March 2017 - Pki-devel - Dogtag Pki List Archives

[PATCH] 977 Fixed PKIClient initialization in PKI CLI.

by Endi Sukma Dewata

The PKI CLI has been modified such that it initializes the PKIClient (and retrieves the access banner) only if the CLI needs to access the PKI server. https://pagure.io/dogtagpki/issue/2612 Pushed to master under trivial rule. -- Endi S. Dewata

7 years, 9 months

1
0
0 / 0

[PATCH] 976 Cleaned up CryptoUtil.setClientCiphers(String).

by Endi Sukma Dewata

The CryptoUtil.setClientCiphers(String) has been reformatted to simplify future refactoring. Pushed to master under trivial rule. -- Endi S. Dewata

7 years, 9 months

1
0
0 / 0

[PATCH] Issuance Protection Cert establishment and convenience crypto routines

by Christina Fu

This patch provides routines that can be shared between https://pagure.io/dogtagpki/issue/2605 CMC feature: id-cmc-identityProofV2 per rfc5272 and https://pagure.io/dogtagpki/issue/2604 RFE: shared secret storage and retrieval mechanism Note: symkey algorithm remains at DES3 until cmc feature materializes. thanks, Christina

7 years, 9 months

1
0
0 / 0

[PATCH] Issuance Protection Cert establishment and convenience encrypt/decrypt/hash routines

by Christina Fu

This patch provides code that can be shared between: https://pagure.io/dogtagpki/issue/2605 and https://pagure.io/dogtagpki/issue/2604 Note: default is DES3 for now; will switch over to AES when the cmc feature further materializes. thanks, Christina

7 years, 9 months

1
0
0 / 0

[PATCH] 975 Moved default SSL configuration out of PKIConnection.

by Endi Sukma Dewata

To prevent conflicts, the code that configures the default SSL version ranges and ciphers for all SSL sockets created afterwards has been moved out of PKIConnection into the main program (i.e. PKI CLI). Pushed to master under trivial rule. -- Endi S. Dewata

7 years, 9 months

1
0
0 / 0

Re: [Pki-devel] [Freeipa-devel] [TESTING] Please test and add karma to pki-core-10.4.0-1

by Matthew Harmsen

On 03/17/2017 10:02 AM, Lukas Slebodnik wrote: > On (17/03/17 12:14), Martin Babinsky wrote: >> A new update for Dogtag PKI (pki-core-10.4.0-1.fc25) landed it Fedora 25 >> updates-testing yesterday.[1] >> > It was also pushed to fedora26 > https://bodhi.fedoraproject.org/updates/FEDORA-2017-9cc27242c1 > >> I have already provided negative karma as the update broke CA clone deployment >> on FreeIPA replica install. >> >> It would be nice if you could test it and provide +1/-1 ASAP so that we can >> push it out before it hits stable and give Matthew a change to privode fixes. >> > The fastest will be if it will be unpushed by fedora maintainer > Adding mharmsen to CC. > > LS Lukas and Martin, After speaking with some members of the PKI team, I have unpushed both the F25 and F26 builds from Bodhi. The following unresolved issues on cloning were documented in: * dogtagpki Pagure Issue #2336 - IPA Replica CA configuration failed Clone does not have all the required certificates <https://pagure.io/dogtagpki/issue/2336> Was this the same cloning failure that you were seeing? If not, please file a detailed Pagure Issue describing the failure complete with log attachment. As for the vault issue, we may have an idea on this as the code in that area has been changing. Thanks, -- Matt

7 years, 9 months

1
0
0 / 0

[PATCH] 974 Default NSS database for PKI CLI.

by Endi Sukma Dewata

The PKI CLI has been modified to create a default NSS database without a password if there is no existing database at the expected location. Pushed to master under trivial rule. -- Endi S. Dewata

7 years, 9 months

1
0
0 / 0

[PATCH] 973 Added missing Eclipse dependency.

by Endi Sukma Dewata

The Eclipse .classpath file has been modified to include tomcat-coyote.jar to avoid build problem. Pushed to master under trivial rule. -- Endi S. Dewata

7 years, 9 months

1
0
0 / 0

[PATCH] 972 Cleaned up CryptoUtil.setClientCiphers().

by Endi Sukma Dewata

The CryptoUtil.setClientCiphers() has been reformatted to simplify future refactoring. Pushed to master under trivial rule. -- Endi S. Dewata

7 years, 9 months

1
0
0 / 0

[PATCH] 971 Removed duplicate code to configure SSL version ranges.

by Endi Sukma Dewata

The duplicate code for configuring default SSL version ranges has been merged into reusable methods in CryptoUtil. Pushed to master under trivial rule. -- Endi S. Dewata

7 years, 9 months

1
0
0 / 0

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

Pki-devel March 2017