pki.git/base/server/python/pki, branch master

Temp SSL Certificate Creation - Offline System Certificate Renewal

2017-07-13T20:08:24+00:00

`pki-server subsystem-cert-renew` can be used to generate a temporary
SSL cert (Signed by CA) and replace the expired SSL cert in NSS DB. This
helps to bring up the PKI server temporarily. The online System Certificate
renewal procedure can then be used without backdating the system to update
other system certificates.

Ticket: https://pagure.io/dogtagpki/issue/2776

Change-Id: I411586e70f80029b76890e24425331d657ac71e9

Refactored server restart code.

2017-07-11T04:53:17+00:00

The code that restarts the server at the end of installation has been
moved into configuration.py to allow further enhancements.

https://pagure.io/dogtagpki/issue/2280

Change-Id: I1de49ab9e7ec9f86dd1adfd945e6162948fd445a

Refactored ConfigClient.configure_pki_data().

2017-07-11T04:51:04+00:00

The ConfigClient.configure_pki_data() has been modified to return
the server response to the caller to allow more flexibility in
processing the configuration result.

The code that handles system certificate requests generated by the
server has been moved into configuration.py.

https://pagure.io/dogtagpki/issue/2280

Change-Id: Id902fcc10fbdcb270e3b00e219c3356d1319bde1

Fixed typo in pki-server db command

2017-07-03T09:50:14+00:00

Patch for "pki-server subsystem-cert-update" command

2017-06-23T23:43:24+00:00

Currently, the --cert option has not been implemented for
`pki-server subsystem-cert-update` command. The --cert takes
certificate name that needs to be added to the NSS database
and replaces the existing certificate (if exists) in the
database

https://pagure.io/dogtagpki/issue/2756

Change-Id: If8be9edd55a673230f86e213fc803be365e55a92

Added banner validation during server startup.

2017-06-16T20:49:28+00:00

Some pki-server CLIs have been added to inspect and validate the
content of the banner file.

The PKI server startup script has been modified to validate the
content of the banner file using the new CLI.

https://pagure.io/dogtagpki/issue/2671

Change-Id: Ibc51afee184d0a720cc0d2961af08ef75d2b54c4

Refactored AuditVerify (part 3).

2017-06-13T04:46:07+00:00

The AuditVerify.verify() has been cleaned up and some debug
messages have been added for clarity.

https://pagure.io/dogtagpki/issue/2634

Change-Id: Id1c510dd0081e3abb4fb34da0737ea6a3a335ba4

Fixed pylint issues

2017-06-02T00:10:02+00:00

- https://pagure.io/dogtagpki/issue/2713 - Build failure due to Pylint issues

Fixed two-step subordinate CA installation.

2017-05-31T00:34:40+00:00

The initialization scriptlet has been fixed to verify the subsystem
existence properly when running the second step of the two-step
subordinate CA installation.

https://pagure.io/dogtagpki/issue/2707

Change-Id: I0cc8ca21fda8637b4b34f4c5a1c108d213f638f8

Enabling all subsystems on startup.

2017-05-23T19:03:20+00:00

The operations script has been modified to enable all subsystems
on startup by default. If the selftest fails, the subsystem will
be shutdown again automatically as before. A pki.conf option has
been added to configure this behavior.

https://pagure.io/dogtagpki/issue/2699

Change-Id: Iaf367ba2d88d73f377662eee5eafbb99e088ae50