?p=edewata/public_git/pki.git;a=commitdiff;h=… -- Endi S. Dewata

2 3