August 2015 - Pki-devel - Dogtag Pki List Archives

by Christian Heimes

Large portions of the patch was automatically created with autopep8: find base/ -name '*.py' | xargs autopep8 --in-place --ignore E309 \ --aggressive find base/common/upgrade base/server/upgrade -type f -and \ -not -name .gitignore | autopep8 --in-place --ignore E309 --aggressive autopep8 --in-place --ignore E309 --aggressive \ base/common/sbin/pki-upgrade \ base/server/sbin/pkispawn \ base/server/sbin/pkidestroy \ base/server/sbin/pki-server \ base/server/sbin/pki-server-upgrade About two dozent violations were fixed manually. https://fedorahosted.org/pki/ticket/708 NOTE: I'm going to add some checks to the PKI core spec file and tox later.

8 years, 8 months

2
2
0 / 0

[PATCH 020] Move pylint-build-scan.py to scripts directory

by Christian Heimes

Endi has suggested to move the script and to tweak the file name matching algorithms a bit. Move internal helper and its configuration out of the project's root directory into scripts/. Also use re instead of fnmatch to find the upgrade scriptlets. Christian

8 years, 8 months

2
2
0 / 0

[PATCH] pki-cfu-0095-Ticket-1543-portalEnroll-authentication-does-not-loa.patch

by Christina Fu

Ticket 1543 portalEnroll authentication does not load during creation from Console https://fedorahosted.org/pki/ticket/1543 It appears that the PortalEnroll plugin was never converted to work in the Profile Framework. This patch takes out the following line from CS.cfg: auths.impl.PortalEnroll.class=com.netscape.cms.authentication.PortalEnroll so that it cannot be instantiated from the console, nor manually in CS.cfg, unless explicitly put back in. While in CS.cfg.in, I found the NSSAuth auths.impl line having no real implementation, so I remove that too. thanks, Christina

8 years, 8 months

2
7
0 / 0

[PATCH] 639 Fixed missing query parameters in ListCerts page.

by Endi Sukma Dewata

The ListCerts servlet and the templates have been fixed to pass the skipRevoked and skipNonValid parameters to the subsequent page. Some debugging messages have been cleaned up as well. https://fedorahosted.org/pki/ticket/1538 -- Endi S. Dewata

8 years, 8 months

1
1
0 / 0

[PATCH] 268 - fix serial number updates on clones

by Ade Lee

Author: Ade Lee <alee(a)redhat.com> Date: Wed Aug 12 00:57:46 2015 -0400 Separate range and cert status threads We currently disable the cert status maintenance thread on clone CAs because CRL processing should only be done on the master CA. Currently, the maintenance thread also performs other checks on serial number ranges and settings. By disabling the maintenance thread, we disable these checks too. To fix this, we have separated the serial number checks into a different maintenance thread, so that these tasks will occur even if the cert status thread is disabled. Bugzilla # 1251606

8 years, 8 months

1
1
0 / 0

[pki-devel][PATCH] 0047-setpin-utility-doesn-t-set-the-pin-for-users.patch

by John Magne

PATCH] setpin utility doesn't set the pin for users. There were some things wrong with the setpin utility. 1. There were some syntax violations that had to be dealt with or a DS with syntax checking would not be pleased. 2. The back end is expecting a byte of hash data at the beginning of the pin. In our case we are sending NO hash so we want the code at the beginning '-', which means no hash. 3. We also need to prepend the dn in front of the pin so the back end can verify the set pin. Tested to work during both steps of the setpin process: 1) Creating the schema, 2) creating the pin. Tested to work with actual PinBased Enrollment.

8 years, 8 months

1
0
0 / 0

[PATCH] pki-cfu-0092-Ticket-1539-Unable-to-create-ECC-KRA-Instance-when-k.patch

by Christina Fu

This patch is for ticket: https://fedorahosted.org/pki/ticket/1539 Unable to create ECC KRA Instance when kra admin key type is ECC The fixed profiles have been tested to work. I was able to create EC admin certificates. thanks, Christina

8 years, 8 months

2
1
0 / 0

[PATCH 013-018] spring-cleaning for Python 3

by Christian Heimes

Hello, I had some outstanding patches for Python 3 in my queue. Today I split them up in digestible portions. The attached patches all hand-written. I'm planning to submit the auto-generated patches by python-modernize at a later point. https://fedorahosted.org/pki/ticket/1480 Christian

8 years, 8 months

1
1
0 / 0

Karma Request for Dogtag 10.2.6 in Fedora 22

by Matthew Harmsen

Please use updated 'pki-core' packages. -------- Forwarded Message -------- Subject: Karma Request for Dogtag 10.2.6 in Fedora 22 Date: Sun, 19 Jul 2015 00:36:09 -0600 From: Matthew Harmsen <mharmsen(a)redhat.com> To: pki-devel <pki-devel(a)redhat.com> Everyone, Please provide Karma for the following Dogtag 10.2.6 packages for Fedora 22: * dogtag-pki-theme-10.2.6-1.fc22 <https://admin.fedoraproject.org/updates/dogtag-pki-theme-10.2.6-1.fc22> * pki-core-10.2.6-1.fc22 <https://admin.fedoraproject.org/updates/pki-core-10.2.6-1.fc22> * pki-core-10.2.6-2.fc22 <https://admin.fedoraproject.org/updates/pki-core-10.2.6-2.fc22> * *pki-core-10.2.6-4.fc22 <https://admin.fedoraproject.org/updates/pki-core-10.2.6-4.fc22>** * * pki-console-10.2.6-1.fc22 <https://admin.fedoraproject.org/updates/pki-console-10.2.6-1.fc22> * dogtag-pki-10.2.6-1.fc22 <https://admin.fedoraproject.org/updates/dogtag-pki-10.2.6-1.fc22> Thanks, -- Matt

8 years, 8 months

1
1
0 / 0

[PATCH] updated dependencies

by Matthew Harmsen

Please review the attached patch which addresses the following issues: * PKI TRAC Ticket #1530 - Client pki-tools missing tomcat-servlet dependency <https://fedorahosted.org/pki/ticket/1530> * PKI TRAC Ticket #1542 - Update tomcatjss dependency on Fedora 23 and later <https://fedorahosted.org/pki/ticket/1542> Thanks, -- Matt

8 years, 8 months

2
1
0 / 0

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

Pki-devel August 2015