July 2015 - Pki-devel - Dogtag Pki List Archives

[pki-devel][PATCH] 0039-Ability-to-toggle-profile-usablity-in-Web-vs-CLI-too.patch

by John Magne

[PATCH] Ability to toggle profile usablity in Web vs CLI tools. Ticket #1442. This fix gives the command line enrollment commands the ability to enroll a cert against a profile that has been marked as not visible but "enabled". With the simple fix the following scenarios tested to work: The "caUserCert" Profile was marked as not visible, but enabled. 1. pki -c Secret123 client-cert-request --profile caUserCert uid=jmagne This is the simplest form of user cert enrollment. 2. pki ca-cert-request-profile-show caUserCert --output testuser.xml pki ca-cert-request-submit testuser.xml The first command gives us the profile's xml file, which after modification is used to enroll. 3. pki -d ~/.dogtag/pki -c "" -n "PKI Administrator for localdomain" ca-profile-show caUserCert This one shows that we can view the contents of a non visible profile. Listing is not allowed. We felt this appropiate to allow a command line user to get the details of a non visible profile that they know aobut and want to use.

8 years, 9 months

1
1
0 / 0

[PATCH] pki-cfu-0079-Ticket-1438-pkispawn-SSL_ForceHandshake-issue-for-no.patch

by Christina Fu

This patch address the issue in: https://fedorahosted.org/pki/ticket/1438 pkispawn: SSL_ForceHandshake issue for non-CA on HSM on both shared and nonshared tomcat instances Please review. thanks, Christina

8 years, 9 months

2
2
0 / 0

[PATCH] 620 Cleaned up SystemConfigService.configureClone().

by Endi Sukma Dewata

The getCloningData() in SystemConfigService has been renamed to configureClone(). Redundant try-catch blocks have been removed. Some exception messages have been modified to include more info. -- Endi S. Dewata

8 years, 9 months

1
1
0 / 0

[PATCH] 619 Cleaned up SystemConfigService.validateRequest().

by Endi Sukma Dewata

The configure() in SystemConfigService method has been modified to log only the error message in normal responses but log the full stack trace when unexpected issues occur. The validateData() in SystemConfigService has been renamed to validateRequest() for clarity. The log messages have been modified to include the invalid values entered in the request. -- Endi S. Dewata

8 years, 9 months

1
1
0 / 0

[PATCH] 006 Create Python config verification method

by Christian Heimes

Hi, the patch addresses issue https://fedorahosted.org/pki/ticket/1413. After the PKI meeting, Matt and Endi had a discussion about the verification method on IRC. They fear that there is not enough time to test the new feature thoroughly. I turned the checker into an optional feature. By default strict verification is disabled and the user cfg is not verified at all. # pkispawn --strict -f test.inf -s CA Log file: /var/log/pki/pki-ca-spawn.20150701133808.log Loading deployment configuration from test.inf. pkispawn : ERROR 'Could not parse: 'User configuration contains unsupported option(s) [Tomcat] pki_foo' Christian

8 years, 9 months

1
0
0 / 0

[PATCH] 622 Updated pki man page.

by Endi Sukma Dewata

The pki man page has been updated to describe results paging parameters. https://fedorahosted.org/pki/ticket/1122 -- Endi S. Dewata

8 years, 9 months

2
2
0 / 0

[PATCH] 621 Updated pki-cert man page.

by Endi Sukma Dewata

The man page for pki-cert has been modified to describe the file format used to specify the search constraints. https://fedorahosted.org/pki/ticket/995 -- Endi S. Dewata

8 years, 9 months

2
2
0 / 0

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

Pki-devel July 2015