<feed xmlns='http://www.w3.org/2005/Atom'>
<title>pki.git, branch ticket-403</title>
<subtitle>Unnamed repository; edit this file 'description' to name the repository.</subtitle>
<link rel='alternate' type='text/html' href='https://fedorapeople.org/cgit/edewata/public_git/pki.git/'/>
<entry>
<title>Replaced links of scriptlets with lists.</title>
<updated>2012-11-30T20:14:47+00:00</updated>
<author>
<name>Endi Sukma Dewata</name>
<email>edewata@redhat.com</email>
</author>
<published>2012-11-28T23:59:06+00:00</published>
<link rel='alternate' type='text/html' href='https://fedorapeople.org/cgit/edewata/public_git/pki.git/commit/?id=4d650eca1d326a1a2e64a03d2472f389a075786a'/>
<id>4d650eca1d326a1a2e64a03d2472f389a075786a</id>
<content type='text'>
Previously the deployment tools used symbolic links to determine the
scriplets to execute and their order. The code has been changed such
that now the scriplets are listed as parameters (spawn_scriplets and
destroy_scriplets) in the configuration file.

Ticket #403
</content>
<content type='xhtml'>
<div xmlns='http://www.w3.org/1999/xhtml'>
<pre>
Previously the deployment tools used symbolic links to determine the
scriplets to execute and their order. The code has been changed such
that now the scriplets are listed as parameters (spawn_scriplets and
destroy_scriplets) in the configuration file.

Ticket #403
</pre>
</div>
</content>
</entry>
<entry>
<title>Simplified the configuration file using defaults.</title>
<updated>2012-11-30T20:12:27+00:00</updated>
<author>
<name>Endi Sukma Dewata</name>
<email>edewata@redhat.com</email>
</author>
<published>2012-11-28T18:12:24+00:00</published>
<link rel='alternate' type='text/html' href='https://fedorapeople.org/cgit/edewata/public_git/pki.git/commit/?id=9c879d5feea84bb90faf77c0c68fd57325c5b5b5'/>
<id>9c879d5feea84bb90faf77c0c68fd57325c5b5b5</id>
<content type='text'>
Previously to create a subsystem the admin would have to copy the
entire default deployment configuration, which contains many
parameters, and then customize it. Now the deployment code has been
changed such that the default config file will be used to provide
the default values, so the admin will only need to provide the
non-default parameters, thus reducing the size of the file.

Sample configuration files are provided in /usr/share/pki/
deployment/config.

Ticket #399
</content>
<content type='xhtml'>
<div xmlns='http://www.w3.org/1999/xhtml'>
<pre>
Previously to create a subsystem the admin would have to copy the
entire default deployment configuration, which contains many
parameters, and then customize it. Now the deployment code has been
changed such that the default config file will be used to provide
the default values, so the admin will only need to provide the
non-default parameters, thus reducing the size of the file.

Sample configuration files are provided in /usr/share/pki/
deployment/config.

Ticket #399
</pre>
</div>
</content>
</entry>
<entry>
<title>Reorganized sensitive parameters.</title>
<updated>2012-11-30T20:10:31+00:00</updated>
<author>
<name>Endi Sukma Dewata</name>
<email>edewata@redhat.com</email>
</author>
<published>2012-11-28T14:27:16+00:00</published>
<link rel='alternate' type='text/html' href='https://fedorapeople.org/cgit/edewata/public_git/pki.git/commit/?id=719478fd34077fcbf1b6c6ad201c36ff57983490'/>
<id>719478fd34077fcbf1b6c6ad201c36ff57983490</id>
<content type='text'>
Previously sensitive parameters are stored in the Sensitive section in
the configuration file, separate from the hierarchical structure used
by non-sensitive parameters. To allow defining multiple subsystems in
a single configuration file the sensitive and non-sensitive parameters
have been reorganized into the same hierarchical structure.

To maintain the security a new meta-parameter has been added to list
all sensitive parameter names. This way the deployment code will know
whether a parameter is sensitive, which then will mask the value before
displaying it to the screen or storing it in a log file.

Ticket #399
</content>
<content type='xhtml'>
<div xmlns='http://www.w3.org/1999/xhtml'>
<pre>
Previously sensitive parameters are stored in the Sensitive section in
the configuration file, separate from the hierarchical structure used
by non-sensitive parameters. To allow defining multiple subsystems in
a single configuration file the sensitive and non-sensitive parameters
have been reorganized into the same hierarchical structure.

To maintain the security a new meta-parameter has been added to list
all sensitive parameter names. This way the deployment code will know
whether a parameter is sensitive, which then will mask the value before
displaying it to the screen or storing it in a log file.

Ticket #399
</pre>
</div>
</content>
</entry>
<entry>
<title>Fixed issuedOn parameters for cert-find.</title>
<updated>2012-11-30T20:02:06+00:00</updated>
<author>
<name>Endi Sukma Dewata</name>
<email>edewata@redhat.com</email>
</author>
<published>2012-11-16T15:13:33+00:00</published>
<link rel='alternate' type='text/html' href='https://fedorapeople.org/cgit/edewata/public_git/pki.git/commit/?id=cef7a7704f9f4b48c0a9b242fabd3a919f2068d5'/>
<id>cef7a7704f9f4b48c0a9b242fabd3a919f2068d5</id>
<content type='text'>
The CertSearchRequest has been modified to fix the infinite loop
in getIssuedOnTo(). The CertFindCLI has been modified to accept
dates with format YYYY-MM-DD instead of epoch time.

Ticket #416
</content>
<content type='xhtml'>
<div xmlns='http://www.w3.org/1999/xhtml'>
<pre>
The CertSearchRequest has been modified to fix the infinite loop
in getIssuedOnTo(). The CertFindCLI has been modified to accept
dates with format YYYY-MM-DD instead of epoch time.

Ticket #416
</pre>
</div>
</content>
</entry>
<entry>
<title>Fixed default security domain user.</title>
<updated>2012-11-30T20:01:55+00:00</updated>
<author>
<name>Endi Sukma Dewata</name>
<email>edewata@redhat.com</email>
</author>
<published>2012-11-14T16:11:13+00:00</published>
<link rel='alternate' type='text/html' href='https://fedorapeople.org/cgit/edewata/public_git/pki.git/commit/?id=ba1e743ed6903d063543c817abe6543c8bae74ba'/>
<id>ba1e743ed6903d063543c817abe6543c8bae74ba</id>
<content type='text'>
The deployment code has been modified such that if the security
domain user is not specified it will use the CA admin uid, or
Common uid, if it is defined. Otherwise it will use the default
"caadmin".

Ticket #399
</content>
<content type='xhtml'>
<div xmlns='http://www.w3.org/1999/xhtml'>
<pre>
The deployment code has been modified such that if the security
domain user is not specified it will use the CA admin uid, or
Common uid, if it is defined. Otherwise it will use the default
"caadmin".

Ticket #399
</pre>
</div>
</content>
</entry>
<entry>
<title>Refactored pkiparser.py into PKIConfigParser.</title>
<updated>2012-11-30T20:01:47+00:00</updated>
<author>
<name>Endi Sukma Dewata</name>
<email>edewata@redhat.com</email>
</author>
<published>2012-11-30T18:45:50+00:00</published>
<link rel='alternate' type='text/html' href='https://fedorapeople.org/cgit/edewata/public_git/pki.git/commit/?id=68751fb281477190cad960d2ef4fce2d15e00798'/>
<id>68751fb281477190cad960d2ef4fce2d15e00798</id>
<content type='text'>
The code in pkiparser.py has been converted into PKIConfigParser
class to facilitate further improvements.

Ticket #399
</content>
<content type='xhtml'>
<div xmlns='http://www.w3.org/1999/xhtml'>
<pre>
The code in pkiparser.py has been converted into PKIConfigParser
class to facilitate further improvements.

Ticket #399
</pre>
</div>
</content>
</entry>
<entry>
<title>Fix for improper crl retrieval from CA.</title>
<updated>2012-11-21T17:16:37+00:00</updated>
<author>
<name>Abhishek Koneru</name>
<email>akoneru@redhat.com</email>
</author>
<published>2012-11-20T02:20:37+00:00</published>
<link rel='alternate' type='text/html' href='https://fedorapeople.org/cgit/edewata/public_git/pki.git/commit/?id=066789642947768eceb024a4064af88efeed24b0'/>
<id>066789642947768eceb024a4064af88efeed24b0</id>
<content type='text'>
</content>
<content type='xhtml'>
<div xmlns='http://www.w3.org/1999/xhtml'>
<pre>
</pre>
</div>
</content>
</entry>
<entry>
<title>Misc changes to get rhel 7 build to work</title>
<updated>2012-11-21T15:47:50+00:00</updated>
<author>
<name>Ade Lee</name>
<email>alee@redhat.com</email>
</author>
<published>2012-11-21T15:16:04+00:00</published>
<link rel='alternate' type='text/html' href='https://fedorapeople.org/cgit/edewata/public_git/pki.git/commit/?id=871b4423babc140d984d4b49aa380710cfcaf72a'/>
<id>871b4423babc140d984d4b49aa380710cfcaf72a</id>
<content type='text'>
1. Modified cmake dependency
2. Corrected conditionals in spec file
3. Added paths for resteasy-base
4. Added paths to policy for resteasy-base
</content>
<content type='xhtml'>
<div xmlns='http://www.w3.org/1999/xhtml'>
<pre>
1. Modified cmake dependency
2. Corrected conditionals in spec file
3. Added paths for resteasy-base
4. Added paths to policy for resteasy-base
</pre>
</div>
</content>
</entry>
<entry>
<title>Link to resteasy-base on rhel systems when running pkispawn</title>
<updated>2012-11-21T05:04:32+00:00</updated>
<author>
<name>Ade Lee</name>
<email>alee@redhat.com</email>
</author>
<published>2012-11-21T04:34:32+00:00</published>
<link rel='alternate' type='text/html' href='https://fedorapeople.org/cgit/edewata/public_git/pki.git/commit/?id=40e58f937d49f1a0029a226ab714cb54f12a9239'/>
<id>40e58f937d49f1a0029a226ab714cb54f12a9239</id>
<content type='text'>
</content>
<content type='xhtml'>
<div xmlns='http://www.w3.org/1999/xhtml'>
<pre>
</pre>
</div>
</content>
</entry>
<entry>
<title>Removed obsolete cmake modules, updated spec files</title>
<updated>2012-11-20T20:05:24+00:00</updated>
<author>
<name>Ade Lee</name>
<email>alee@redhat.com</email>
</author>
<published>2012-11-20T19:15:36+00:00</published>
<link rel='alternate' type='text/html' href='https://fedorapeople.org/cgit/edewata/public_git/pki.git/commit/?id=96af71db61acac4adb3a1c8a73391467b3572a49'/>
<id>96af71db61acac4adb3a1c8a73391467b3572a49</id>
<content type='text'>
</content>
<content type='xhtml'>
<div xmlns='http://www.w3.org/1999/xhtml'>
<pre>
</pre>
</div>
</content>
</entry>
</feed>
