[PATCH] 339 Renamed CLI commands.
by Endi Sukma Dewata
This patch is for 10.1 branch.
The following commands have been renamed. The old commands will
no longer work.
* profile -> ca-profile
* kraconnector -> ca-kraconnector
The following commands have also been renamed, but the old commands
will continue to work:
* cert -> ca-cert
* key -> kra-key
The user and group commands have already been renamed to <subsytem>-
user and <subsystem>-group. The old commands will continue to work
and will use CA subsystem by default.
Ticket #701
--
Endi S. Dewata
10 years, 5 months
Announcing the release of Dogtag 10.0.6
by Ade Lee
The Dogtag team is proud to announce the sixth errata build for
Dogtag 10.0.
Builds are available for Fedora 18 and Fedora 19 in the updates-testing
repositories. Please try them out and provide karma to move them to the
F18 and F19 stable repositories. Karma can be provided at
https://admin.fedoraproject.org/updates for each package.
== Build Versions ==
pki-core-10.0.6-1
pki-ra-10.0.6-1
pki-tps-10.0.6-1
dogtag-pki-10.0.6-1
dogtag-pki-theme-10.0.6-1
pki-console-10.0.6-1
== Highlights since Dogtag 10.0.5 ==
* Some commands in the pki CLI have been renamed for better consistency.
The old commands will continue to work, but they have no been
deprecated, and will be displayed accordingly in the usage and man
pages.
The commands that have been renamed are:
* old command -> new command
* client-find-cert -> client-cert-find
* client-import-cert -> client-cert-import
* client-remove-cert -> client-cert-del
* group-add-member -> group-member-add
* group-find-member -> group-member-find
* group-show-member -> group-member-show
* group-remove-member -> group-member-remove
* user-add-cert -> user-cert-add
* user-find-cert -> user-cert-find
* user-show-cert -> user-cert-show
* user-remove-cert -> user-cert-del
* user-add-membership -> user-membership-add
* user-find-membership -> user-membership-find
* user-show-membership -> user-membership-show
* user-remove-membership -> user-membership-del
* The upgrade scripts have been modified to backup the files used to
track the upgrade process. For instance specific upgrade scripts,
this is CS.cfg.
* A missing jar link to apache-commons-io prevented IPA replica installs
from completing successfully on RHEL 7. The required link has been
added. (BZ 1024679)
* Due to a bug in the configuration code, when installing a non-cloned
CA, the certificate for the admin user configured during the install
was signed with SHA1 by default. With the fix, the admin cert is
signed with SHA256 by default. It is possible to override this
setting by changing values in the caAdminCert.cfg profile prior to
configuration. (BZ 1024445)
* ipa-cert-remove-hold <non_existent_cert_id> used to return a server
error. The error handling code for this servlet has been modified to
return the correct error message (BZ 999722)
* java-abrt crashes were being generated during IPA server installs due
to exceptions being thrown during tomcat shutdown. This was due to
the shutdown code being called multiple times internally. This code
has been fixed. (BZ 1018268)
== Detailed Changes since Dogtag 10.0.5 ==
alee (3):
#743 fix tmpfiles.d references in spec files to reference /run/lock
instead of /var/lock
#776 IPA CA replica installation crashes on pkispawn (bz 1024679)
#781 Admin cert signed with SHA1, should be SHA256 (bz 1024445)
edewata(5):
#779 Renaming Dogtag 10.0 pki commands
#763 Backup tracker files during upgrade
#775 Fix errors during tomcat shutdown (BZ 1018628)
#739 ipa-cert-remove-hold <non_existent_cert_id> returns server error
(BZ 999722)
#780 Unable to get user principal in servlet
10 years, 5 months
[PATCH] 337 Removed duplicate ACL classes.
by Endi Sukma Dewata
The ACL and ACLEntry in com.netscape.cmscore.realm are duplicates
of the ones in com.netscape.certsrv.acls. They have been removed
since they are no longer used. All differences have been merged
into the remaining copy.
--
Endi S. Dewata
10 years, 5 months
[PATCH] 336 Renamed CLI commands.
by Endi Sukma Dewata
This patch is for 10.1 branch.
The following commands have been renamed for consistency:
* client-cert-remove -> client-cert->del
* group-member-remove -> group-member-del
* user-cert-remove -> user-cert-del
* user-membership-remove -> user-membership-del
--
Endi S. Dewata
10 years, 5 months
[PATCH] 326 Fixed problem running GroupMemberProcessor on non-CA.
by Endi Sukma Dewata
Previously the GroupMemberProcessor could only run on CA because the
base Processor class depends on CA. To fix the problem all CA-specific
code in Processor has been moved into a new CAProcessor. All existing
subclasses of Processor will inherit from CAProcessor, but the
GroupMemberProcessor will continue to inherit from Processor.
--
Endi S. Dewata
10 years, 5 months
[PATCH] 338 Deprecated old CLI commands.
by Endi Sukma Dewata
Recently some CLI commands have been renamed. The old commands will
continue to work, but now they have been deprecated.
--
Endi S. Dewata
10 years, 5 months
[PATCH] 72 Continuous Integration Framework - Solutions for tickets #722, 723, 724
by Abhishek Koneru
Please find the patch which adds all the tests to upstream git on 10.0
branch. It is present at pki/tests in the code tree.
The junit tests source code and the extensions for Suite junit runner
and the junit.RunNotifier are present at
pki/tests/beaker/rhcs/dev_java_tests/src. The code is compiled to
pki/tests/beaker/rhcs/dev_java_tests/bin. (This has been setup in the
project). Once the project is opened in eclipse the code is compiled
there. Except for the junit4.jar, there are no other requirements for
building the java tests in eclipse. Though for making an rpm of all the
tests we need the following packages installed:
expect, beah, rhts-test-env, beakerlib, beakerlib-redhat, rhts-devel,
beaker-client.
The presence of these packages also provides all the beaker client
functionality.
A compose script, compose_pki_test_package, is added to pki/scripts.
This script when executed, creates a folder X/package.tests(X=pki/..)
and copies all the tests there and builds the rpm. Building a
personalized rpm is possible only when the build is made outside the git
tree. Executing the make-package.sh script inside at
pki/tests/beaker/rhcs is not possible if the tags of the current branch
are different from the master. (Similar problem faced in SVN v<1.7).
Hence the rpm is build outside the pki source tree.
--- Abhishek
10 years, 5 months
