pki.git/base/server/cmsbundle/src/LogMessages.properties, branch master

Ticket#2737 CMC: check HTTPS client authentication cert against CMC signer

2017-06-15T19:03:14+00:00

This patch adds enforcement in CMCUserSignedAuth to make sure SSL client authentication is performed and the authenticated cert matches that of the CMC signing cert.
Some auditing adjustments are also done.

Added SCHEDULE_CRL_GENERATION audit event.

2017-05-26T20:12:48+00:00

A new SCHEDULE_CRL_GENERATION audit event has been added which
will be generated when CRL generation is scheduled manually.

https://pagure.io/dogtagpki/issue/2651

Change-Id: I1e2fc307491e796e50b09550d66e5eba370d090a

Added FULL_CRL_PUBLISHING audit event.

2017-05-26T20:12:48+00:00

A new FULL_CRL_PUBLISHING audit event has been added which will
be generated when full CRL publishing is complete.

https://pagure.io/dogtagpki/issue/2651

Change-Id: I4461b03f4afd300b65e9d12c7d0bfa935b4e7082

Added FULL_CRL_GENERATION audit event.

2017-05-26T20:12:48+00:00

A new FULL_CRL_GENERATION audit event has been added which will
be generated when full CRL generation is complete.

https://pagure.io/dogtagpki/issue/2651

Change-Id: I74b083721e477ad72fe5a787935af617e89a6968

Added DELTA_CRL_PUBLISHING audit event.

2017-05-26T20:12:48+00:00

A new DELTA_CRL_PUBLISHING audit event has been added which will
be generated when delta CRL publishing is complete.

https://pagure.io/dogtagpki/issue/2651

Change-Id: I38f84fc2d00ea57ef13f0ee50998da9239437372

Added DELTA_CRL_GENERATION audit event.

2017-05-26T20:12:47+00:00

A new DELTA_CRL_GENERATION audit event has been added which will
be generated when delta CRL generation is complete.

https://pagure.io/dogtagpki/issue/2651

Change-Id: Ic4759ac2d90b6915443587708292d0f51e11345f

Encapsulate server side keygen audit events

2017-05-25T14:40:47+00:00

This encapsulates key gen events for the token servlets.
Consolidated the success and failure cases.  Note that this
event can likely later be replaced with security_data_keygen
events.  Leaving separate for now.

Change-Id: I6caaeb2231fd2f7410eade03cb5fa93d66444bbf

Encapsulate key status change audit logs

2017-05-25T14:30:12+00:00

Change-Id: I57b30cdff571056d0a95436858308872a8dc007b

Encapsulate symmetric and asymmetric keygen audit events

2017-05-24T18:49:30+00:00

Change-Id: Ifc8d05bd1d2d34bb0ef25877f838731bed58d00e

Make sure archivalID is passed through archival

2017-05-24T15:24:34+00:00

There was some confusion in the previous commit for archival
logging.  The archivalID is the id provided by the CA for the archival
and is its requestID.  This allows the cert request operation
to be tracked through the archival.

Made sure therefore, that we have two fields - one for the archivalID
and one for the requestId (which is the KRA archival request ID)

In addition, some of the archival events occur in the CA component
just before the request id sent to the KRA.  These events will not
be displayed unless the audit event is added to the CA CS.cfg.

Change-Id: I3904d42ae677d5916385e0120f0e25311b4d9d08