December 2014 - Pki-devel - Dogtag Pki List Archives

[PATCH] 0019 Decode challengePassword attribute as DirectoryString

by Fraser Tweedale

Fixes https://fedorahosted.org/pki/ticket/1221

10 years, 1 month

2
2
0 / 0

PATCH - 239 - Change resteasy reqs for F22 +

by Ade Lee

I have repackaged resteasy for f22 into sub-packages. We need to update the requirements accordingly. Please review, Ade

10 years, 1 month

2
2
0 / 0

[PATCH] 537 Added rangeUnit property to certificate profiles.

by Endi Sukma Dewata

A new optional property has been added to certificate profiles to specify the range unit. The default range unit is 'day'. The code has been modified to use the Calendar API to calculate the end of validity range based on the range unit. https://fedorahosted.org/pki/ticket/1226 -- Endi S. Dewata

10 years, 1 month

2
2
0 / 0

[PATCH] 539 Cleaned up clone installation code.

by Endi Sukma Dewata

The code in ConfigurationUtils has been cleaned up and reformatted to improve readability. -- Endi S. Dewata

10 years, 1 month

2
2
0 / 0

[PATCH] 538 Fixed problem importing renewed system certificate.

by Endi Sukma Dewata

Previously during clone installation if the PKCS12 file contains both expired and renewed certificates the code might incorrectly import the expired certificate instead of the renewed one, thus failing the installation. The code has been fixed to validate the certificates in the PKCS12 file such that only the valid ones will be imported into the clone. https://fedorahosted.org/pki/ticket/1093 -- Endi S. Dewata

10 years, 1 month

2
2
0 / 0

use of CertificateFactory in CAService - dead code?

by Fraser Tweedale

Hi all, CAService retrieves a CertificateFactory instance in its init method (see below), logs some things about it, and never uses it again. Is it safe to remove this code, or is it doing something subtle and important? (`mConfig = config` will stay, but it would be nice to move that to the constructor at a later time.) ``` public void init(IConfigStore config) throws EBaseException { mConfig = config; try { // MOVED TO com.netscape.certsrv.apps.CMS // java.security.Security.addProvider(new netscape.security.provider.CMS()); // java.security.Provider pr = java.security.Security.getProvider("CMS"); // if (pr != null) { // ; // } // else // Debug.trace("Something is wrong in CMS install !"); java.security.cert.CertificateFactory cf = java.security.cert.CertificateFactory.getInstance("X.509"); Debug.trace("CertificateFactory Type : " + cf.getType()); Debug.trace("CertificateFactory Provider : " + cf.getProvider().getInfo()); } catch (java.security.cert.CertificateException e) { Debug.trace("Something is happen in install CMS provider !" + e.toString()); } } ``` Regards, Fraser

10 years, 1 month

1
0
0 / 0

Karma request for updated PKI packages . . .

by Matthew Harmsen

Everyone, I have recently completed updating all of the Fedora 20, 21, and 22 (rawhide) packages to address several bugs and PKI Trac Tickets including: * PKI TRAC Ticket #1110 - pkispawn (configuration) does not provide CA extensions in subordinate certificate signing requests (CSR) <https://fedorahosted.org/pki/ticket/1110> * Bugzilla Bug #1151147 - issuerDN encoding correction <https://bugzilla.redhat.com/show_bug.cgi?id=1151147> * PKI TRAC Ticket #1142 - NPE in getconfigEntries when internaldb password is removed from master <https://fedorahosted.org/pki/ticket/1142> * Bugzilla Bug #1158410 - ipa-server-install failing with error message - CA did not start in 300.0s <https://bugzilla.redhat.com/show_bug.cgi?id=1158410> * PKI TRAC Ticket #1198 - TLS support: provide proper TLS default values and ciphers in server.xml <https://fedorahosted.org/pki/ticket/1198> * PKI TRAC Ticket #1206 - TLS range support: code change needed for cs when acting as client <https://fedorahosted.org/pki/ticket/1206> * Bugzilla Bug #1165351 - Remove legacy multilib JNI_JAR_DIR logic <https://bugzilla.redhat.com/show_bug.cgi?id=1165351> * PKI TRAC Ticket #1211 - New release overwrites old source tarball <https://fedorahosted.org/pki/ticket/1211> Please provide Karma for the following packages: * *Fedora 20:* o pki-core-10.1.2-7.fc20 <https://admin.fedoraproject.org/updates/FEDORA-2014-16124/pki-core-10.1.2...> o pki-console-10.1.2-7.fc20 <https://admin.fedoraproject.org/updates/FEDORA-2014-16395/pki-console-10....> o dogtag-pki-10.1.2-7.fc20 <https://admin.fedoraproject.org/updates/FEDORA-2014-16355/dogtag-pki-10.1...> * *Fedora 21:* o dogtag-pki-theme-10.2.0-5.fc21 <https://admin.fedoraproject.org/updates/FEDORA-2014-16434/dogtag-pki-them...> o pki-core-10.2.0-5.fc21 <https://admin.fedoraproject.org/updates/FEDORA-2014-16307/pki-core-10.2.0...> o pki-console-10.2.0-5.fc21 <https://admin.fedoraproject.org/updates/FEDORA-2014-16319/pki-console-10....> o dogtag-pki-10.2.0-5.fc21 <https://admin.fedoraproject.org/updates/FEDORA-2014-16301/dogtag-pki-10.2...> Additionally, the following new builds were created for 'rawhide' and are available from Koji: * *rawhide:* o dogtag-pki-theme-10.2.1-0.2.fc22 <http://koji.fedoraproject.org/koji/buildinfo?buildID=597137> o pki-core-10.2.1-0.2.fc22 <http://koji.fedoraproject.org/koji/buildinfo?buildID=597111> o pki-console-10.2.1-0.2.fc22 <http://koji.fedoraproject.org/koji/buildinfo?buildID=597144> o dogtag-pki-10.2.1-0.2.fc22 <http://koji.fedoraproject.org/koji/buildinfo?buildID=597149> Enjoy, -- Matt

10 years, 1 month

1
0
0 / 0

[PATCH] 0016 - Fix BasicConstraints min/max path length check

by Fraser Tweedale

This patch fixes https://fedorahosted.org/pki/ticket/1035

10 years, 1 month

2
10
0 / 0

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

Pki-devel December 2014