January 2017 - Pki-devel - Dogtag Pki List Archives

[PATCH] 0150 Allow DirAclAuthz to be configured to read alternative entry

by Fraser Tweedale

The attached patch (part of the GSS-API effort) allows DirAclAuthz configuration to specify to read the ACLs from a different entry (it is currently hard-coded). Thanks, Fraser

7 years, 2 months

1
1
0 / 0

[PATCH] Allow separate certificate and private key for PKIConnection

by Standa Laznicka

Hello, Attached is a patch which allows for separation of a client certificate and a private key in PKIConnection.set_authentication_cert(). Since python-requests allows for this separation, I think this should be allowed here as well. Have a nice day, Standa

7 years, 2 months

2
1
0 / 0

[PATCH] 924 Fixed Ctrl-C handling in PKI CLI.

by Endi Sukma Dewata

The PKI CLI has been modified to catch KeyboardInterrupt and exit cleanly without displaying the stack trace. Pushed to master under trivial rule. -- Endi S. Dewata

7 years, 2 months

1
0
0 / 0

[PATCH] 923 Refactored restricted command list in PKI CLI.

by Endi Sukma Dewata

The names of restricted commands have been moved into a list for clarity. Pushed to master under trivial rule. -- Endi S. Dewata

7 years, 2 months

1
0
0 / 0

[PATCH] 922 Cleaned up error handling in key CLIs.

by Endi Sukma Dewata

The key CLIs have been modified to use Exceptions instead of System.exit() such that errors can be handled consistently. Pushed to master under trivial rule. -- Endi S. Dewata

7 years, 2 months

1
0
0 / 0

[PATCH] 921 Cleaned up error handling in cert and profile CLIs.

by Endi Sukma Dewata

The cert and profile CLIs have been modified to use Exceptions instead of System.exit() such that errors can be handled consistently. Pushed to master under trivial rule. -- Endi S. Dewata

7 years, 2 months

1
0
0 / 0

[PATCH] 919 Merged /pki webapps.

by Endi Sukma Dewata

Previously the /pki webapp was only added if the theme was present during installation, and there were separate webapps for /pki/admin and /pki/js. If the theme was installed later, the /pki webapp had to be configured manually. To simplify the installation and to support other developments (e.g. login banner), the /pki webapp will always be added during installation regardless of theme, and the /pki/admin and /pki/js webapps are merged into /pki webapp. When the theme package is installed, it will create links in /pki webapp so the theme files will become available without additional configuration. An upgrade script has been added to merge the /pki webapp in existing instances. https://fedorahosted.org/pki/ticket/2582 -- Endi S. Dewata

7 years, 2 months

2
2
0 / 0

[PATCH] 918 Replaced CryptoManager.getTokenByName().

by Endi Sukma Dewata

Direct invocations of CryptoManager.getTokenByName() have been replaced with CryptoUtil.getCryptoToken() and getKeyStorageToken() to ensure that internal token names are handled consistently both in normal mode and FIPS mode. https://fedorahosted.org/pki/ticket/2556 -- Endi S. Dewata

7 years, 3 months

2
2
0 / 0

[PATCH] 920 Fixed problem searching the latest certificate request.

by Endi Sukma Dewata

Previously if a certificate request page only has one entry the entry itself will be removed from the page, resulting in a blank page. The QueryReq.trim() has been modified not to remove the marker entry if it's the only element in the list. https://fedorahosted.org/pki/ticket/2450 -- Endi S. Dewata

7 years, 3 months

1
1
0 / 0

[PATCH] pki-cfu-0159-Ticket-1741-ECDSA-certs-Alg-IDs-contian-parameter-fi.patch

by Christina Fu

This patch addresses: https://fedorahosted.org/pki/ticket/1741 ECDSA Certificates Generated by Certificate System fail NIST validation test with parameter field. Note: Since we do not support DSA, this patch does not attempt to address that. Also, although we do not claim to support sha224, for completeness, it has code to recognize sha224 oid and process it as such to avoid the parameter field, but it does not offer it as part of the hashing alg for signing algorithms, as that is not the purpose of this ticket, and would cost more time if to be added. thanks! Christina

7 years, 3 months

2
2
0 / 0

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

Pki-devel January 2017