Please review the attached patch for the following RHCS 8.1 bug:
* *Bugzilla Bug #979559*
<
https://bugzilla.redhat.com/show_bug.cgi?id=979559>-Parameter
--ca_domain_url should be optional
This bug addresses the problem of attempting to configure an instance
using a version of pki-silent which contains the new code with expanded
parameters while using an old template from a previous version of
pki-silent which did not contain these parameters.
Tested by installing and successfully configuring a CA, KRA, TKS, and
TPS using legacy templates as well as successfully configuring a CA,
KRA, TKS, and TPS using the new templates.
The attached code was revised to exclude the DRM/TKS agent hostname:port
and provide more verbose help messages regarding the optional new URL
parameters.
For readability sake, the new URL help messages follow:
# pkisilent ConfigureCA -help | grep _url
-ca_domain_url <string> CA Subject Names Panel -
'https://<ca_ee_hostname>:<ca_ee_port>' URL to EE CA used to
Issue
Certificates for Creation of this CA Instance (optional but
recommended for IP Port Separation)
# pkisilent ConfigureDRM -help | grep _url
-ca_domain_url <string> DRM Subject Names Panel -
'https://<ca_ee_hostname>:<ca_ee_port>' URL to EE CA used to
Issue
Certificates for Creation of this DRM Instance (optional but
recommended for IP Port Separation)
# pkisilent ConfigureOCSP -help | grep _url
-ca_domain_url <string> OCSP Subject Names Panel -
'https://<ca_ee_hostname>:<ca_ee_port>' URL to EE CA used to
Issue
Certificates for Creation of this OCSP Instance (optional but
recommended for IP Port Separation)
# pkisilent ConfigureTKS -help | grep _url
-ca_domain_url <string> TKS Subject Names Panel -
'https://<ca_ee_hostname>:<ca_ee_port>' URL to EE CA used to
Issue
Certificates for Creation of this TKS Instance (optional but
recommended for IP Port Separation)
# pkisilent ConfigureRA -help | grep _url
-ca_issuance_url <string> CA Choice Panel -
'https://<ca_ee_hostname>:<ca_ee_port>' URL to EE CA used to
Issue
Certificates (optional but recommended if used with IP Port
Separated CA)
-ca_domain_url <string> RA Subject Names Panel -
'https://<ca_ee_hostname>:<ca_ee_port>' URL to EE CA used to
Issue
Certificates for Creation of this RA Instance (optional but
recommended if used with IP Port Separated CA)
# pkisilent ConfigureTPS -help | grep _url
-ca_issuance_url <string> CA Choice Panel -
'https://<ca_ee_hostname>:<ca_ee_port>' URL to EE CA registered
in
this security domain used to Issue Certificates for use by an ESC
(optional but recommended if used with IP Port Separated CA)
-tks_key_management_url <string> TKS Choice Panel -
'https://<tks_agent_hostname>:<tks_agent_port>' URL to Agent TKS
used for Key Management (optional but recommended if used with IP
Port Separated TKS)
-drm_server_side_keygen_url <string> DRM Choice Panel -
'https://<drm_agent_hostname>:<drm_agent_port>' URL to Agent DRM
used for Server-Side Keygen (optional but recommended if used with
IP Port Separated DRM)
-ca_domain_url <string> TPS Subject Names Panel -
'https://<ca_ee_hostname>:<ca_ee_port>' URL to EE CA used to
Issue
Certificates for Creation of this TPS Instance (optional but
recommended if used with IP Port Separated CA)
# pkisilent ConfigureSubCA -help | grep _url
-ca_domain_url <string> SubCA Subject Names Panel -
'https://<ca_ee_hostname>:<ca_ee_port>' URL to EE CA used to
Issue
Certificates for Creation of this SubCA Instance (optional but
recommended for IP Port Separation)