pki.git/base/server/cmsbundle/src, branch branch-10.2.7-dev1

Fixed mismatching certificate validity calculation.

2016-02-23T03:19:55+00:00

The CAValidityDefault has been modified to use Calendar API to
calculate the certificate validity range to be consistent with
the ValidityConstraint and ValidityDefault.

https://fedorahosted.org/pki/ticket/1682
(cherry picked from commit 9193fe5191d1bd857b7e1f5a398c6a279b42ec84)

Ticket 1160 audit needed for getKeyInfo; audit missing for auth/authz at REST. This patch addresses: (2) audit needed for getKeyInfo, the 2nd part of this ticket where the key services are missing some auditing.

2015-05-14T21:07:17+00:00

Ticket 1160 audit logging needed: REST API auth/authz; kra for getKeyInfo

2015-05-13T16:05:38+00:00

   - (1) REST API auth/authz - this patch addresses the first part of this
     ticket where auditing is completely missing for authentication and
     authorization at the REST interface.

Ticket#1028 phase2: TPS rewrite: provide externalReg functionality

2015-04-14T23:45:17+00:00

This patch is the 2nd phase of the externalReg feature, it makes the
following improvements:
* added feature: recovery by keyid (v.s. by cert)
* fixed some auditing message errors
* added some missing ldapStringAttributes needed for delegation to work
properly
* added missing externalReg required config parameters
* made corrections to some externalReg related parameters to allow
delegation to work properly
* added handle of some error cases
* made sure externalReg enrollment does not go half-way (once fails,
bails out)

tested:
* enrollment of the three default TPS profiles (tokenTypes)
* format of the tokens enrolled with the three default tps profiles
* delegation enrollments
* cuid match check

next phase:
* cert/key retention (allow preserving existing certs/keys on the token)

note:
* some of the activity log and cert status related issues that are not
specifically relating to externalReg will be addressed in other more
relevant tickets.

Add LDAPProfileSubsystem to store profiles in LDAP

2015-04-08T02:38:10+00:00

Add the LDAPProfileSubsystem as another IProfileSubsystem
implementation that can be used instead of ProfileSubsystem (which
stores profiles on the file system) to store files in LDAP so that
changes can be replicated.

Extract common behaviour in to new AbstractProfileSubsystem
superclass.

Also address the minor issue #1220.

Ticket#1028 Phase1:TPS rewrite: provide externalReg functionality

2015-02-10T22:51:49+00:00

Ticket #864 866 (part 1 symkey, common) NIST SP800-108 KDF

2014-12-19T19:17:34+00:00

 - this patch does not include TPS side of changes:
   (#865 needs to be rewritten in Java)

Added rangeUnit property to certificate profiles.

2014-12-15T16:57:07+00:00

A new optional property has been added to certificate profiles to
specify the range unit. The default range unit is 'day'. The code
has been modified to use the Calendar API to calculate the end of
validity range based on the range unit.

https://fedorahosted.org/pki/ticket/1226

Generate asymmetric keys in the DRM.

2014-08-27T05:15:35+00:00

Adds methods to key client to generate asymmetric keys using
algorithms RSA and DSA for a valid key sizes of 512, 1024, 2048,4096.
The generated keys are archived in the database.
Using the CLI, the public key(base64 encoded) can be retrieved by using
the key-show command.
The private key(base64 encoded) can be retrieved using the key-retrieve
command.

Ticket #1023

Remove ACL mapping to user from error messages

2014-07-28T22:04:54+00:00

- PKI TRAC Ticket #965 - Improve error message - remove ACL mapping to the user