September 2014 - Pki-devel - Dogtag Pki List Archives

[PATCH] TomcatJSS - NullPointerException in tomcatjss searching for attribute "clientauth"

by Christina Fu

This is the fix for the following upstream tomcatjss bug: https://bugzilla.redhat.com/show_bug.cgi?id=1052417 The fix is simply fixing the NullPointerException issue by giving "clientauth" directive a default of "want". This will cause the desired default behavior for Dogtag servers. thanks, Christina

9 years, 7 months

2
1
0 / 0

[PATCH] pki-cfu-0036-ticket-1158-CMCRequest-does-not-support-internal-tok.patch

by Christina Fu

It seems the CMCRequest java tool initializes its token to be hardcoded as "internal". In case when -h is not specified, it will attempt to do getTokenByName and will get a token not found error. I checked all the other java tools they initialize tokenname to be null, and properly calls getInternalKeyStorageToken from jss CryptoManager. This fix allows CMCRequest to now work with internal token. Please review. thanks, Christina

9 years, 7 months

2
2
0 / 0

[PATCH] Remove IPA theme component and old unused UI directories

by Matthew Harmsen

Please review the following patch (consisting primarily of deletions) which addresses the following ticket: * PKI TRAC Ticket #1136 - Remove ipa-pki-theme component <https://fedorahosted.org/pki/ticket/1136>

9 years, 7 months

1
1
0 / 0

[PATCH] Changes from Debian packaging

by Timo Aaltonen

Hi Here are a couple of patches from Debian pki.git repo. First one fixes some lintian warnings from the manpages, second one fixes some typos and third one fixes debian specific jackson jar paths. We carry some other patches too, but these are upstreamable right now. The others would need adding some sort of platform support for the various languages used (perl, shell, python, java, conffiles..), or just let us carry them. Some patches are for the native stuff that's mostly going away anyway. -- t

9 years, 7 months

2
1
0 / 0

[PATCH] pki-cfu-0035-Ticket-882-remove-all-certs-belong-to-a-token-before.patch

by Christina Fu

Previously, we just add certs to to the tokendb as we enroll. This patch cleans up the certs belong to a token before adding them. It will reflect what's on the token more truthfully. thanks, Christina

9 years, 7 months

2
2
0 / 0

publically-accessible VM for DNP3 plugfest

by Fraser Tweedale

Hi all, The DNP3 "Secure Smart-Grid" plugfest is coming up in a bit over a week. I'll need to set up a public-accessible Dogtag instance, running my development build with the IEC 62351-8 extension and DNP3 profile, for other parties to use during the event. What is the recommended way to get a publically accessible host in the RHEV lab or other infrastructure? Cheers, Fraser

9 years, 7 months

1
0
0 / 0

[PATCH] pki-cfu-0034-Ticket-1146-Tomcat-TPS-missing-keyType-for-renewed-c.patch

by Christina Fu

This patch fixes ticket https://fedorahosted.org/pki/ticket/1146. It has already been verbally ACK'd by Jack. Pushed to master: commit 3a40420a042db5f577a5a17c8a49ccd1d1d73955 thanks, Christina

9 years, 7 months

1
0
0 / 0

[PATCH] pki-cfu-0033-Ticket-882-delete-certs-associated-to-a-token-when-token removed

by Christina Fu

This patch removes certificates associated with a token when the token is removed from the tokendb. It will make the tokendb much cleaner and easier to manage. Christina

9 years, 7 months

2
2
0 / 0

[PATCH] 231 - check for null values in GetConfigEntries

by Ade Lee

This is something that was encountered in IPA when pviktorin attempted to clone an instance where the diectory manager password had been removed from password.conf. Because IPA uses a client cert to connect to the DB, the password is not needed. The clone attempts to contact the master to get config entries from CS.cfg etc. If the password is missing, it adds a null value to the XML structure it returns, resulting in a NPE when the XML Object is serialized. This exception is sadly swallowed up. Needs a null check for the values .. Please review, Ade

9 years, 7 months

1
0
0 / 0

[PATCH] Rename pki-tps-tomcat to pki-tps

by Matthew Harmsen

Please review the attached patch which addresses the primary purpose of the following ticket: * PKI TRAC Ticket #1017 - Rename pki-tps-tomcat to pki-tps <https://fedorahosted.org/pki/ticket/1017> This patch has been tested to verify that CA, KRA, OCSP, TKS, and TPS instances that were previously configured and tested would continue to work under this newly renamed package (including testing by running a new tpsclient).

9 years, 7 months

2
1
0 / 0

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

Pki-devel September 2014