December 2016 - Pki-devel - Dogtag Pki List Archives

[PATCH] 885 Added startup CLI for generic Tomcat.

by Endi Sukma Dewata

New pki-server commands have been added to provide a consistent way to start, stop, and restart PKI instances using different types of Tomcat installations. https://fedorahosted.org/pki/ticket/2560 -- Endi S. Dewata

7 years, 4 months

1
0
0 / 0

[PATCH] 884 Added support for deploying with generic Tomcat.

by Endi Sukma Dewata

The start(), stop() and restart() methods in PKIInstance have been modified to provide a unified way to manage instances using different types of Tomcat installations: * generic Tomcat * standard Tomcat on Debian * nuxwdog-enabled Tomcat on Fedora/RHEL * standard Tomcat on Fedora/RHEL The deployment tool has been modified to provide a parameter to specify the Tomcat home for the instance. It has also been modified to utilize the unified instance startup methods. https://fedorahosted.org/pki/ticket/2560 -- Endi S. Dewata

7 years, 4 months

1
0
0 / 0

[PATCH] 883 Added support for building with generic Tomcat.

by Endi Sukma Dewata

Previously the build scripts would only work with specific Tomcat versions officially supported by the operating system. To support other Tomcat versions the build scripts have been modified such that they will use the Tomcat installation specified in the TOMCAT_HOME variable. The Tomcat-specific PKI source folder to use can now be specified in the PKI_TOMCAT_SRC variable. https://fedorahosted.org/pki/ticket/2560 -- Endi S. Dewata

7 years, 4 months

1
0
0 / 0

[PATCH] 882 Removed redundant find_file() for Tomcat libraries.

by Endi Sukma Dewata

The CMake scripts have been modified to remove redundant invocations of find_file() to find Tomcat libraries. https://fedorahosted.org/pki/ticket/2560 Pushed to master under trivial rule. -- Endi S. Dewata

7 years, 4 months

1
0
0 / 0

[PATCH] 881 Fixed pki-tools build order.

by Endi Sukma Dewata

To help troubleshooting build issues the pki-tools build targets have been modified such that they run sequentially. This way error messages will be easier to find in the build log. https://fedorahosted.org/pki/ticket/2463 Pushed to master under trivial rule. -- Endi S. Dewata

7 years, 4 months

1
0
0 / 0

Karma Requests for pki-core-10.3.5-9

by Matthew Harmsen

*The following updated candidate builds of pki-core 10.3.5 were generated:* * *Fedora 24* o *pki-core-10.3.5-9.fc24 <https://koji.fedoraproject.org/koji/buildinfo?buildID=825551> * * *Fedora 25* o *pki-core-10.3.5-9.fc25 <https://koji.fedoraproject.org/koji/buildinfo?buildID=825863> * * *Fedora 26* o *pki-core-10.3.5-9.fc26 <https://koji.fedoraproject.org/koji/buildinfo?buildID=825864>* *These builds address the following PKI tickets:* * *PKI TRAC Ticket #1517 - user-cert-add --serial CLI request to secure port with remote CA shows authentication failure <https://fedorahosted.org/pki/ticket/1517>* * *PKI TRAC Ticket #1897 - [MAN] Man page for logging configuration. <https://fedorahosted.org/pki/ticket/1897>* * *PKI TRAC Ticket #1920 - [MAN] Man page for PKCS #12 utilities <https://fedorahosted.org/pki/ticket/1920>* * *PKI TRAC Ticket #2226 - KRA installation: NullPointerException in ProxyRealm.findSecurityConstraints <https://fedorahosted.org/pki/ticket/2226>* * *PKI TRAC Ticket #2289 - [MAN] pki ca-cert-request-submit fails presumably because of missing authentication even if it should not require any <https://fedorahosted.org/pki/ticket/2289>* * *PKI TRAC Ticket #2523 - Changes to target.agent.approve.list parameter is not reflected in the TPS Web UI <https://fedorahosted.org/pki/ticket/2523>* * *PKI TRAC Ticket #2534 - Automatic recovery of encryption cert - CA and TPS tokendb shows different certificate status <https://fedorahosted.org/pki/ticket/2534>* * *PKI TRAC Ticket #2543 - Unable to install subordinate CA with HSM in FIPS mode <https://fedorahosted.org/pki/ticket/2543>* * *PKI TRAC Ticket #2544 - TPS throws "err=6" when attempting to format and enroll G&D Cards <https://fedorahosted.org/pki/ticket/2544>* * *PKI TRAC Ticket #2552 - pkispawn does not change default ecc key size from nistp256 when nistp384 is specified in spawn config <https://fedorahosted.org/pki/ticket/2552>* *Please provide Karma for the following builds:* * *Fedora 24* o *https://bodhi.fedoraproject.org/updates/FEDORA-2016-346c2e1366 pki-core-10.3.5-9.fc24 * * *Fedora 25* o *https://bodhi.fedoraproject.org/updates/FEDORA-2016-9100653751 pki-core-10.3.5-9.fc25 <https://bodhi.fedoraproject.org/updates/FEDORA-2016-9100653751> *

7 years, 4 months

1
0
0 / 0

[PATCH] 0148 Remove principal type assumption from AuthorityService

by Fraser Tweedale

Reviewed by alee: https://github.com/frasertweedale/pki/commit/967727ea3104accbf1bd1e05fc67... Pushed to master (1d706a075f32d7c30a6259be675b8f34ef2a9c99). Thanks, Fraser

7 years, 4 months

1
0
0 / 0

[PATCH] 0144..0146 Move IRequest extdata-related constants

by Fraser Tweedale

The attached patches relocate / redefine some constants that are used as keys when setting or getting IRequest extdata attributes. In some cases this removes duplicate constants or string literals. In other cases it actually defines a new constant. In all cases the key now uses a constant defined in IRequest, which is the appropriate place. This is refactoring work undertaken as part of GSSAPI support. Thanks, Fraser

7 years, 4 months

1
1
0 / 0

[PATCH] 0141 Add getAuthzManagerNameByRealm to IAuthzSubsystem

by Fraser Tweedale

This patch renames (a better name) and moves to the IAuthzSubsystem interface a method in AuthzSubsystem that may be useful for doing authorisation checks for external principals. Thanks, Fraser

7 years, 4 months

1
1
0 / 0

[PATCH] 0140 Allow ':' to appear in ACL expressions

by Fraser Tweedale

With current ACL parsing, if you have a ':' in a group name (as occurs with FreeIPA permissions, which matter for upcoming external principal support) you are stuffed. This commit fixes that. It is really a band aid - the existing parsing code is poor and should be replaced with a nice combinatorial parser... but who has the time for that right now? ¯\_(ツ)_/¯ Note that if there is a ':' in any of the ACL descriptions/comments (the final field) this change breaks it. We don't have any occurrences of that in our codebase. Thanks, Fraser

7 years, 4 months

1
1
0 / 0

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

Pki-devel December 2016