pki.git/base/ca/shared/conf, branch alee-76

Provide option to install, rather than replicate schema in a clone

2012-10-22T14:37:47+00:00

Reorder VLV indexing for clones to avoid errors

2012-10-22T14:36:50+00:00

Using RPM version number in CMake.

2012-10-01T18:15:44+00:00

The RPM spec files have been modified to pass the full RPM version
number to CMake. The version number contains the product version
number, release number, milestone, and platform. The CMake scritps
will parse and use this version number to generate Java manifest
files. The product version number will be used as the specification
version and full version number will be used as the implementation
version.

Ticket #339

Enabled SSL authenticator and PKI realm.

2012-08-03T22:07:20+00:00

The SSL connection has been configured with clientAuth="want" so
users can choose whether to provide a client certificate or username
and password. The authentication and authorization will be handled
by the SSL authenticator with fallback and PKI realm. New access
control rules have been added for users, groups, and certs REST
services.

Ticket #107

ECC directory enrollment profile

2012-08-02T22:48:56+00:00

This patch adds ECC directory enrollment profile.

Bug: 748514.

Replaced two bad "[PKI_SUBSYSTEM_DIR]" slot substitutions with original

2012-07-20T01:10:51+00:00

hard-coded "ca/" so that this code works with BOTH 'pkicreate' AND 'pkispawn'.

PKI Deployment Scriptlets

2012-07-19T17:15:56+00:00

* Integration of Tomcat 7
* Introduction of dependency upon tomcatjss 7.0
* Removal of http filtering configuration mechanisms
* Introduction of additional slot substitution to
  support revised filesystem layout
* Addition of 'pkiuser' uid:gid creation methods
* Inclusion of per instance '*.profile' files
* Introduction of configurable 'configurationRoot'
  parameter
* Introduction of default configuration of 'log4j'
  mechanism (alee)
* Modify web.xml to use new Application classes to
  bootstrap servers (alee)
* Introduction of "Wrapper" logic to support
  Tomcat 6 --> Tomcat 7 API change (jmagne)
* Added jython helper function to allow attaching
  a remote java debugger (e. g. - eclipse)

Added cert revocation REST service.

2012-07-11T14:21:09+00:00

The cert revocation REST service is based on DoRevoke and DoUnrevoke servlets.
It provides an interface to manage certificate revocation.

Ticket #161

Adding restful interface to create certificate requests and issue certificates.

2012-07-03T17:58:45+00:00

Refactored ProfileSubmitServlet to make the flow clearer.  Both the legacy servlets
and the new RESTful servlets use common ProfileProcessor objects that contain the main
business logic, so that the amount of duplicated code is minimized.

Refactored ProfileProcessServlet to use the new  common classes.
Addressed review comments. Removed an unneeded class and reverted some unneeded jaxb
annotations.  Added factory methods.

PKI Deployment Scriptlets

2012-05-25T21:59:48+00:00

* Integration of Tomcat 7
* Addition of centralized 'pki-tomcatd' systemd functionality to the
  PKI Deployment strategy
* Removal of 'pki_flavor' attribute