February 2013 - Pki-devel - Dogtag PKI List Archives

[PATCH] 215 Added security domain info validation.
by Endi Sukma Dewata 07 Mar '13

07 Mar '13

The installer script has been modified to validate security domain info in both interactive and silent installation. A basic Python API has been added to access the REST interface. Ticket #473 -- Endi S. Dewata

1 2

[PATCH] 213 Added DS info validation.
by Endi Sukma Dewata 07 Mar '13

07 Mar '13

The installer script has been modified to validate DS info in both interactive and silent installation. Ticket #472 -- Endi S. Dewata

2 3

[PATCH] 214 Added cert-request-show command.
by Endi Sukma Dewata 07 Mar '13

07 Mar '13

A new cert-request-show command has been added to allow EE users to check certificate request status. Ticket #511 -- Endi S. Dewata

2 2

[PATCH] CA system certificates with random serial numbers
by Andrew Wnuk 21 Feb '13

21 Feb '13

This patch adds support for CA system certificates with random serial numbers. Bug 913313 (updates bug 912554).

2 1

Request for review: ECC support for pkisilent (CA, subCA, DRM, TKS, TPS, OCSP)
by Christina Fu 20 Feb '13

20 Feb '13

This is a request for code review for the following feature bug: *Bug 810967* <https://bugzilla.redhat.com/show_bug.cgi?id=810967> -[RFE] ECC support for pkisilent the code changes can be found here: https://bugzilla.redhat.com/attachment.cgi?id=699587&action=diff&context=pa… The 5 new templates and one readme instruction file can be found the the bug attachment. thanks! Christina

2 4

[PATCH] 206 Added AuthMapping annotation.
by Endi Sukma Dewata 19 Feb '13

19 Feb '13

Attached is a patch for ticket #477. The code is done, but since the patch renames one of the files in the deployed webapps there probably needs to be a migration script. This needs to be discussed further. -- Endi S. Dewata

1 3

[PATCH] random certificate serial numbers
by Andrew Wnuk 19 Feb '13

19 Feb '13

This patch adds support for random certificate serial numbers. Bug 912554.

2 1

[PATCH] 212 Added CLI to manage user membership.
by Endi Sukma Dewata 18 Feb '13

18 Feb '13

New CLI's have been added to search, add, and remove user membership. The group member management code has been refactored into a processor to allow reuse. Ticket #190 -- Endi S. Dewata

2 2

[PATCH] 118 - Add token authenticate to admin interface
by Ade Lee 15 Feb '13

15 Feb '13

This is an add on patch to allow tokenAuthentication to take place on the admin interface. The ee interface is kept for legacy sake. Please review, Ade

2 1

[PATCH] fixes to move to admin port for cloning CA's (RHCS 8.x)
by Ade Lee 14 Feb '13

14 Feb '13

We want to use the admin interface for installation work. This patch moves the interfaces used in cloning from either the EE or agent interface to the admin one. See: http://pki.fedoraproject.org/wiki/8.1_installer_work_for_cloning Specifically, 1. Change call to use /ca/admin/ca/getCertChain 2. Remove unneeded getTokenInfo servlet. The logic not to use this servlet has already been committed to dogtag 10. 3. Move updateNumberRange to the admin interface. For backward compatibility with old instances, the install code will call /ca/agent/updateNumberRange as a fallback. 4. Add updateDomainXML to admin interface. For backward compatibility, updateDomainXML will continue to be exposed on the agent interface with agent client auth. 5. Changed pkidestroy to get an install token and use the admin interface to update the security domain. For backward compatibility, the user and password and not specified as mandatory arguments - although we want to do that in future. 6. Added tokenAuthenticate to the admin interface. Note, existing subsystems will need to have config changes manually added in order to use the new interfaces. Instructions will be added to the link above. With new instances, you should be able to clone a CA all on the admin interface. The patches are for the PKI_8_1_ERRATA_BRANCH and PKI_8_BRANCH Please review, Ade

2 3