April 2012 - Pki-devel - Dogtag PKI List Archives

0001-Provide-CA-EE-Restful-interface-and-test-client.patch
by John Magne 08 May '12

08 May '12

Provide CA EE Restful interface and test client. Tickets #144 and #145 Providing the following: 1. Simple EE restful interface for certificates, printing, listing and searching. 2. Simple EE restful interface for certificate enrollment requests. 3. Simple EE restful interface for profiles and profile properties. 4. Simple Test client to exercise the functionality. 5. Created restful client base class inherited by CARestClient and DRMRestClient. 6. Provide simple restful implementations of new interfaces added. ToDO: Need some more refactoring to base classes for some of the new classes which are similar to classes in the DRM restful area. ToDO: Actual certificate enrollment code that will be refactored from existing ProfileSubmitServlet.

3 8

[pki-devel][Patch] 0001-JNDI-realm-enhancement-to-handle-multiple-entry-ACLs.patch
by John Magne 05 May '12

05 May '12

Simple patch to allow the PKIJNDI realm to handle multi-entry ACLs. Ticket #123

2 3

PATCH 0029 - RESTful servlet to configure system in a single servlet
by Ade Lee 01 May '12

01 May '12

Please review: New RESTful servlet that does system configuration in a single servlet. Installation code common to the panels and the installation servlet are extracted to a ConfigurationUtils file. The panel code will be cleaned up to use the code in this class in a later commit. Contains restful client and test driver code. The test driver code should be modified and placed in a junit/system test framework. Installation has been tested to work with the following installations: master CA, clone CA, KRA, OCSP, TKS, subordinate CA, CA signed by external CA (parts 1 and 2). Ticket #155 Thanks, Ade

2 3

[pki-devel][Patch] 0001-Fix-DRMRestClient-SSL-connection-implementation.patch
by John Magne 26 Apr '12

26 Apr '12

Simple fix to get SSL working again in the DRMRestClient program. Ticket #163

2 2

[PATCH] PKI Deployment Framework
by Matthew Harmsen 23 Apr '12

23 Apr '12

Please review and provide an ACK for the attached patch. This patch attempts to continue implementation of the PKI Deployment Framework based upon the revised filesystem layout documented here: * http://pki.fedoraproject.org/wiki/PKI_Instance_Deployment#CA_.2F_KRA_.2F_OC… The following patch adds/corrects functionality of the existing PKI Deployment Framework including (but not limited to): * Completed the following six 'scriptlets': Dogtag 10: Python 'initialization.py' Installation Scriptlet (https://fedorahosted.org/pki/ticket/147) Dogtag 10: Python 'instance_layout.py' Installation Scriptlet (https://fedorahosted.org/pki/ticket/75) Dogtag 10: Python 'webserver_layout.py' Installation Scriptlet (https://fedorahosted.org/pki/ticket/140) Dogtag 10: Python 'subsystem_layout.py' Installation Scriptlet (https://fedorahosted.org/pki/ticket/141) Dogtag 10: Python 'war_explosion.py' Installation Scriptlet (https://fedorahosted.org/pki/ticket/76) Dogtag 10: Python 'finalization.py' Installation Scriptlet (https://fedorahosted.org/pki/ticket/148) * Created numerous PKI deployment helper utilities. * Augmented logging to provide indentation. * Generated logic for installation 'manifest'. * Tested logic using '--dry_run' option and '-p' prefix options. * Per initial review, removed numerous "constants" and consolidated logic into "master" dictionary. * Corrected the following ticket: Dogtag 10: Fix 'build_dogtag_pki' script to account for 'pki-deploy' RPM (https://fedorahosted.org/pki/ticket/138) Resolves Bugzilla Bug #810047 - build_dogtag_pki fails with requirements for pki-deploy (https://bugzilla.redhat.com/show_bug.cgi?id=810047) * Created the following three 'scriptlets' as 'NOT YET IMPLEMENTED' place-holders: Dogtag 10: Python 'security_databases.py' Installation Scriptlet (https://fedorahosted.org/pki/ticket/136) Dogtag 10: Python 'slot_assignment.py' Installation Scriptlet (https://fedorahosted.org/pki/ticket/146) Dogtag 10: Python 'configuration.py' Configuration Scriptlet (https://fedorahosted.org/pki/ticket/137) After being installed, this code can be tested by running the following command-line examples (as 'root' or 'sudo'): * mkdir /tmp/pki * sudo pkispawn -s CA -p /tmp/pki -v --dry_run * sudo pkispawn -s CA -p /tmp/pki -v * sudo pkispawn -s CA -p /tmp/pki -u -v --dry_run * sudo pkispawn -s CA -p /tmp/pki -u -v * sudo pkidestroy -s CA -p /tmp/pki -v --dry_run * sudo pkidestroy -s CA -p /tmp/pki -v This code ONLY affects the un-released 'pki-deploy' package, so check-in of these changes should not harm the existing source in any way. NOTE: After receiving an ACK for these changes, I will update my horribly out-of-date working repo located at: * http://fedorapeople.org/gitweb/mharmsen/public_git/pki.git Thanks in advance, -- Matt

1 0

[PATCH] 45 Replaced key status update thread with executor service.
by Endi Sukma Dewata 19 Apr '12

19 Apr '12

The Thread.stop() is deprecated, so the key status update thread is now implemented with executor service to allow stopping the task gracefully. Ticket #3 -- Endi S. Dewata

2 2

[PATCH] 54 Configured Eclipse to clean up on save.
by Endi Sukma Dewata 16 Apr '12

16 Apr '12

Eclipse has been configured to do the followings on save: - organize imports - remove unused imports - remove unnecessary casts - remove trailing white spaces on all lines These settings can be configured in PKI Project -> Properties -> Java Editor -> Save Actions. Ticket #134 -- Endi S. Dewata

2 2

[PATCH] 56 Removed deprecated resources.
by Endi Sukma Dewata 12 Apr '12

12 Apr '12

Some exceptions used deprecated resource class names as the bundle name, they have been replaced with string constants. The deprecated resource classes are no longer used, so they have been removed. Ticket #3 -- Endi S. Dewata

2 2

[PATCH] 55 Removed unused private fields.
by Endi Sukma Dewata 12 Apr '12

12 Apr '12

Most of unused private fields have been removed because they generate warnings in Eclipse. Some are kept because it might be useful later. Ticket #139 -- Endi S. Dewata

2 2

[PATCH] PKI Deployment Framework
by Matthew Harmsen 12 Apr '12

12 Apr '12

Please review and provide an ACK for the attached patch. This patch attempts to continue implementation of the PKI Deployment Framework based upon the revised filesystem layout documented here: * http://pki.fedoraproject.org/wiki/PKI_Instance_Deployment#CA_.2F_KRA_.2F_OC… The following patch adds/corrects functionality of the existing PKI Deployment Framework including (but not limited to): * Created first three 'scriptlets': o Dogtag 10: Python 'instance_layout.py' Installation Scriptlet (https://fedorahosted.org/pki/ticket/75) o Dogtag 10: Python 'webserver_layout.py' Installation Scriptlet (https://fedorahosted.org/pki/ticket/140) o Dogtag 10: Python 'subsystem_layout.py' Installation Scriptlet (https://fedorahosted.org/pki/ticket/141) * Created numerous PKI deployment helper utilities. * Augmented logging to provide indentation. * Generated logic for installation 'manifest'. * Tested logic using '--dry_run' option and '-p' prefix options. After being installed, this code can be tested by running the following command-line examples (as 'root' or 'sudo'): * mkdir /tmp/pki * sudo pkispawn -s CA -p /tmp/pki -v --dry_run * sudo pkispawn -s CA -p /tmp/pki -v * sudo pkispawn -s CA -p /tmp/pki -u -v --dry_run * sudo pkispawn -s CA -p /tmp/pki -u -v * sudo pkidestroy -s CA -p /tmp/pki -v --dry_run * sudo pkidestroy -s CA -p /tmp/pki -v This code ONLY affects the un-released 'pki-deploy' package, so check-in of these changes should not harm the existing source in any way. NOTE: After receiving an ACK for these changes, I will update my horribly out-of-date working repo located at: * http://fedorapeople.org/gitweb/mharmsen/public_git/pki.git Thanks in advance, -- Matt

1 0