pki.git/base/deploy, branch ticket-398

Move default location for client certificate database

2012-11-09T18:48:50+00:00

* TRAC Ticket #395 - Dogtag 10: Add a Tomcat 7 runtime requirement to
  'pki-server'
* TRAC Ticket #398 - Move default location for client certificate database

Enable Subordinate CA

2012-11-08T17:57:21+00:00

* TRAC Ticket #185 - Dogtag 10: Update PKI Deployment to handle subordinate CA

Merged theme files.

2012-11-06T20:43:41+00:00

Currently the theme files are copied into each subsystem during
deployment creating duplicates. To reduce the problem the files
should be combined into a common folder /pki.

The process will be done over several patches. Initially this patch
will copy the images and CSS files into /pki/images and /pki/css.
Subsequent patches will update references to these files to the new
location. When it's done, the files no longer need to be copied
into each subsystem.

Ticket #328

Convert admin cert from ascii to binary before importing into certdb

2012-11-05T03:13:21+00:00

Sometimes importing the ascii admin cert into th client certdb fails.
The binary always appears to work though.

Set paths for default instance

2012-11-05T03:12:57+00:00

With this patch, it will be possible to install a default instance
simply by adding the passwords in the pkideployment.cfg.  This file
can then be used without additional alteration to add subsystems to the
same instance, by re-running pkispawn against the config file.

The patch makes sure that cert nicknames, database and baseDN , admin users
and client db are unique per subsystem.  An option is added to reuse the
existing server cert generated by the first subsystem and copy the
required data to all subsystems.

Ticket 379, 385

Allow a PKI instance to be installed/configured independently

2012-10-30T14:56:06+00:00

* TRAC Ticket #286 - Dogtag 10: Create parameter for optionally allowing
  a user to skip configuration . . .

Enabled Tomcat security manager.

2012-10-27T04:32:31+00:00

The tomcat.conf and the template deployment configuration have been
modified to enable the security manager. The operations script has
been modified to generate a new catalina.policy from the standard
Tomcat policy, the standard PKI policy and the custom policy every
time the instance is started.

The current catalina.policy has been changed to store a header for
the dynamically generated catalina.policy. A new pki.policy has been
added to store the default PKI security policy. An empty
custom.policy has been added to store policy customization.

Ticket #223

Provide option to install, rather than replicate schema in a clone

2012-10-22T16:03:39+00:00

Added pki_tomcat_cert_t type and interface to access it

2012-10-10T04:34:12+00:00

Added permissions to certmonger to access the certdb.  Also added
some missing selinux permissions for pki_tomcat_t

Renamed "shared" folder to "server".

2012-10-08T03:53:23+00:00

The "shared" folder in /usr/share/pki has been renamed
to "server" since it contains only server files.

Ticket #353