pki.git/base/common/share/etc, branch master

Enabling all subsystems on startup.

2017-05-23T19:03:20+00:00

The operations script has been modified to enable all subsystems
on startup by default. If the selftest fails, the subsystem will
be shutdown again automatically as before. A pki.conf option has
been added to configure this behavior.

https://pagure.io/dogtagpki/issue/2699

Change-Id: Iaf367ba2d88d73f377662eee5eafbb99e088ae50

Change CRMFPopClient to use AES-KeyWrap with padding

2017-03-24T20:37:16+00:00

Also made a couple of small changes to WrappingParams.
* Set the wrapIV to null when AES KeyWrap is used.  Trying to unpack
  the PKIArchiveOptions package with this IV set to null fails.
* removed superfluous this modifiers.

Added a parameter KEY_WRAP_PARAMETER_SET which is set in /etc/pki/pki.conf.
If this parameter is set to 0, we will use the old DES3 algorithms.  This
can be set by clients talking to old servers.

CRMFPopClient has the ability to automatically submit requests to
a CA.  In this case, we shouldcontact the server and determine the
version using InfoClient, and choose the algorithm accordingly.
We will implement this in a separate patch.

Change-Id: Ib4a99545cb59b62a96c272311595e96dda10979e

Added support for disabling SSL ciphers in pki.conf.

2017-03-21T03:08:57+00:00

The CryptoUtil.setSSLCiphers() has been modified to support a "-"
sign in front of the cipher name or ID to disable the cipher.

Added support for hex cipher IDs in pki.conf.

2017-03-21T03:08:49+00:00

The CryptoUtil.setSSLCipher() has been modified to support ciphers
specified using hex ID.

Added pki.conf parameter for default SSL ciphers.

2017-03-19T21:43:32+00:00

A new parameter has been added to pki.conf to enable/disable the
default SSL ciphers for PKI CLI.

Added pki.conf parameter for SSL ciphers.

2017-03-19T21:40:45+00:00

A new parameter has been added to pki.conf to configure the SSL
ciphers used by PKI CLI in addition to the default ciphers.

Added configuration parameters for SSL version ranges.

2017-03-19T18:31:21+00:00

The hard-coded SSL version ranges in PKI CLI have been converted
into configurable parameters in the pki.conf.

Exporting environment variables for PKI client.

2017-03-16T21:58:50+00:00

The default pki.conf has been modified to export the environment
variables such that they can be used by PKI client.

Added man pages for logging configuration.

2016-11-18T05:53:37+00:00

New man pages have been added for the common and server logging
configurations.

https://fedorahosted.org/pki/ticket/1897

Updated logging.properties.

2016-11-18T01:41:31+00:00

To reduce maintenance the logging.properties is no longer copied
into the instance folder during deployment. Instead, a link will
be created in /etc/pki/ pointing to the default file
in /usr/share/pki/server/conf.

The default logging.properties has been updated to only log
messages with level WARNING or higher on the console.

https://fedorahosted.org/pki/ticket/1897