[PATCH] DOGTAG 10.0: Bugzilla Bug #986506 - Need to determine RPM packages to be excluded from compose . . .
by Matthew Harmsen
Please review the attached patch for Dogtag 10.0 which addresses the
following bug:
* *Bugzilla Bug #986506*
<https://bugzilla.redhat.com/show_bug.cgi?id=986506>-Need to
determine RPM packages to be excluded from compose . . .
The attached patch generates the following RPMS using
'*pki/scripts/compose_pki_core_packages hybrid_rpms*' on an x86_64
Fedora 18 machine:
* pki-base-10.0.4-0.4.el5pki.noarch.rpm
* pki-ca-10.0.4-0.4.el5pki.noarch.rpm
* pki-core-debuginfo-10.0.4-0.4.el5pki.x86_64.rpm
* pki-javadoc-10.0.4-0.4.el5pki.noarch.rpm
* *pki-kra-10.0.4-0.4.el5pki.noarch.rpm*
* *pki-ocsp-10.0.4-0.4.el5pki.noarch.rpm*
* pki-server-10.0.4-0.4.el5pki.noarch.rpm
* pki-symkey-10.0.4-0.4.el5pki.x86_64.rpm
* *pki-tks-10.0.4-0.4.el5pki.noarch.rpm*
* pki-tools-10.0.4-0.4.el5pki.x86_64.rpm
and the following RPMS using '*pki/scripts/compose_pki_core_packages
hybrid_rpms*' on an x86_64 RHEL 7 machine:
* pki-base-10.0.4-0.4.el5pki.noarch.rpm
* pki-ca-10.0.4-0.4.el5pki.noarch.rpm
* pki-core-debuginfo-10.0.4-0.4.el5pki.x86_64.rpm
* pki-javadoc-10.0.4-0.4.el5pki.noarch.rpm
* pki-server-10.0.4-0.4.el5pki.noarch.rpm
* pki-symkey-10.0.4-0.4.el5pki.x86_64.rpm
* pki-tools-10.0.4-0.4.el5pki.x86_64.rpm
-- Matt
11 years, 6 months
[PATCH] Bugzilla Bug #975939 - RHCS 8.1: "END CERTIFICATE" tag is not on it's own line
by Matthew Harmsen
Please review the attached patch for the following bug:
* *Bugzilla Bug #975939*
<https://bugzilla.redhat.com/show_bug.cgi?id=975939>-RHCS 8.1: "END
CERTIFICATE" tag is not on it's own line
This bug refers to a display problem in the DRM Transport Certificate.
Before the patch was applied,
'https://pki-ip-host.example.com:10443/kra/agent/kra/displayTransportCert'
displayed the following:
-----BEGIN CERTIFICATE-----
MIIDvjCCAqagAwIBAgIBCDANBgkqhkiG9w0BAQsFADBRMR4wHAYDVQQKExVEc2Rl
dlNqY1JlZGhhdCBEb21haW4xDzANBgNVBAsTBnBraS1jYTEeMBwGA1UEAxMVQ2Vy
dGlmaWNhdGUgQXV0aG9yaXR5MB4XDTEzMDcyNDA0MzM0OFoXDTE1MDcxNDA0MzM0
OFowVjEeMBwGA1UEChMVRHNkZXZTamNSZWRoYXQgRG9tYWluMRAwDgYDVQQLEwdw
a2kta3JhMSIwIAYDVQQDExlEUk0gVHJhbnNwb3J0IENlcnRpZmljYXRlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw/rFaEIcVRaQOGcV6bAAg/I1IKsp
tx3iT/QXUhbotl+rIXCRvM1057RBKdTSYVALhfYnfbEUg4bfNX6RzIxqPCIXrwl9
xM3Itk6st3OOMpMGsyGUh0BctMJeOjMXy6U/djL51Mhr4oKBwwoQbOr944hlI7hp
8u9PEBmfTGeWps18oz+dLPnsIq5rt9U75o9BTZ1+zOkyyLh+U5SsqqAzwd7gIRVt
v5DuA03kTTGnd4/0D7J8bJ9xeBeBWlybLwYc4xMndwApLjiluzHioGHWg3gg+dBP
mlnaMdD9KpNjingumcGZNf8RYG3cb/u9svo4b21iNVOpC4LDW6InPWS2fQIDAQAB
o4GbMIGYMB8GA1UdIwQYMBaAFDys38nHtDFshY0Lh2+RFp2FCeYOMFAGCCsGAQUF
BwEBBEQwQjBABggrBgEFBQcwAYY0aHR0cDovL3BraS1pcC1ob3N0LmRzZGV2LnNq
Yy5yZWRoYXQuY29tOjkxODAvY2Evb2NzcDAOBgNVHQ8BAf8EBAMCBPAwEwYDVR0l
BAwwCgYIKwYBBQUHAwIwDQYJKoZIhvcNAQELBQADggEBAD7A1cfx88tXim+durkL
uSwJl5EOS0ai5WKXh5Ov4Ir2sWHb/8+FIPtxlW12y3zN6076q1bsyOLdw1TSCaA1
iYhvoEED+uC52kGOGigXJRM3w01/+dG6VPkgcvTSmt1MFnVJHhhmqNGGXZIOCazD
aUClEzUetOq4ok6E6vyM3LU8iVHtMC7TaA358vrAxDhsCqlZuR8NPAsuwx15S28P
nngFikjbeBsuem96Q35uSB61Tp7V3rO7J7A7hSliudfmSJwDKjBBgIkjC1wgOTjm
PVjq9Ss49t1ZD9mmwx5B9DNBZhh1TGPPx8MOVThhLHnw9PuBmfW2eTsmVXsDFVNe
0j8=-----END CERTIFICATE-----
After the patch was applied,
'https://pki-ip-host.example.com:10443/kra/agent/kra/displayTransportCert'
displayed the following:
-----BEGIN CERTIFICATE-----
MIIDvjCCAqagAwIBAgIBCDANBgkqhkiG9w0BAQsFADBRMR4wHAYDVQQKExVEc2Rl
dlNqY1JlZGhhdCBEb21haW4xDzANBgNVBAsTBnBraS1jYTEeMBwGA1UEAxMVQ2Vy
dGlmaWNhdGUgQXV0aG9yaXR5MB4XDTEzMDcyNDA0MzM0OFoXDTE1MDcxNDA0MzM0
OFowVjEeMBwGA1UEChMVRHNkZXZTamNSZWRoYXQgRG9tYWluMRAwDgYDVQQLEwdw
a2kta3JhMSIwIAYDVQQDExlEUk0gVHJhbnNwb3J0IENlcnRpZmljYXRlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw/rFaEIcVRaQOGcV6bAAg/I1IKsp
tx3iT/QXUhbotl+rIXCRvM1057RBKdTSYVALhfYnfbEUg4bfNX6RzIxqPCIXrwl9
xM3Itk6st3OOMpMGsyGUh0BctMJeOjMXy6U/djL51Mhr4oKBwwoQbOr944hlI7hp
8u9PEBmfTGeWps18oz+dLPnsIq5rt9U75o9BTZ1+zOkyyLh+U5SsqqAzwd7gIRVt
v5DuA03kTTGnd4/0D7J8bJ9xeBeBWlybLwYc4xMndwApLjiluzHioGHWg3gg+dBP
mlnaMdD9KpNjingumcGZNf8RYG3cb/u9svo4b21iNVOpC4LDW6InPWS2fQIDAQAB
o4GbMIGYMB8GA1UdIwQYMBaAFDys38nHtDFshY0Lh2+RFp2FCeYOMFAGCCsGAQUF
BwEBBEQwQjBABggrBgEFBQcwAYY0aHR0cDovL3BraS1pcC1ob3N0LmRzZGV2LnNq
Yy5yZWRoYXQuY29tOjkxODAvY2Evb2NzcDAOBgNVHQ8BAf8EBAMCBPAwEwYDVR0l
BAwwCgYIKwYBBQUHAwIwDQYJKoZIhvcNAQELBQADggEBAD7A1cfx88tXim+durkL
uSwJl5EOS0ai5WKXh5Ov4Ir2sWHb/8+FIPtxlW12y3zN6076q1bsyOLdw1TSCaA1
iYhvoEED+uC52kGOGigXJRM3w01/+dG6VPkgcvTSmt1MFnVJHhhmqNGGXZIOCazD
aUClEzUetOq4ok6E6vyM3LU8iVHtMC7TaA358vrAxDhsCqlZuR8NPAsuwx15S28P
nngFikjbeBsuem96Q35uSB61Tp7V3rO7J7A7hSliudfmSJwDKjBBgIkjC1wgOTjm
PVjq9Ss49t1ZD9mmwx5B9DNBZhh1TGPPx8MOVThhLHnw9PuBmfW2eTsmVXsDFVNe
0j8=
-----END CERTIFICATE-----
11 years, 7 months
[PATCH] 275 Fixed token authentication problem on RHEL.
by Endi Sukma Dewata
The CryptoManager.initialize() and CryptoToken.login() invocation has
been moved into the main program as a workaround for the authentication
problem on RHEL and to ensure proper initialization in general.
Bugzilla #985111
--
Endi S. Dewata
11 years, 7 months
[PATCH] 271 Added man pages for upgrade tools.
by Endi Sukma Dewata
New man pages have been added for pki-upgrade and pki-server-upgrade.
The spec file and build scripts have been updated accordingly.
Ticket #582
--
Endi S. Dewata
11 years, 7 months
[PATCH]136 - initial framework for restful interfaces for managing profiles
by Ade Lee
This adds the initial framework for viewing and managing profiles.
At this point, only the viewing of profiles is tested.
Because I make some changes to some of the objects used in Cert
enrollment, some of the current tests involving enrollment may fail
if they use pre-generated XML.
Still, this patch is getting quite large and its time to get some eyes
on it.
The next patches will add the CLI code to view profiles and then to
add/edit profiles. Following that, will be patches to clean up all the
TODOs - like adding the relevant exceptions and auditing.
Ade
11 years, 7 months
[PATCH] 277 Fixed dependency issue on CMSRequest.
by Endi Sukma Dewata
The CMSRequest is a server class but it's used by the ICommandQueue
that belongs in the base package. To fix the dependency issue the
CMSRequest has been refactored to implement a new interface
ICMSRequest in the base package. Some constants in CMSRequest have
also been moved into ICMSRequest. All code referencing CMSRequest
has been adjusted accordingly.
--
Endi S. Dewata
11 years, 7 months
[PATCH] 274 Reorganized deployment tools.
by Endi Sukma Dewata
The pkispawn and pkidestroy scripts have been moved into sbin folder.
The Python deployment library and the scriptlets were moved into
pki.server.deployment and pki.server.deployment.scriptlets packages,
respectively.
--
Endi S. Dewata
11 years, 7 months
[PATCH] 273 Added option to override compose work directory.
by Endi Sukma Dewata
Currently the compose scripts always use a fixed work directory called
"packages" to do the build. To provide more flexibility, a new optional
parameter has been added to allow overriding the work directory.
--
Endi S. Dewata
11 years, 7 months
