[pki-devel][PATCH] 0064-Port-symkey-JNI-to-Java-classes.patch
by John Magne
Subject: [PATCH] Port symkey JNI to Java classes. Ticket #801 : Merge
pki-symkey into jss
What is supported:
1. Everything that is needed to support Secure Channel Protocol 01.
2. Supports the nist sp800 kdf and the original kdf.
3. Supports key unwrapping used by TPS which was formerly in the symkey JNI.
Requires:
1. A new JSS that supports more advanced symkey operations such as key derivation, more advanced key
unwrapping , and a way to list and identify a given symmetric key by name. Version of new Jss will be forthcoming.
Still to do:
1. Port over the 2 or 3 SCP02 routines from Symkey to use this code.
2. The original symkey will remain in place until we can port over everything.
3. SCP03 support can be added later.
8 years, 3 months
[PATCH] pki-cfu-0122-Ticket-1527-reopened-retrieved-wrong-ca-connector-co.patch
by Christina Fu
Ticket #1527 (reopened) retrieved wrong ca connector config parameter
This ticket was reopened due to retrieving wrong ca connector
config param under the situation when format is performed during enrollment.
The following is attempted:
op.enroll.userKey.ca.conn
while the following is intended:
op.format.userKey.ca.conn
In addition, this patch also fixes the following issues;
a. reason param name is not conforming: "reason" instead of
"revokeReason"
b. adding default reason to format TPS profiles
c. by default mappingResolver.formatProfileMappingResolver resolves
to tokenKey, while enroll resolves to userKey.
-> now changed the userKey
d. if revocation fails during format, it was forgiving.
-> now changed so that error is logged in activity log and exception
thrown and bail out
Tested to work.
thanks,
Christina
8 years, 4 months
rpm version issues in ogtag-pki-theme
by Peter Robinson
Hi Matt
Note you'll have problems here, a beta should have a version like
10.3.0-0.b1 not 10.3.0.b1-1 because it won't upgrade properly because
10.3.0.b1 > 10.3.0 in versions.
Details can be found in the packaging guidelines:
http://fedoraproject.org/wiki/Packaging:NamingGuidelines#Pre-Release_pack...
Peter
===== DOWNGRADED PACKAGES =====
Package: dogtag-pki-theme-10.3.0-1.fc25
Old package: dogtag-pki-theme-10.3.0.b1-1.fc25
Summary: Certificate System - PKI Console User Interface
RPMs: dogtag-pki-console-theme dogtag-pki-server-theme
Size: 405976 bytes
Size change: -304 bytes
Changelog:
* Mon May 16 2016 Dogtag Team <pki-devel(a)redhat.com> 10.3.0-1
- Updated version number to 10.3.0-1
8 years, 4 months
