July 2016 - Pki-devel - Dogtag PKI List Archives

[PATCH] 0128 Fix CA OCSP responder when LWCA's are not in use
by Fraser Tweedale 08 Aug '16

08 Aug '16

Hi team, The attached patch fixes https://fedorahosted.org/pki/ticket/2420. Thanks, Fraser

3 3

[PATCH] Fix NumberFormatException for tps-cert-find when given non integer value to size and start option
by Geetika Kapoor 05 Aug '16

05 Aug '16

Hi, I tried to fix NumberFormatException when i did tps-cert-find with non-integer/invalid range value for size and start.I was doing testing for tps-cert and then i came across this.I thought giving some additional info to users inplace of numberformat.I have done similar fix on rhel7 compile it and make a jar and test on rhel7 .I can share that patch if needed. Below are the test result. Before fix testing: 1. pki -h pki1.example.com -p 25080 tps-cert-find --start "gy" NumberFormatException: For input string: "gy" 2. pki -h pki1.example.com -p 25080 tps-cert-find --size "gy" NumberFormatException: For input string: "gy" 3. pki -p 25080 tps-cert-find --start 1789999999999999999999999999999999999999999999 NumberFormatException: For input string: "1789999999999999999999999999999999999999999999" After fix testing: 1. [root@pki1 ~]# pki -d /opt/rhqa_pki/certdb -c Secret123 -h pki1.example.com -p 25080 tps-cert-find --start "gy" Error: Enter valid integer value for size/start option usage: tps-cert-find [FILTER] [OPTIONS...] --help Show help options --size <size> Page size --start <start> Page start --token <ID> Token ID 2. [root@pki1 ~]# pki -d /opt/rhqa_pki/certdb -c Secret123 -h pki1.example.com -p 25080 tps-cert-find --size "hy" Error: Enter valid integer value for size/start option usage: tps-cert-find [FILTER] [OPTIONS...] --help Show help options --size <size> Page size --start <start> Page start --token <ID> Token ID 3. [root@pki1 ~]# pki -d /opt/rhqa_pki/certdb -c Secret123 -h pki1.example.com -p 25080 tps-cert-find --start 1 ----------------- 2 entries matched ----------------- Cert ID: 3d.20160720042931 Serial Number: 0x3d Subject: UID=ldapuser7,O=Token Key User Token ID: 40906145C76224192D78 Key Type: encryption Status: active User ID: ldapuser7 Create Time: Wed Jul 20 04:29:31 EDT 2016 ---------------------------- Number of entries returned 1 ---------------------------- 4. [root@pki1 ~]# pki -d /opt/rhqa_pki/certdb -c Secret123 -h pki1.example.com -p 25080 tps-cert-find --size 1 ----------------- 2 entries matched ----------------- Cert ID: 3c.20160720042931 Serial Number: 0x3c Subject: UID=ldapuser7,O=Token Key User Token ID: 40906145C76224192D78 Key Type: signing Status: active User ID: ldapuser7 Create Time: Wed Jul 20 04:29:31 EDT 2016 ---------------------------- Number of entries returned 1 ---------------------------- 5. [root@pki1 cert]# pki -d /opt/rhqa_pki/certdb -c Secret123 -h pki1.example.com -p 25080 tps-cert-find --start 1789999999999999999999999999999999999999999999 Error: Enter valid integer value for size/start option usage: tps-cert-find [FILTER] [OPTIONS...] --help Show help options --size <size> Page size --start <start> Page start --token <ID> Token ID Thanks Geetika

2 4

[PATCH] 805 Added log message in PKIClient.
by Endi Sukma Dewata 29 Jul '16

29 Jul '16

To help troubleshooting the PKIClient class has been modified to log the certificate chain retrieved from the CA. https://fedorahosted.org/pki/ticket/2399 Pushed under one-liner/trivial rule. -- Endi S. Dewata

1 0

[PATCH] 327 - small fix for SERVER_KEYGEN slot substitution
by Ade Lee 29 Jul '16

29 Jul '16

Addresses Ticket 2418 - Some template substitution didn't happen during installation (specifically SERVER_KEYGEN) Please review, Ade

2 1

[PATCH] Updated RESTEasy dependency on Fedora 24.
by Endi Sukma Dewata 29 Jul '16

29 Jul '16

The RPM spec for Fedora 24 has been updated to use RESTEasy 3.0.17 as in Fedora 25. https://fedorahosted.org/pki/ticket/2403 Pushed to master under one-liner/trivial rule. -- Endi S. Dewata

1 0

[PATCH] 328 - fix trust settingd for pki client-cert-import
by Ade Lee 29 Jul '16

29 Jul '16

Fix client-cert-import to set provided trust bits Ticket 2412

1 0

[PATCH] 326 - re-license the python client code
by Ade Lee 29 Jul '16

29 Jul '16

In order to keep the Dogtag plugin in the Openstack Barbican source tree, it is necessarily to re-license the Python client code to be LGPLv3 as opposed to GPLv2, to comply with Openstack rules for licensing of dependencies. http://governance.openstack.org/reference/licensing.html This patch makes the relevant changes. Please review. Thanks, Ade

1 1

[pki-devel][PATCH] 0077-Make-starting-CRL-Number-configurable.patch
by John Magne 27 Jul '16

27 Jul '16

Make starting CRL Number configurable. Ticket #2406 Make starting CRL Number configurable This simple patch provides a pkispawn config param that passes some starting crl number value to the config process. Here is a sample: [CA] pki_ca_starting_crl_number=4000 After the CA comes up the value of "crlNumber" in the db will reflect that value of 4000. Currently no other values are changed. We can talk about if we need more values reset in the given case. Also, this creates a setting in the CS.cfg ca.crl.MasterCrl.startingCrlNumber=4000 This setting is only consulted when the crl Issuing Point record is created for the first time.

1 1

[PATCH] 803 Fixed SELinux contexts.
by Endi Sukma Dewata 27 Jul '16

27 Jul '16

The deployment tool has been modified to set up SELinux contexts after all instance files have been created to ensure they have the correct contexts. An upgrade script has been added to fix existing instances. https://fedorahosted.org/pki/ticket/2421 -- Endi S. Dewata

1 0

[PATCH] 802 Added upgrade scripts to fix server library.
by Endi Sukma Dewata 27 Jul '16

27 Jul '16

An upgrade script has been added to replace the <instance>/common in existing instances with a link to /usr/share/pki/server/common which contains links to server dependencies. https://fedorahosted.org/pki/ticket/2403 -- Endi S. Dewata

1 0