December 2015 - Pki-devel - Dogtag Pki List Archives

[PATCH] 0051 Lightweight CAs: lookup correct issuer for OCSP responses

by Fraser Tweedale

Hi all, The attached patch makes sure that the right authority is used to create OCSP responses. Note that OCSP requests may ask about certs from more than one issuer - even though this is crazy the heuristic used is to simply use issuer of the first CertID in the request. Note that OCSP response validation of certificates issued by sub-CAs currently fails due to a separate issue[1]. [1] https://fedorahosted.org/pki/ticket/1632

8 years, 1 month

2
5
0 / 0

[PATCH] 0054 Lightweight CAs: add audit events

by Fraser Tweedale

The attached patch adds audit events for lightweight CA administration, fixing https://fedorahosted.org/pki/ticket/1590. Cheers, Fraser

8 years, 1 month

2
3
0 / 0

[PATCH] 0052 Lightweight CAs: enrol cert via profile subsystem

by Fraser Tweedale

The attached patch fixes: - #1624 generate lightweight CAs via profile subsystem - #1632 ensure CA certs bear correct Authority Key Identifier Thanks, Fraser

8 years, 2 months

2
2
0 / 0

[PATCH] 0050 Lightweight CAs: ensure disabled CA cannot create sub-CA

by Fraser Tweedale

The attached patch (which replaces an earlier patch 0050) fixes https://fedorahosted.org/pki/ticket/1628. Cheers, Fraser

8 years, 2 months

2
3
0 / 0

[PATCH] 0063 Extract common base class for SSLAuthenticatorWithFallback

by Fraser Tweedale

The attached patch was written as part of work implementing GSS-API authentication. We actually might not end up using SSLAuthenticatorWithFallback to interpret the authentication data but I think this refactor is worthwhile on its own, so here's the patch. Cheers, Fraser

8 years, 3 months

2
4
0 / 0

[PATCH] 0057..0061 LDAPProfileSubsystem concurrency fixes

by Fraser Tweedale

The attached patches resolve concurrency issues in the LDAPProfileSubsystem (which conducts its LDAP persisent search in background thread). Ticket: https://fedorahosted.org/pki/ticket/1700 Thanks, Fraser

8 years, 3 months

2
7
0 / 0

[PATCH] 0055 Allow encoded slashes in HTTP paths

by Fraser Tweedale

The attached patch fixes GET-based OCSP requests, https://fedorahosted.org/pki/ticket/1658 Cheers, Fraser

8 years, 3 months

2
4
0 / 0

[PATCH] 0062 Block startup until initial profile load completed

by Fraser Tweedale

Hi all, The attached patch fixes https://fedorahosted.org/pki/ticket/1702 Cheers, Fraser

8 years, 3 months

2
3
0 / 0

[PATCH] 664 Fixed TPS UI to display accessible services only.

by Endi Sukma Dewata

The TPS UI has been modified to display the accessible services based on the user's roles. A TPS admin has access to all services. A TPS agent has access to tokens, certificates, activities, and profiles. A TPS operator has access to tokens, certificates, and activities only. https://fedorahosted.org/pki/ticket/1476 -- Endi S. Dewata

8 years, 3 months

2
2
0 / 0

[PATCH] 663 Fixed mismatching certificate validity calculation.

by Endi Sukma Dewata

The CAValidityDefault has been modified to use Calendar API to calculate the certificate validity range to be consistent with the ValidityConstraint and ValidityDefault. https://fedorahosted.org/pki/ticket/1682 -- Endi S. Dewata

8 years, 3 months

1
1
0 / 0

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

Pki-devel December 2015