March 2017 - Pki-devel - Dogtag PKI List Archives

[PATCH] 0159..0161 Fix config param removal in profile modification
by Fraser Tweedale 20 Apr '17

20 Apr '17

Please review the attached patches which fix https://fedorahosted.org/pki/ticket/2588, a bug in profile modification where config params can only be added or changed, but not removed. Thanks, Fraser

1 1

[PATCH] 0166 CMS.getLogMessage: escape format elements in arguments
by Fraser Tweedale 19 Apr '17

19 Apr '17

Hi team, Please review attached patch that fixes an issue in CMS message formatting: if one of the message arguments contains '{' or '}', in subsequent logging this is interpreted as a FormatElement and parsing fails. Thanks, Fraser

1 1

[PATCH] 0167..0175 external authentication support
by Fraser Tweedale 19 Apr '17

19 Apr '17

Hi team, Please review the attached patches, which add support for external authentication (e.g. GSS-API/SPNEGO). These patches depend on some other outstanding patches: 0157, 0158, 0165, 0166. You can review the whole branch (including those commits just mentioned) on GitHub: https://github.com/dogtagpki/pki/compare/master...frasertweedale:feature/13… Thanks! Fraser

1 2

[pki-devel][PATCH] 0091-SCP03 support for g&d 7 card.patch
by John Magne 11 Apr '17

11 Apr '17

[PATCH] SCP03 support for g&d sc 7 card. Ticket: https://pagure.io/dogtagpki/issue/1663 Add SCP03 support This allows the use of the g&d 7 card. This will require the following: 1. An out of band method is needed to generate an AES based master key. We do not as of yet have support with tkstool for this: Ex: /usr/lib64/nss/unsupported-tools/symkeyutil -d . -K -n new_master_aes -t aes -s 16 2. There are some new config params that can be adjusted to support either the 6.0 or 7.0 cards: Ex: tks.defKeySet._005=## tks.prot3 , protocol 3 specific settings tks.defKeySet._006=## divers= emv,visa2 : Values for the master key case, or > version one. tks.defKeySet._007=## diversVer1 = emv,visa2, or none. This is for developer or version one keyset tks.defKeySet._008=## devKeyType = DES3or AES. This is for the key type of developer or version one keys. tks.defKeySet._009=## masterKeyType = DES3 or AES. This is for the type of key for the master key. tks.defKeySet._010=## tks.defKeySet._011=## Only supports two tokens now: G&D Smart Cafe 6 and Smart Cafe 7, use these exact settings tks.defKeySet._013=## Smart Cafe 6 settings: tks.defKeySet._014=## tks.defKeySet.prot3.divers=emv tks.defKeySet._015=## tks.defKeySet.prot3.diversVer1Keys=emv tks.defKeySet._016=## tks.defKeySet.prot3.devKeyType=DES3 tks.defKeySet._017=## tks.defKeySet.prot3.masterKeyType=DES3 tks.defKeySet._018=##Smart Cafe 7 settings: tks.defKeySet._019=## tks.defKeySet.prot3.divers=none tks.defKeySet._020=## tks.defKeySet.prot3.diversVer1Keys=none tks.defKeySet._021=## tks.defKeySet.prot3.devKeyType=AES tks.defKeySet._022=## tks.defKeySet.prot3.masterKeyType=AES tks.defKeySet._023=## tks.defKeySet._024=##

2 1

[PATCH] Added CLIs to manage audit log files.
by Endi Sukma Dewata 31 Mar '17

31 Mar '17

These patches add new pki audit commands to list, retrieve, and remove audit log files. https://review.gerrithub.io/355356 https://review.gerrithub.io/355357 https://review.gerrithub.io/355358 -- Endi S. Dewata

1 0

[PATCH] 1025 Refactored AuditCLI.
by Endi Sukma Dewata 31 Mar '17

31 Mar '17

The AuditCLI has been modified to create the AuditClient with lazy initialization. Pushed to master under trivial rule. -- Endi S. Dewata

1 0

[PATCH] 1024 Removed redundant Context attributes.
by Endi Sukma Dewata 31 Mar '17

31 Mar '17

All subclasses of PKIService have been modified to remove the Context attribute since they have been declared in the base class. Pushed to master under trivial rule. -- Endi S. Dewata

1 0

[PATCH] 1022-1023 Fixed some pylint errors.
by Endi Sukma Dewata 31 Mar '17

31 Mar '17

Fixed pylint errors in pki.authority and pki.server.cli.subsystem. https://pagure.io/dogtagpki/issue/2627 Pushed to master under trivial rule. -- Endi S. Dewata

1 0

[PATCH] 1021 Fixed default subsystems for top-level CLI commands.
by Endi Sukma Dewata 31 Mar '17

31 Mar '17

The top-level CLI commands have been modified to get the subsystem name from the parent subsystem CLI if available, otherwise they will use a hard-coded default value. https://pagure.io/dogtagpki/issue/2626 Pushed to master under trivial rule. -- Endi S. Dewata

1 0

[PATCH] 1018-1020 Removed duplicate constants.
by Endi Sukma Dewata 30 Mar '17

30 Mar '17

Some constants in RollingLogFile have been replaced with their equivalents in Constants class. Pushed to master under trivial rule. -- Endi S. Dewata

1 0