May 2015 - Pki-devel - Dogtag Pki List Archives

[PATCH] pki-cfu-0070-Ticket-1309-Recovering-of-a-revoked-cert-erroneously.patch

by Christina Fu

This patch addresses issues reported in: https://fedorahosted.org/pki/ticket/1309Recovering of a revoked cert erroneously reflects "active" in the token db cert entry A new config param has been introduced to allow/disallow of recovering a revoked certificate for externalReg: externalReg.allowRecoverInvalidCert.enable=true by default it is true Please review. thanks, Christina

8 years, 11 months

2
4
0 / 0

[PATCH] disable backup keys and share master keys when using an HSM

by Matthew Harmsen

Please review the attached patch which addresses the following ticket: * PKI TRAC Ticket #1371 - pkispawn: need to disable backup_keys when using an HSM (and provide recommendation); allow clones to share keys <https://fedorahosted.org/pki/ticket/1371> This was tested as a successful installation of a Master CA and Cloned CA using a LunaSA HSM.

8 years, 11 months

2
4
0 / 0

[PATCH] 600 Added deployment parameters to construct pki_clone_uri.

by Endi Sukma Dewata

New parameters have been added into the default.cfg to specify the master hostname and port for pki_clone_uri. By default they point to the security domain. The man page has been updated as well. https://fedorahosted.org/pki/ticket/1385 -- Endi S. Dewata

8 years, 11 months

2
2
0 / 0

[PATCH] 599 Fixed key archival problem in CLI with separate KRA instance.

by Endi Sukma Dewata

The CLI has been modified such that when enrolling a certificate with key archival it will obtain the transport certificate from the CA instead of KRA because the KRA may not reside on the same instance. The CA REST service has been modified such that it will obtain the transport certificate from the KRA connector. https://fedorahosted.org/pki/ticket/1384 -- Endi S. Dewata

8 years, 11 months

1
1
0 / 0

[PATCH] 598 Cleaned up log messages in ConfigurationUtils.getPortFromSecurityDomain().

by Endi Sukma Dewata

https://fedorahosted.org/pki/ticket/1372 -- Endi S. Dewata

8 years, 11 months

1
1
0 / 0

[PATCH] 0036 Use SimpleProperties to handle raw profile format

by Fraser Tweedale

This patch fixes an issue when handling the "raw" (property-list) profile format.

8 years, 11 months

2
5
0 / 0

[PATCH] pki-cfu-0066 and pki-cfu-0067 for Ticket 1307 [RFE] Support multiple keySets for different cards for ExternalReg

by Christina Fu

Please find two patches for the ticket: https://fedorahosted.org/pki/ticket/1307 [RFE] Support multiple keySets for different cards for ExternalReg Patch pki-cfu-0066 involves only renaming of classes/methods/parameters and the related config parameters for the Mapping Resolver framework. (note: after the refactoring, I tested it to work before continuing to the 2nd part) It is separated out from the actual code logic changes for ease of review. The renaming is necessary as the original framework was intended only to be used to resolve tokenType, and it is now expanded to be used to resolve keySet. Patch pki-cfu-0067 deals with the actual code changes that adds support for keySet mapping Original design of this add-on ExternalReg feature can be found here: http://pki.fedoraproject.org/wiki/TPS_-_New_Recovery_Option:_External_Reg... There is no upgrade supported at this point, as this is technology preview feature. Please review. thanks, Christina

8 years, 11 months

2
4
0 / 0

[pki-devel[PATCH] 0034-Fix-XSS-attacks-on-the-dogtag-administration-page-13.patch

by John Magne

Fix XSS attacks on the dogtag administration page #1373. Porting this set of fixes over from last downstream release upstream.

8 years, 11 months

2
2
0 / 0

[PATCH] pki-cfu-0060-Ticket-1160-audit-needed-for-getKeyInfo-audit-missin.patch

by Christina Fu

This is the 2nd part of the patch for https://fedorahosted.org/pki/ticket/1160 audit logging needed: REST API auth/authz; kra for getKeyInfo which addresses the missing audit for kra getKeyInfo. note: this patch has no dependency on the first patch that I submitted earlier, which addresses the missing auth/authz audit for REST interface. This is for preliminary review, as I don't have first hand info on how to run most of the services offered here to properly test everything. For efficiency purpose, I'm hoping to enlist some help from edewata/alee. thanks, Christina

8 years, 11 months

2
3
0 / 0

[PATCH] 597 Fixed pylint warning in pkihelper.py.

by Endi Sukma Dewata

Pushed to master under one-liner/trivial rule. -- Endi S. Dewata

8 years, 11 months

1
0
0 / 0

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

Pki-devel May 2015