March 2017 - Pki-devel - Dogtag Pki List Archives

[PATCH] 1010-1017 Fixed unnecessary CLI connection.

by Endi Sukma Dewata

Additional changes to remove unnecessary CLI connection using lazy initialization. Pushed to master under trivial rule. -- Endi S. Dewata

7 years, 10 months

1
0
0 / 0

[PATCH] 1009 Added audit logs for SSL/TLS events.

by Endi Sukma Dewata

The CMSStartServlet has been modified to register an SSL socket listener called PKIServerSocketListener to TomcatJSS. The PKIServerSocketListener will receive the alerts generated by SSL server sockets and generate ACCESS_SESSION_* audit logs. The CS.cfg for all subsystems have been modified to include ACCESS_SESSION_* audit events. https://pagure.io/dogtagpki/issue/2602 ACKed by cfu with a few changes. Pushed to master. -- Endi S. Dewata

7 years, 10 months

1
0
0 / 0

[PATCH] 1002-1008 Fixed unnecessary CLI connection.

by Endi Sukma Dewata

Additional changes to remove unnecessary CLI connection using lazy initialization. Pushed to master under trivial rule. -- Endi S. Dewata

7 years, 10 months

1
0
0 / 0

[PATCH] Bug-2615-CMC-cleanup-code-for-Encrypted-Decrypted-PO.patch

by Christina Fu

This is the cleanup patch that I promised. It contains as much error-checking code as I can muster for now. It is tested to work. This is again an incremental patch from the previous CMC patch. thanks, Christina

7 years, 10 months

1
0
0 / 0

[PATCH] CMC RFE: provide Proof of Possession for encryption cert requests (encryptedPOP and decrypedPOP)

by Christina Fu

This patch provides the feature implementation for CMC encryptedPOP and decrypedPOP used for Proof of Possession for encryption keys in the following ticket: #2615 CMC: provide Proof of Possession for encryption cert requests Note tha it is an incremental patch based off #2613 CMC: id-cmc-identityProofV2 feature implementation Which I submitted yesterday There will be a small "cleanup" patch after this. thanks, Christina

7 years, 10 months

1
0
0 / 0

[PATCH] Bug 1419734 CMC: id-cmc-identityProofV2 feature

by Christina Fu

please review. thanks, Christina

7 years, 10 months

1
0
0 / 0

[PATCH] 992-1001 Fixed unnecessary CLI connection.

by Endi Sukma Dewata

Previously the CLI would unnecessarily try to connect to the server while executing commands that do not need connection. The problem has been fixed using lazy initialization of the PKIClient object. Pushed to master under trivial rule. -- Endi S. Dewata

7 years, 10 months

1
0
0 / 0

[PATCH] 991 Added support for disabling SSL ciphers in pki.conf.

by Endi Sukma Dewata

The CryptoUtil.setSSLCiphers() has been modified to support a "-" sign in front of the cipher name or ID to disable the cipher. Pushed to master under trivial rule. -- Endi S. Dewata

7 years, 10 months

1
0
0 / 0

[PATCH] 990 Added support for hex cipher IDs in pki.conf.

by Endi Sukma Dewata

The CryptoUtil.setSSLCipher() has been modified to support ciphers specified using hex ID. Pushed to master under trivial rule. -- Endi S. Dewata

7 years, 10 months

1
0
0 / 0

[PATCH] 989 Allowing client cert auth without NSS database password.

by Endi Sukma Dewata

The PKI CLI has been modified to support client cert authentication without NSS database password. Pushed to master under trivial rule. -- Endi S. Dewata

7 years, 10 months

1
0
0 / 0

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

Pki-devel March 2017