pki.git/base/server/cmsbundle/src/UserMessages.properties, branch master

Fixed error message on invalid log type.

2017-06-27T17:38:50+00:00

To help troubleshooting the error message on invalid log type has
been modified to include the invalid value.

https://pagure.io/dogtagpki/issue/2689

Change-Id: Ie245bd9e3a3925979af4708fa911697a9746e54b

Ticket #2616 CMC: id-cmc-statusInfo ==> id-cmc-statusInfoV2

2017-06-23T17:07:40+00:00

This patch contains the following update:
* Structurely, CMCStatusInfo to CMCStatusInfoV2 update; no extendedFailInfo has been added at this point
* In case of EncryptedPOP, instead of returning with CMCStatus pending where
  PendInfo contains the requestID, it now returns CMCStatus failed whith
  responseInfo control contains the requestID. On the client side, CMCRequest
  now processes the responseInfo and returns the DecryptedPOP with requestID in
  the regInfo control. CMCResponse has been updated to handle the new controls
  as well.
* A number of fail info codes are now being supported by the server to add
  clarity to CMC failed status, including:
  badMessageCheck, badRequest, unsuportedExt, badIdentity, popRequired, and popFailed.

Ticket #2717 CMC user-signed enrollment request

2017-04-29T02:56:09+00:00

This patch provides implementation that allows user-signed CMC requests
to be processed; The resulting certificate will bear the same subjectDN
as that of the signing cert;
The new uri to access is /ca/ee/ca/profileSubmitUserSignedCMCFull
where the new profile is to be used: caFullCMCUserSignedCert.cfg
which utilizes the new authentication plugin: CMCUserSignedAuth
and new profile default plugin: CMCUserSignedSubjectNameDefault
and new profile constraint plugin: CMCUserSignedSubjectNameConstraint

Ticket #2614 CMC: id-cmc-popLinkWitnessV2 feature implementation This patch provides the feature for CMC on handling id-cmc-popLinkWitnessV2

2017-04-14T01:32:50+00:00

Fix error output when request is rejected

2016-05-10T01:47:42+00:00

With this fix, error messages are returned to the user when
a request is rejected - either in the UI or from the pki CLI.

Trac Ticket 1247 (amongst others)

Add realm to requests coming in from CA

2016-05-10T01:47:11+00:00

Requests to the KRA through the CA-KRA connector use the Enrollment
Service.  This has been modified to read and store any realm passed in.
The realm can be added to the request by havibg the admin add
a AuthzRealmDefault and AuthzRealmConstraint in a profile.

At this point, all the constraint does is verify that the realm is
one of a specified list of realms.  More verification will be added
in a subsequent patch.

No attempt is made yet to allow users to specify the realm.  This
would need to be added as a ProfileInput.

Part of Ticket 2041

Remove vestiges of NISAuth plugin

2016-02-16T01:52:30+00:00

Fixes: https://fedorahosted.org/pki/ticket/1674

Improve 'authz manager not found' message string

2016-01-14T04:41:42+00:00

Fixed mismatching certificate validity calculation.

2016-01-08T21:54:36+00:00

The CAValidityDefault has been modified to use Calendar API to
calculate the certificate validity range to be consistent with
the ValidityConstraint and ValidityDefault.

https://fedorahosted.org/pki/ticket/1682

Add LDAPProfileSubsystem to store profiles in LDAP

2015-04-08T02:38:10+00:00

Add the LDAPProfileSubsystem as another IProfileSubsystem
implementation that can be used instead of ProfileSubsystem (which
stores profiles on the file system) to store files in LDAP so that
changes can be replicated.

Extract common behaviour in to new AbstractProfileSubsystem
superclass.

Also address the minor issue #1220.