December 2015 - Pki-devel - Dogtag PKI List Archives

[PATCH] 0051 Lightweight CAs: lookup correct issuer for OCSP responses
by Fraser Tweedale 03 Mar '16

03 Mar '16

Hi all, The attached patch makes sure that the right authority is used to create OCSP responses. Note that OCSP requests may ask about certs from more than one issuer - even though this is crazy the heuristic used is to simply use issuer of the first CertID in the request. Note that OCSP response validation of certificates issued by sub-CAs currently fails due to a separate issue[1]. [1] https://fedorahosted.org/pki/ticket/1632

2 5

[PATCH] 0054 Lightweight CAs: add audit events
by Fraser Tweedale 02 Mar '16

02 Mar '16

The attached patch adds audit events for lightweight CA administration, fixing https://fedorahosted.org/pki/ticket/1590. Cheers, Fraser

2 3

[PATCH] 0052 Lightweight CAs: enrol cert via profile subsystem
by Fraser Tweedale 22 Feb '16

22 Feb '16

The attached patch fixes: - #1624 generate lightweight CAs via profile subsystem - #1632 ensure CA certs bear correct Authority Key Identifier Thanks, Fraser

2 2

[PATCH] 0050 Lightweight CAs: ensure disabled CA cannot create sub-CA
by Fraser Tweedale 22 Feb '16

22 Feb '16

The attached patch (which replaces an earlier patch 0050) fixes https://fedorahosted.org/pki/ticket/1628. Cheers, Fraser

2 3

[PATCH] 0063 Extract common base class for SSLAuthenticatorWithFallback
by Fraser Tweedale 21 Jan '16

21 Jan '16

The attached patch was written as part of work implementing GSS-API authentication. We actually might not end up using SSLAuthenticatorWithFallback to interpret the authentication data but I think this refactor is worthwhile on its own, so here's the patch. Cheers, Fraser

2 4

[PATCH] 0057..0061 LDAPProfileSubsystem concurrency fixes
by Fraser Tweedale 21 Jan '16

21 Jan '16

The attached patches resolve concurrency issues in the LDAPProfileSubsystem (which conducts its LDAP persisent search in background thread). Ticket: https://fedorahosted.org/pki/ticket/1700 Thanks, Fraser

2 7

[PATCH] 0055 Allow encoded slashes in HTTP paths
by Fraser Tweedale 21 Jan '16

21 Jan '16

The attached patch fixes GET-based OCSP requests, https://fedorahosted.org/pki/ticket/1658 Cheers, Fraser

2 4

[PATCH] 0062 Block startup until initial profile load completed
by Fraser Tweedale 21 Jan '16

21 Jan '16

Hi all, The attached patch fixes https://fedorahosted.org/pki/ticket/1702 Cheers, Fraser

2 3

[PATCH] 664 Fixed TPS UI to display accessible services only.
by Endi Sukma Dewata 18 Jan '16

18 Jan '16

The TPS UI has been modified to display the accessible services based on the user's roles. A TPS admin has access to all services. A TPS agent has access to tokens, certificates, activities, and profiles. A TPS operator has access to tokens, certificates, and activities only. https://fedorahosted.org/pki/ticket/1476 -- Endi S. Dewata

2 2

[PATCH] 663 Fixed mismatching certificate validity calculation.
by Endi Sukma Dewata 08 Jan '16

08 Jan '16

The CAValidityDefault has been modified to use Calendar API to calculate the certificate validity range to be consistent with the ValidityConstraint and ValidityDefault. https://fedorahosted.org/pki/ticket/1682 -- Endi S. Dewata

1 1