May 2018 - Pki-users - Dogtag PKI List Archives

JSS 4.4.4 Release
by Endi Sukma Dewata 29 May '18

29 May '18

Hi, JSS 4.4.4 is now available upstream: https://github.com/dogtagpki/jss/releases/tag/v4.4.4 Fedora 28 builds are available via the following update: https://bodhi.fedoraproject.org/updates/FEDORA-2018-d069c2e1a1 Fedora Rawhide builds are available in Koji. Fedora 27 builds are available in this COPR repository: https://copr.fedorainfracloud.org/coprs/g/pki/10.6/ Thanks. -- Endi S. Dewata

1 0

Dogtag Expertise needed
by G.W. Habraken (Taglio) 15 May '18

15 May '18

My company is working on a customer engagement that includes Dogtag. We are looking for someone with extensive experience with Dogtag to consult with on this project on a part-time basis total (4-8 hrs a week?). Specifically we are looking for extensive experience building the system, integrating with directory service, and making modifications to the CA profile. If you know someone that would be available for that work please let me know directly. Thanks -GW Habraken Taglio LLC, Austin TX

1 0

PKI 10.6.1 Release
by Endi Sukma Dewata 04 May '18

04 May '18

Hi, PKI 10.6.1 is now available upstream: https://github.com/dogtagpki/pki/releases/tag/v10.6.1 Fedora 28 builds are available via the following update: https://bodhi.fedoraproject.org/updates/FEDORA-2018-4f684aab1a Fedora Rawhide builds are available in Koji. Fedora 27 builds are available in this COPR repository: https://copr.fedorainfracloud.org/coprs/g/pki/10.6/ Thanks. -- Endi S. Dewata

1 0

Dogtag: configuring OCSP URI
by mirkt 03 May '18

03 May '18

Hello, I am new to Dogtag. I would like to deploy it as CA for internal services only. Any ideas how to change default OCSP URI for all certificates? I mean not only for issued ones as in here: https://www.redhat.com/archives/pki-users/2015-July/msg00005.html but also for those generated during installation (CA Signing certificate and so on..)? What I want is: Dogtag listening on default ports (8080,8443..) and apache with mod_proxy listening on 80 so I could control (firewall) who can access Dogtag WebUI but allow all OCSP requests.. I need non default OCSP URI (with :8080 part removed) on all certificates.. Any suggestions how could I achieve that? Thank you in advance mirkt

2 2

PKI 10.6.0 and TomcatJSS 7.3.0
by Endi Sukma Dewata 02 May '18

02 May '18

Hi, PKI 10.6.0 and TomcatJSS 7.3.0 has officially been released upstream and in Fedora 28: https://github.com/dogtagpki/pki/releases/tag/v10.6.0 https://github.com/dogtagpki/tomcatjss/releases/tag/v7.3.0 Please note that there are no changes since the last Release Candidate. Thanks for your contributions! -- Endi S. Dewata

2 1