pki.git/base/server/cms/src, branch master

Fixed CertUtil.updateLocalRequest().

2017-07-11T04:50:50+00:00

The CertUtil.updateLocalRequest() has been modified to return
silently if the certificate does not have a corresponding request
record.

https://pagure.io/dogtagpki/issue/2280

Change-Id: I0d225a6db84d2d719091dbd84ee76b73bfb4408c

Refactored SystemConfigService.processCert().

2017-07-08T04:59:43+00:00

The code in SystemConfigService.processCert() that handles external
cert has been reorganized for clarity.

https://pagure.io/dogtagpki/issue/2280

Change-Id: Ia1800cc6560dce1757959bea9e352a2e6d30307e

Refactored SystemConfigService.processKeyPair().

2017-07-08T04:59:31+00:00

The code in SystemConfigService.processCert() that loads or
generates key pair has been moved into processKeyPair().

The code that sets key pair properties in createECCKeyPair() and
createRSAKeyPair() has been replaced with storeKeyPair().

The processCert() has been modified to return a Cert object.

Some debug messages have been added for clarity.

https://pagure.io/dogtagpki/issue/2280

Change-Id: Ica16c7ce4f33fb23df2813a8b65d66fc2d4ea198

Fixed error message in SystemConfigService.processCerts().

2017-07-08T02:53:13+00:00

The exception handler in SystemConfigService.processCerts() has
been removed since it's redundant and generates misleading error
message.

https://pagure.io/dogtagpki/issue/2280

Change-Id: I3aa4f0414519a7cd2c53481663f4880c5c1dafd0

Refactored ConfigurationUtils.updateCloneConfig().

2017-07-08T02:52:44+00:00

The ConfigurationUtils.updateCloneConfig() invocation has been
modified such that it will only be executed once.

https://pagure.io/dogtagpki/issue/2280

Change-Id: I1d42acb8cf7c7ffedcd109fcd5252a03fb9622e7

Refactored ConfigurationUtils.updateServerCertNickConf().

2017-07-08T02:52:20+00:00

The code that updates serverCertNick.conf has been moved into
ConfigurationUtils.updateServerCertNickConf() and will only be
executed once.

https://pagure.io/dogtagpki/issue/2280

Change-Id: Iaae4429724ece683939aea8defe6fceeca237c4b

Ticket #2757 CMC enrollment profiles for system certificates

2017-07-07T23:51:22+00:00

This patch supports CMC-based system certificate requests.

This patch contains the following:
* The code in CMCAuth (agent-based) to check ssl client auth cert against the CMC signing cert
* The cmc-based system enrollment profiles:
caCMCauditSigningCert.cfg
caCMCcaCert.cfg
caCMCkraStorageCert.cfg
caCMCkraTransportCert.cfg
caCMCocspCert.cfg
caCMCserverCert.cfg
caCMCsubsystemCert.cfg
* new URI's in web.xml as new access points

Usage example can be found here:
http://pki.fedoraproject.org/wiki/PKI_10.4_CMC_Feature_Update_(RFC5272)#Examples_.28System_Certificates.29

Refactored CertUtil.updateLocalRequest().

2017-07-06T23:36:57+00:00

The CertUtil.updateLocalRequest() has been modified to no longer
ignore exceptions.

Change-Id: I57907a54f51f65369a062dfc396741d87874660c

Refactored CertUtil.createLocalRequest().

2017-07-06T23:36:49+00:00

The code that sets the certificate request extra data has been
moved into CertUtil.createLocalRequest().

The incorrect profile ID in subsystemCert.profile has been fixed.

https://pagure.io/dogtagpki/issue/2280

Change-Id: Ic76ac3dfcbf0c4ab95abea0680697d87f00f292b

Refactored ConfigurationUtils.handleLocalCert().

2017-07-06T23:36:41+00:00

The code for creating and importing local cert into NSS database
has been moved into ConfigurationUtils.handleLocalCert().

https://pagure.io/dogtagpki/issue/2280

Change-Id: Idac7bc3e08e95f94fe50c417898ef12b2288d17c