pki.git/base/server/share/conf, branch master

Updated log4j.properties.

2016-11-18T01:41:36+00:00

To reduce maintenance the log4j.properties is no longer copied
into the instance folder during deployment. Instead, a link will
be created in the /var/lib/pki//lib folder pointing to
the default file in /usr/share/pki/server/conf.

The default log4j.properties has been updated to remove redundant
lines. By default only log messages with level WARN or higher will
be logged on the console.

https://fedorahosted.org/pki/ticket/1897

Updated logging.properties.

2016-11-18T01:41:31+00:00

To reduce maintenance the logging.properties is no longer copied
into the instance folder during deployment. Instead, a link will
be created in /etc/pki/ pointing to the default file
in /usr/share/pki/server/conf.

The default logging.properties has been updated to only log
messages with level WARNING or higher on the console.

https://fedorahosted.org/pki/ticket/1897

Removed hard-coded paths in pki.policy.

2016-07-26T19:18:20+00:00

The operations script has been modified to generate pki.policy
dynamically from links in the /common/lib directory.
This allows the pki.policy to match the actual paths in different
platforms.

https://fedorahosted.org/pki/ticket/2403

Bugzilla #1203407 tomcatjss: missing ciphers

2016-06-30T22:46:19+00:00

This patch removes references to the ciphers currently unsupported by NSS:
    TLS_ECDH_RSA_WITH_AES_128_GCM_SHA256
    TLS_ECDH_ECDSA_WITH_AES_128_GCM_SHA256

Fixed Java dependency.

2016-06-17T18:19:09+00:00

The code has been modified to use the JAVA_HOME path specified in
the pki.conf.

The spec file has been modified to depend specifically on OpenJDK
1.8.0 and to provide the default JAVA_HOME path for the pki.conf.

https://fedorahosted.org/pki/ticket/2363

Fix LDAP schema violation when instance name contains '_'

2016-05-30T02:17:12+00:00

The instance name is used in NSSDB key nicknames, which are stored
in the authorityKeyNickname attribute for mapping lightweight CAs to
their keys.  The schema was PrintableString, which does not permit
'_', causing LDAP syntax errors if the instance name contains '_'.

To avoid this issue, change the attribute syntax to IA5String.
Existing instances should be largely unaffected.  The schema update
can be successfully applied even for existing attributes, because
PrintableString and IA5String share the same underlying
representation in 389DS.

Fixes: https://fedorahosted.org/pki/ticket/2343

Lightweight CAs: add missing authoritySerial attr to default schema

2016-05-14T03:20:22+00:00

Lightweight CAs: authority schema changes

2016-05-03T01:09:39+00:00

Add the 'authorityKeyHost' attribute which will contain names of
hosts that possess the authority's signing keys.

Add the 'authoritySerial' attribute which may contain the serial
number of the certificate most recently issued for the authority.

Change other attributes to be single-valued.

Part of: https://fedorahosted.org/pki/ticket/1625

Add realm schema changes

2016-04-20T21:29:17+00:00

Added realm attribute and index.  Added to request and keyRecord.
Part of Trac Ticket 2041

Add script to enable USN plugin

2016-04-15T19:06:13+00:00

New authority monitor code requires the USN plugin to be
enabled in the database to ensure that the entryUSN attribute
is added to authority entries.

In the case where this plugin was disabled, accessing this
attribute resulted in a null pointer exception whch prevented server
startup.

The code has been changed so as not to throw a null pointer exception
on startup if the entryusn is not present, and also to call an LDIF
to enable the plugin when a subsystem is configured through pkispawn.