May 2015 - Pki-devel - Dogtag PKI List Archives

[PATCH] 0010..0013 DNP3/IECUserRoles extension support
by Fraser Tweedale 23 Jun '15

23 Jun '15

Here is the first (rough) cut of IEC 62351-8 (IECUserRoles) extension support and a DNP3 profile that makes use of it. This is to meet (some of) the PKI needs for the "Smart Grid" DNP3 Secure Authentication v5 (SAv5) standard. In brief, the SN and all the IECUserRoles params will be given in profile inputs, and the key is taken from a CertReqInput. There's still a bit of work to go - notably, some of the IECUserRoles fields are unimplemented, and some of those that *are* implemented are not yet read out of the profile input but rather are hardcoded. The extension *does* appear on the certificate, so I should get that all completed tomorrow. Cheers, Fraser

2 6

[PATCH] pki-cfu-0073-Ticket-867-Need-to-support-TPS-as-a-separate-tomcat-.patch
by Christina Fu 18 Jun '15

18 Jun '15

Attached please find the patch that addresses the last issue reported in: https://fedorahosted.org/pki/ticket/867#comment:11 Need to support TPS as a separate tomcat instance symkey.jar symlink is missing from the instance layout when TPS is on a separate tomcat instance. After the fix, I was able to do a simple format and enrollment. I also tested creating a TPS instance that is on a shared Tomcat instance to make sure it doesn't break that. Christina

2 4

remove RAEnrollProfile.java?
by Fraser Tweedale 16 Jun '15

16 Jun '15

The RAEnrollProfile class is not used or referenced anywhere in the codebase. I presume it was related to the RA, but even immediately before removal of the RA it did not seem to be used, so it seems safe to remove it. Comments? Fraser

2 2

[PATCH] Remove i686/x86_64 architecture limitations (e. g. - ppc64/ppc64le)
by Matthew Harmsen 01 Jun '15

01 Jun '15

Please review and test the attached patch out on platforms other than 'x86_64' which addresses this issue: * PKI TRAC Ticket #1392 - Remove i686/x86_64 architecture limitations (e. g. - ppc64/ppc64le) <https://fedorahosted.org/pki/ticket/1392> I did apply the attached patch and build it on an x86_64 machine, and successfully tested out the following: * built, installed, and tested out a CA * built, installed, and tested out a CA console * built, installed, and tested out a TKS and TPS * built, installed, and tested out tpsclient * AtoB and BtoA

2 2

Karma Request for Dogtag 10.2.4 in Fedora 22
by Matthew Harmsen 30 May '15

30 May '15

Everyone, Please provide Karma for the following Dogtag 10.2.4 packages for Fedora 22: * dogtag-pki-theme-10.2.4-1.fc22 <https://admin.fedoraproject.org/updates/dogtag-pki-theme-10.2.4-1.fc22> * pki-core-10.2.4-1.fc22 <https://admin.fedoraproject.org/updates/pki-core-10.2.4-1.fc22> * pki-console-10.2.4-1.fc22 <https://admin.fedoraproject.org/updates/pki-console-10.2.4-1.fc22> * dogtag-pki-10.2.4-1.fc22 <https://admin.fedoraproject.org/updates/dogtag-pki-10.2.4-1.fc22> Thanks, -- Matt

2 3

[PATCH] 603 Fixed overwritten deployment property.
by Endi Sukma Dewata 29 May '15

29 May '15

The deployment tool has been modified to avoid overwriting the property default value by moving the assignment after all the properties are added. https://fedorahosted.org/pki/ticket/1393 -- Endi S. Dewata

1 1

[PATCH] 602 Added script to restore subsystem user.
by Endi Sukma Dewata 28 May '15

28 May '15

A new script has been added to restore a missing or corrupted subsystem user such that it has the correct certificate, the correct certificate mapping, and the correct membership to the Subsystem Group. A new Python library have been added to provide the script with the functionality to access the PKI configuration and database. A new CLI has also been added for troubleshooting. https://bugzilla.redhat.com/show_bug.cgi?id=1225589 -- Endi S. Dewata

1 0

[PATCH] 257 - check for correct symlinks on startup with nuxwdog
by Ade Lee 28 May '15

28 May '15

pkidaemon checks the systemd symlinks on startup. Right now, it is looking for the wrong symlinks when nuxwdog is enabled, and preventing the server from coming up. This patch fixes this. Please review, Ade https://bugzilla.redhat.com/show_bug.cgi?id=1226025

1 0

[PATCH] 601 Cleaned up python docs generation.
by Endi Sukma Dewata 28 May '15

28 May '15

The script to generate Python docs has been cleaned up and simplified. The python-sphinx configuration files have been moved into base/common/python. The build artifacts are now created in the build/base/common/python. -- Endi S. Dewata

2 2

Fix for pylint issue
by Matthew Harmsen 27 May '15

27 May '15

Please review the attached patch which addresses the following ticket: * PKI TRAC Ticket #1388 - pylint unidiomatic-typecheck warnings cause koji builds to fail <https://fedorahosted.org/pki/ticket/1388>

3 5