pki.git/base/deploy/src/scriptlets/pkimessages.py, branch ticket-422

Interpolation correction patch based on review comments

2012-12-04T17:11:53+00:00

Simplified the configuration file using defaults.

2012-11-30T21:03:07+00:00

Previously to create a subsystem the admin would have to copy the
entire default deployment configuration, which contains many
parameters, and then customize it. Now the deployment code has been
changed such that the default config file will be used to provide
the default values, so the admin will only need to provide the
non-default parameters, thus reducing the size of the file.

Sample configuration files are provided in /usr/share/pki/
deployment/config.

Ticket #399

Reorganized sensitive parameters.

2012-11-30T21:02:48+00:00

Previously sensitive parameters are stored in the Sensitive section in
the configuration file, separate from the hierarchical structure used
by non-sensitive parameters. To allow defining multiple subsystems in
a single configuration file the sensitive and non-sensitive parameters
have been reorganized into the same hierarchical structure.

To maintain the security a new meta-parameter has been added to list
all sensitive parameter names. This way the deployment code will know
whether a parameter is sensitive, which then will mask the value before
displaying it to the screen or storing it in a log file.

Ticket #399

Enable Subordinate CA

2012-11-08T17:57:21+00:00

* TRAC Ticket #185 - Dogtag 10: Update PKI Deployment to handle subordinate CA

Convert admin cert from ascii to binary before importing into certdb

2012-11-05T03:13:21+00:00

Sometimes importing the ascii admin cert into th client certdb fails.
The binary always appears to work though.

Allow a PKI instance to be installed/configured independently

2012-10-30T14:56:06+00:00

* TRAC Ticket #286 - Dogtag 10: Create parameter for optionally allowing
  a user to skip configuration . . .

Added package checking for pkispawn.

2012-10-01T16:04:10+00:00

The pkispawn has been modified such that it will check whether
the package for the subsystem being created has been installed.

Ticket #332

Moved webapp deployment code into pkispawn.

2012-09-05T15:08:41+00:00

Previously the WAR files were generated at build time, so it would
include theme files that were installed on the build machine.

The code has been changed such that instead of generating WAR files
pkispawn will copy the webapp files from the theme folders and combine
them with subsystem webapp files at deployment time. This way it will
use the actual theme files installed on the deployment machine.

Ticket #89

PKI Deployment Scriptlets

2012-08-17T22:07:19+00:00

* TRAC Ticket #266 - for non-master CA subsystems, pkidestroy needs to
  contact the security domain to update the domain
* Made Fedora 17 rely upon tomcatjss 7.0.0 or later
* Changed Dogtag 10 build-time and runtime requirements for 'pki-deploy'
* Altered PKI Package Dependency Chain (top-to-bottom):
  pki-ca, pki-kra, pki-ocsp, pki-tks --> pki-deploy --> pki-common
* Changed TPS to require a build-time dependency of 'httpd-devel >= 2.4.2'
* Clarified RPM build script's usage message

PKI Deployment Scriptlets

2012-08-02T17:43:30+00:00

* PKI TRAC Ticket #279 - Dogtag 10: Fix remaining 'cloning' issues in
  'pkispawn' . . .
* PKI TRAC Ticket #280 - Dogtag 10: Fix remaining issues in 'pkidestroy'
  related to deletion of more than one instance . . .
* PKI TRAC Ticket #281 - Dogtag 10: Fix 'pkidaemon'/'operations' issue to
  handle individual instance . . .