August 2012 - Pki-devel - Dogtag PKI List Archives

[PATCH] 109 Merged Javadoc packages.
by Endi Sukma Dewata 05 Sep '12

05 Sep '12

The Javadocs for pki-util, pki-java-tools and pki-common have been merged and packaged into pki-javadoc RPM. Ticket #295 -- Endi S. Dewata

2 2

[PATCH] 107 Added proxy realm.
by Endi Sukma Dewata 05 Sep '12

05 Sep '12

CMS engine is a singleton and it's used by PKI realm to authenticate users accessing the subsystem. Since a Tomcat instance may contain multiple subsystems, each having separate realm, the PKI JAR files need to be moved into WEB-INF/lib so that they will run inside separate class loaders. Note that Tomcat requires that the JAR files be copied into this folder, they cannot be linked. Tomcat also requires that the authenticator and realm classes be available in common/lib. To address this a new package pki-tomcat.jar has been added. The package contains the authenticator and a proxy realm. When the subsystems start running, they will register their own realms into the proxy realms such that the authentications will be forwarded to the appropriate subsystems. Ticket #89 -- Endi S. Dewata

2 6

[PATCH] 106 Moved WAR creation code into CMake scripts.
by Endi Sukma Dewata 05 Sep '12

05 Sep '12

The code to generate the WAR files has been moved from the RPM spec file into the CMake scripts for each subsystem to allow better control. Ticket #89 -- Endi S. Dewata

3 5

[PATCH] 110 Removed duplicate common classes in pki-console.jar.
by Endi Sukma Dewata 04 Sep '12

04 Sep '12

The pki-console has been modified to depend on pki-base. This way it's no longer necessary to include duplicate common classes in pki-console. Ticket #113 I verified installing pki-base, dogtag-pki-console-theme, and pki-console and running pkiconsole to connect to a remote CA. -- Endi S. Dewata

2 2

[PATCH] 108 Fixed conflicting LDIF files.
by Endi Sukma Dewata 04 Sep '12

04 Sep '12

During subsystem configuration the ConfigurationUtils.importLDIFS() would generate LDIF files in <instance>/conf folder which may conflict with files belonging to other subsystems. The code has been modified to generate the files in <instance>/<subsystem>/conf folder. Ticket #89 -- Endi S. Dewata

2 2

[PATCH] fix anon connections to DB
by Ade Lee 31 Aug '12

31 Aug '12

Patched acked by Jack and pushed to master and dogtag 9. Ade

1 0

[PATCH] 30 Continued - Fix for ticket 219 for DogTag branches : 8.1_Errata and 8.2
by Abhishek Koneru 31 Aug '12

31 Aug '12

Please review the patches attached with fix ticket 219 for DogTag branches - 8.1_Errata and 8.2. The description about the ticket is attached below. --Abhishek Koneru Defect description: The serial number generated for certificates is wrong when the number is large. Problem is due to the conversion of BigInteger to integer while generating a new serial number, which truncates the most significant bits in the serial number and therefore a large number (eg. 10fff0001) becomes a smaller number (eg. fff0001). This conversion in turn leads to a collision if a certificate with the smaller number exists in the database. Steps to reproduce the defect: - Create a CA. - (1) - Edit the fields minSerialNumber and maxSerialNumber in the <CA-Installation Path>/conf.CS.cfg to large values like 100000000 and 110000000. - Restart the CA. - Configure the CA. - Create a new CA. - Configure this as a clone to (1)CA - After the Certificates are generated, view the serial number by clicking on "View Certificate in PrettyPrint". Results: Before the patch is applied: The serial number is truncated.(Wrong) After the patch is applied: The serial number is found as expected.

2 1

Reivew Request - Bug 844800 - TPS should provide the ability to not allow tokens marked as 'Terminated' to be formatted and reused
by John Magne 30 Aug '12

30 Aug '12

Patch to allow independent transition states for both the TPS UI and TPS operations such as Format and Enrollment. Bugzilla: https://bugzilla.redhat.com/show_bug.cgi?id=844800 Attachment: https://bugzilla.redhat.com/attachment.cgi?id=607976&action=diff

2 1

[PATCH] 105 Updated CMake jar() function.
by Endi Sukma Dewata 30 Aug '12

30 Aug '12

The jar() function has been modified to support multiple input dirs in a single command. This way it's not necessary to define multiple jar targets for the same jar file. The pki-console build script has been updated to utilize this functionality. Ticket #89 -- Endi S. Dewata

2 2

[PATCH] 104 Moved REST CLI into pki-tools.
by Endi Sukma Dewata 30 Aug '12

30 Aug '12

The pki-client.jar has been split and merged into pki-certsrv.jar and pki-tools.jar. The REST client classes are now packaged in com.netscape.certsrv.<component> packages. The REST CLI classes are now packaged in com.netscape.cmstools.<component> packages. The "pki" script has been moved into pki-tools RPM package. Ticket #215 -- Endi S. Dewata

2 4