August 2015 - Pki-devel - Dogtag PKI List Archives

Replace legacy Python base64 invocations
by Christian Heimes 24 Sep '15

24 Sep '15

Patch for https://fedorahosted.org/pki/ticket/1102 b64encode() and base64.encodestring() work slightly different. encodestring() includes an extra newline at the end of the string. It seems the server treats both representations equally. I ran the KRA tests according to base/kra/functional/drmtest.readme.txt. The tests are passing, too. Christian

2 5

[PATCH] 0046 API: add support for generic entities
by Fraser Tweedale 14 Sep '15

14 Sep '15

This patch adds support to retrieving generic entities (e.g. List<Thing>) from Response objects. Thanks, Fraser

2 2

[PATCH] 0026-5, 0044-3 Lightweight sub-CAs
by Fraser Tweedale 28 Aug '15

28 Aug '15

Hi team, The latest sub-CAs patches are attached. It has been a while since the last patchset (that was posted here, anyway) and there have been some significant changes, outlined below. (The patchset version skipped a couple numbers due to versions distributed privately that I felt were not stable enough to warrant posting to pki-devel.) Major changes: - The Java client and CLI were extracted to a separate patch (0044). - An LDAP entry for each sub-CA is written to database. - Database searched and sub-CAs are initialised at startup - Key nickname is store in / read from LDAP entry - Sub-CA "list" API call, client method and CLI was added - More resources are shared between top-level CA and sub-CAs - Suprious task threads and LDAP connections hunted down :) Dependencies: - Patch 0026-5 probably depends on 0045[1] for a clean merge. - Patch 0044-3 depends on my patch 0046[2]. [1] https://www.redhat.com/archives/pki-devel/2015-August/msg00072.html [2] https://www.redhat.com/archives/pki-devel/2015-August/msg00073.html Cheers, Fraser

2 10

[PATCH] Ticket 1307 - CUID range issue for [RFE] Support multiple, keySets for different cards for ExternalReg
by Christina Fu 27 Aug '15

27 Aug '15

This patch is for the cuid range evaluation issue come off from the testing of https://fedorahosted.org/pki/ticket/1307 [RFE] Support multiple keySets for different cards for ExternalReg It has been tested to work with the same data that discovered the issue. thanks, Christina

2 2

[PATCH] 0045 remove obsolete code from CertificateAuthority class
by Fraser Tweedale 25 Aug '15

25 Aug '15

The attached patch removes the empty, private and apparently unused `initWebGateway' method from CertificateAuthority. Cheers, Fraser

2 2

[pki-devel][PATCH] 0051-SC650-format-enroll-fails.patch
by John Magne 25 Aug '15

25 Aug '15

[PATCH] SC650 format/enroll fails Simple fix to correctly identify scp01/gp201 sc650 card. Format and enrollment for both scp01 and scp02 sc650 tested. Format and enrollment for scp01 gemalto card also tested.

2 3

Ticket 1307 minor fix for - [RFE] Support multiple keySets for different cards for ExternalReg
by Christina Fu 25 Aug '15

25 Aug '15

This is a minor fix for ticket https://fedorahosted.org/pki/ticket/1307 [RFE] Support multiple keySets for different cards for ExternalReg thanks, Christina

2 2

[PATCH] 640 Added pki-user-membership man page.
by Endi Sukma Dewata 24 Aug '15

24 Aug '15

A new man page has been added for pki <subsystem>-user-membership commands. The pki-user-cert man page has been modified to fix some errors. https://fedorahosted.org/pki/ticket/1584 -- Endi S. Dewata

2 3

Karma Request for Dogtag 10.2.6 in Fedora 22 & 23
by Matthew Harmsen 21 Aug '15

21 Aug '15

Everyone, Please provide Karma for the following Dogtag 10.2.6 packages for Fedora 22: * dogtag-pki-theme-10.2.6-1.fc22 <https://admin.fedoraproject.org/updates/dogtag-pki-theme-10.2.6-1.fc22> * pki-core-10.2.6-1.fc22 <https://admin.fedoraproject.org/updates/pki-core-10.2.6-1.fc22> * pki-core-10.2.6-2.fc22 <https://admin.fedoraproject.org/updates/pki-core-10.2.6-2.fc22> * pki-core-10.2.6-4.fc22 <https://admin.fedoraproject.org/updates/pki-core-10.2.6-4.fc22> * pki-core-10.2.6-5.fc22 <http://koji.fedoraproject.org/koji/buildinfo?buildID=676279> * pki-core-10.2.6-6.fc22 <https://admin.fedoraproject.org/updates/pki-core-10.2.6-6.fc22> * *pki-core-10.2.6-7.fc22 <https://bodhi.fedoraproject.org/updates/FEDORA-2015-13903> * * pki-console-10.2.6-1.fc22 <https://admin.fedoraproject.org/updates/pki-console-10.2.6-1.fc22> * dogtag-pki-10.2.6-1.fc22 <https://admin.fedoraproject.org/updates/dogtag-pki-10.2.6-1.fc22> and for Fedora 23: * pki-core-10.2.6-5.fc23 <http://koji.fedoraproject.org/koji/buildinfo?buildID=676280> * pki-core-10.2.6-6.fc23 <https://admin.fedoraproject.org/updates/pki-core-10.2.6-6.fc23> * *pki-core-10.2.6-7.fc23 <https://bodhi.fedoraproject.org/updates/FEDORA-2015-13905> * Thanks, -- Matt P. S. - It is our hope that these will be the last re-spins for a while!

1 0

[pki-devel][PATCH] 0050-Internet-Explorer-11-not-working-browser-warning.patch
by John Magne 20 Aug '15

20 Aug '15

[PATCH] Internet Explorer 11 not working browser warning. Related to ticket #1575 Internet Explorer 11: caUserCert request submission fails using the EE page. This patch will only do the following: Detect IE when IE11 is being used. Before this IE11 was mistaken for Firefox. Detect IE11 specifically and warn the user that there is no support. This ticket will live to se we can fix this properly by porting the current VBS script to Javascript to support cert enrollment on IE 11.

2 2