pki.git/base/server/sbin/pki-server, branch master Unnamed repository; edit this file 'description' to name the repository. Added banner validation during server startup. 2017-06-16T20:49:28+00:00 Endi S. Dewata edewata@redhat.com 2017-06-14T21:08:29+00:00 d2e247798a36225880ef6050716cc7576fe2ad7f Some pki-server CLIs have been added to inspect and validate the content of the banner file. The PKI server startup script has been modified to validate the content of the banner file using the new CLI. https://pagure.io/dogtagpki/issue/2671 Change-Id: Ibc51afee184d0a720cc0d2961af08ef75d2b54c4 
Some pki-server CLIs have been added to inspect and validate the
content of the banner file.

The PKI server startup script has been modified to validate the
content of the banner file using the new CLI.

https://pagure.io/dogtagpki/issue/2671

Change-Id: Ibc51afee184d0a720cc0d2961af08ef75d2b54c4
Added general exception handling for pki-server CLI. 2016-07-06T21:30:43+00:00 Endi S. Dewata edewata@redhat.com 2016-07-06T21:02:18+00:00 9bf9f9628420d133010ff994cdac0f01b764b603 The pki-server CLI has been modified to catch all exceptions and display a simple exception message. In verbose mode it will display the stack trace. https://fedorahosted.org/pki/ticket/2381 
The pki-server CLI has been modified to catch all exceptions and
display a simple exception message. In verbose mode it will
display the stack trace.

https://fedorahosted.org/pki/ticket/2381
Added condition for checking instance id in kra commands 2016-06-30T23:42:21+00:00 Abhijeet Kasurde akasurde@redhat.com 2016-06-30T09:48:24+00:00 99a93af1ca5cce26d625ce7cee07dab4a890f1be Partially Fixes: https://bugzilla.redhat.com/show_bug.cgi?id=1351295 
Partially Fixes: https://bugzilla.redhat.com/show_bug.cgi?id=1351295
Renamed pki-server ca-db-upgrade to db-upgrade. 2016-05-13T22:57:56+00:00 Endi S. Dewata edewata@redhat.com 2016-05-13T20:32:10+00:00 8d239f0b5c01ec94075a52eec8d8f5485b172ffd The pki-server ca-db-upgrade command has been renamed to db-upgrade to be more general. In the future the command can be refactored to handle additional upgrade scripts. Additional log messages have been added to show the upgrade activities in verbose mode. https://fedorahosted.org/pki/ticket/1667 
The pki-server ca-db-upgrade command has been renamed to db-upgrade
to be more general. In the future the command can be refactored to
handle additional upgrade scripts. Additional log messages have
been added to show the upgrade activities in verbose mode.

https://fedorahosted.org/pki/ticket/1667
Added pki-server commands to export system certificates. 2016-02-25T14:51:06+00:00 Endi S. Dewata edewata@redhat.com 2016-02-19T14:09:49+00:00 b48889a2ef41fd45ca69c3926c36ef075777447c Some pki-server commands have been added to simplify exporting the required certificates for subsystem installations. These commands will invoke the pki pkcs12 utility to export the certificates from the instance NSS database. The pki-server ca-cert-chain-export command will export the the certificate chain needed for installing additional subsystems running on a separate instance. The pki-server <subsystem>-clone-prepare commands will export the certificates required for cloning a subsystem. https://fedorahosted.org/pki/ticket/1742 
Some pki-server commands have been added to simplify exporting
the required certificates for subsystem installations. These
commands will invoke the pki pkcs12 utility to export the
certificates from the instance NSS database.

The pki-server ca-cert-chain-export command will export the
the certificate chain needed for installing additional
subsystems running on a separate instance.

The pki-server <subsystem>-clone-prepare commands will export
the certificates required for cloning a subsystem.

https://fedorahosted.org/pki/ticket/1742
Added CLI to update cert data and request in CS.cfg. 2015-09-04T21:11:19+00:00 Endi S. Dewata edewata@redhat.com 2015-09-02T02:50:24+00:00 2ab352e1756d02695b73a9dbe782d353708ef553 A set of new pki-server commands have been added to simplify updating the cert data and cert request stored in the CS.cfg with the cert data and cert request stored in the NSS and LDAP database, respectively. https://fedorahosted.org/pki/ticket/1551 
A set of new pki-server commands have been added to simplify
updating the cert data and cert request stored in the CS.cfg with
the cert data and cert request stored in the NSS and LDAP database,
respectively.

https://fedorahosted.org/pki/ticket/1551
Py3 modernization: libmodernize.fixes.fix_print 2015-08-17T19:14:11+00:00 Christian Heimes cheimes@redhat.com 2015-08-16T17:00:00+00:00 f98ca7fa1903e12a4b2c49a70163077b3560dc1d Replace print statement with Python 3's print() function. For Python 2 'from __future__ import print_function' turns the print statement into Python 3 compatible print function. See https://www.python.org/dev/peps/pep-3105/ 
Replace print statement with Python 3's print() function.

For Python 2 'from __future__ import print_function' turns the print
statement into Python 3 compatible print function.

See https://www.python.org/dev/peps/pep-3105/
Py3 modernization: libmodernize.fixes.fix_import 2015-08-17T19:14:11+00:00 Christian Heimes cheimes@redhat.com 2015-08-16T17:00:00+00:00 71148b8f79a5d6ba0c949a3ca0acf5aec6321f0a Enforce absolute imports or explicit relative imports. Python 3 no longer supports implicit relative imports, that is unqualified imports from a module's directory. In order to load a module from the same directory inside a package, use from . import module The future feature 'from __future__ import absolute_import' ensures that pki uses absolute imports on Python 2, too. See https://www.python.org/dev/peps/pep-0328/ 
Enforce absolute imports or explicit relative imports. Python 3 no
longer supports implicit relative imports, that is unqualified imports
from a module's directory. In order to load a module from the same
directory inside a package, use

    from . import module

The future feature 'from __future__ import absolute_import' ensures that
pki uses absolute imports on Python 2, too.

See https://www.python.org/dev/peps/pep-0328/
Make pki PEP 8 compatible 2015-08-14T11:03:18+00:00 Christian Heimes cheimes@redhat.com 2015-08-11T18:55:48+00:00 12badcabc1cd345256a4902f7b0583cf667ecd8d Large portions of the patch was automatically created with autopep8: find base/ -name '*.py' | xargs autopep8 --in-place --ignore E309 \ --aggressive find base/common/upgrade base/server/upgrade -type f -and \ -not -name .gitignore | autopep8 --in-place --ignore E309 --aggressive autopep8 --in-place --ignore E309 --aggressive \ base/common/sbin/pki-upgrade \ base/server/sbin/pkispawn \ base/server/sbin/pkidestroy \ base/server/sbin/pki-server \ base/server/sbin/pki-server-upgrade About two dozent violations were fixed manually. https://fedorahosted.org/pki/ticket/708 
Large portions of the patch was automatically created with autopep8:

find base/ -name '*.py' | xargs autopep8 --in-place --ignore E309 \
    --aggressive
find base/common/upgrade base/server/upgrade -type f -and \
    -not -name .gitignore | autopep8 --in-place --ignore E309 --aggressive
autopep8 --in-place --ignore E309 --aggressive \
    base/common/sbin/pki-upgrade \
    base/server/sbin/pkispawn \
    base/server/sbin/pkidestroy \
    base/server/sbin/pki-server \
    base/server/sbin/pki-server-upgrade

About two dozent violations were fixed manually.

https://fedorahosted.org/pki/ticket/708
Add ability to pki-server to enable/disable nuxwdog for an instance 2015-04-28T21:02:35+00:00 Ade Lee alee@redhat.com 2015-04-27T19:29:26+00:00 43d56010e1eb09f62223bc870da9184b81a599f3 This adds the ability to either enable or disable an instance using the pki-server utility. Additional documentation and additions to the man pages will be added in a separate patch. 
This adds the ability to either enable or disable an instance using
the pki-server utility.  Additional documentation and additions to the
man pages will be added in a separate patch.