12:55 a.m.
The TPS connector docs in the CS.cfg have been converted into
pki-tps-connector manual page. The build scripts have been updated
accordingly.
Ticket #890, #950.
--
Endi S. Dewata
11:18 a.m.
1. Under CA connector,
"+This property contains the URI to contact TKS for the operation
<op>."
I think you meant "...contact CA..." not "...contact TKS..."
2. For CA connector, I should have provided instruction on how to
configure revocation routing.
a. add past signing CA's cert nickname as such (the CA's signing
cert should already be in the nss db and trusted):
tps.connector.ca<n>.caNickname=<signing ca nickname>
b. when the first revocation is triggered, you might notice a new
parameter added to the config, which is the automated generated Base64
encoded CA SKI. e.g.
tps.connector.ca1.caSKI=a/OJajZmIucFjKQa4rJxvvUZmBo=
3. You probably want to remove the old conn stuff: conn.xxx
4. Maybe create a separate ticket...per discussion on irc, we want to
create a "main man page" that lists out all man page key words one can
man for our product. This is so that people know where to look for info
now that they are gone from CS.cfg. Once created, we should put a one
line that points them to the main man page to look for info, perhaps in
CS.cfg's, admin ui's, cli's etc.
thanks,
Christina
On 04/23/2014 10:55 PM, Endi Sukma Dewata wrote:
The TPS connector docs in the CS.cfg have been converted into
pki-tps-connector manual page. The build scripts have been updated
accordingly.
Ticket #890, #950.
_______________________________________________
Pki-devel mailing list
Pki-devel(a)redhat.com
https://www.redhat.com/mailman/listinfo/pki-devel
2:42 p.m.
Thanks for the comments. Please find the attached revised patch.
I changed the man page name from pki-tps-connector to
pki-tps-connector-config to avoid a possible conflict with the man page
for pki-tps-connector CLI. Right now the CLI is called "pki
tps-connection" but I'm planning to change it to "pki tps-connector"
for
consistency.
Please see the comments below.
On 4/24/2014 11:18 AM, Christina Fu wrote:
1. Under CA connector,
"+This property contains the URI to contact TKS for the operation
<op>."
I think you meant "...contact CA..." not "...contact TKS..."
Fixed.
2. For CA connector, I should have provided instruction on how to
configure revocation routing.
a. add past signing CA's cert nickname as such (the CA's signing
cert should already be in the nss db and trusted):
tps.connector.ca<n>.caNickname=<signing ca nickname>
b. when the first revocation is triggered, you might notice a new
parameter added to the config, which is the automated generated Base64
encoded CA SKI. e.g.
tps.connector.ca1.caSKI=a/OJajZmIucFjKQa4rJxvvUZmBo=
Do you mind writing something that I can copy & paste it into the man
page? I don't think I'm familiar enough with it to write a proper
documentation. Or if you prefer you could send a separate patch on top
of this patch.
3. You probably want to remove the old conn stuff: conn.xxx
OK. I'll do that in patch #476 because that's where we remove the old
code that refers to conn.xxx.
4. Maybe create a separate ticket...per discussion on irc, we want
to
create a "main man page" that lists out all man page key words one can
man for our product. This is so that people know where to look for info
now that they are gone from CS.cfg. Once created, we should put a one
line that points them to the main man page to look for info, perhaps in
CS.cfg's, admin ui's, cli's etc.
I created these tickets:
https://fedorahosted.org/pki/ticket/976
https://fedorahosted.org/pki/ticket/975
Also, as mentioned over IRC I created a list of manual pages:
http://pki.fedoraproject.org/wiki/Dogtag_10_Manual_Pages
To avoid confusion I'm going to add the Dogtag versions in which the
pages were added.
thanks,
Christina
--
Endi S. Dewata
2:50 p.m.
On 4/24/2014 2:42 PM, Endi Sukma Dewata wrote:
> 3. You probably want to remove the old conn stuff: conn.xxx
OK. I'll do that in patch #476 because that's where we remove the old
code that refers to conn.xxx.
Actually I don't see any conn.xxx properties in tps-tomcat's CS.cfg.
There are conn.xxx properties in the old TPS and RA, but I don't think
we should remove them because I suppose there are legacy codes that use
them. So the patch #476 is unchanged.
--
Endi S. Dewata
12:21 p.m.
On 4/24/2014 2:42 PM, Endi Sukma Dewata wrote:
Thanks for the comments. Please find the attached revised patch.
I changed the man page name from pki-tps-connector to
pki-tps-connector-config to avoid a possible conflict with the man page
for pki-tps-connector CLI. Right now the CLI is called "pki
tps-connection" but I'm planning to change it to "pki tps-connector"
for
consistency.
As discussed on IRC, I've renamed it back to pki-tps-connector because
there won't be a conflict. CLI man pages are in section 1 and config man
pages are in section 5.
http://pki.fedoraproject.org/wiki/Dogtag_10_Manual_Pages
ACKed by Christina. Pushed to master.
--
Endi S. Dewata
3909
days inactive
3910
days old
4 comments
2 participants
participants (2)
-
Christina Fu -
Endi Sukma Dewata