May 2013 - Pki-devel - Dogtag PKI List Archives

[PATCH] 251 Removing JNI_JAR_DIR from /etc/pki/pki.conf.
by Endi Sukma Dewata 10 Jul '13

10 Jul '13

Recently the JNI_JAR_DIR was moved into /usr/share/pki/etc/pki.conf. A new upgrade script has been added to remove the unused JNI_JAR_DIR from /etc/pki/pki.conf. -- Endi S. Dewata

1 2

[PATCH] 250 Added support for backup/restore on upgrade.
by Endi Sukma Dewata 10 Jul '13

10 Jul '13

The upgrade framework has been modified to support backup and restore functionality. A new method backup(filename) has been added to save a file into a backup folder. The CLI's have been modified to accept a --revert parameter which will restore the backup files one version at a time. Ticket #583 -- Endi S. Dewata

1 2

[PATCH] 59 Fixing errors reported in Pylint Code analysis Ticket #316 - Part 1
by Abhishek Koneru 27 Jun '13

27 Jun '13

Please review the patch which fixes a few errors reported by pylint in dogtag's python code. Also find attached the remaining errors to be fixed. Will submit a detailed report in my next mail. How i used pylint: -- Installed pki packages. -- Executed the following command - cd /usr/lib/python2.7/sitepackages; pylint -E --include-ids=y pki/ pki/deployment/ pki/server/ `which pkispawn` `which pkidestroy` `which pki-upgrade` `which pki-server-upgrade` --Abhishek

2 4

[PATCH] 263 Added TPS servlet.
by Endi Sukma Dewata 10 Jun '13

10 Jun '13

A basic TPS servlet has been added to demonstrate sending and receiving TPS messages using chunked encoding. The servlet can be tested using the attached tps-test.sh. See the output in /var/log/pki/<tps instance>/catalina.out. -- Endi S. Dewata

2 2

[PATCH] 262 Added Tomcat-based TPS instance.
by Endi Sukma Dewata 10 Jun '13

10 Jun '13

The build and deployment tools have been modified to support creating a basic Tomcat instance to run TPS. New configuration and template files for TPS have been copied from another Tomcat subsystem. The TPS functionality itself will be added in future patches. Ticket #526 -- Endi S. Dewata

2 3

[PATCH] 58 Use 'with' construct for file handling (Also added finally block when an exception is to be handled) #Ticket 562
by Abhishek Koneru 06 Jun '13

06 Jun '13

Please review he attached patch with a minor modification in code - to use the with construct for handling files. --Abhishek

2 4

[PATCH] 261 Fixed hard-coded server certificate nickname.
by Endi Sukma Dewata 04 Jun '13

04 Jun '13

Previously the server certificate name was partially hard-coded as "Server-Cert cert-[PKI_INSTANCE_NAME]". Now in Tomcat-based subsystems it can be fully configured using pki_ssl_server_nickname parameter. In Apache-based subsystems it's left unchanged. Unused copies of serverCertNick.conf have been removed. Ticket #631 -- Endi S. Dewata

2 3

[PATCH] 252-260 Preparation for Tomcat-based TPS
by Endi Sukma Dewata 03 Jun '13

03 Jun '13

In order to create Tomcat-based TPS (and possibly RA too), some files in RA and TPS need to be reorganized and some config variable names need to be changed to match the other Tomcat-based subsystems such that they can be used by pkispawn. -- Endi S. Dewata

2 4

Review Request Bug 963073 - rhcs81 tps crash for CN over than 64 bytes
by John Magne 01 Jun '13

01 Jun '13

Please review attached patch. Fix solves a crash when a certificate to be displayed contains too many characters in one of its fields.

2 2

New Dogtag 9 packages
by Andrew Wnuk 28 May '13

28 May '13

Hi, New Dogtag 9 packages are available in Koji for Fedora 17: * pki-tps-9.0.11-1.fc17 <http://koji.fedoraproject.org/koji/buildinfo?buildID=421686> * pki-kra-9.0.15-1.fc17 <http://koji.fedoraproject.org/koji/buildinfo?buildID=421683> * pki-console-9.0.7-1.fc17 <http://koji.fedoraproject.org/koji/buildinfo?buildID=421682> * pki-core-9.0.26-1.fc17 <http://koji.fedoraproject.org/koji/buildinfo?buildID=421681> * dogtag-pki-theme-9.0.14-1.fc17 <http://koji.fedoraproject.org/koji/buildinfo?buildID=421678> New packages include: * security update <http://rhn.redhat.com/errata/RHSA-2013-0856.html> * random certificate serial numbers * randomized certificate validity * ECC improvements for OCSP, CMS, and pkisilent * AD authentication plug-in update * extended default CA validity * improved handling of big numbers * new option for CRL updates Please try it add some karma points if you can. Thank you, Andrew

1 0