pki.git/base/server/upgrade, branch master

Added upgrade script for keepAliveTimeout.

2017-06-02T15:31:04+00:00

An upgrade script has been added to set the keepAliveTimeout
attribute for the Secure connector in the server.xml.

https://pagure.io/dogtagpki/issue/2687

Change-Id: Ia61ed49d0ffc26d4bb44738c71fc663bde37fb1d

Add upgrade script that adds KRA wrapping params

2017-04-27T22:49:00+00:00

Part of: https://pagure.io/dogtagpki/issue/1408

Change-Id: Iaa1c2c3b6f7de178bd38c2b5b8df57a2a99f64b1

Add authn manager that reuses auth token from session

2017-04-19T01:30:15+00:00

To process a cert request immediately (rather than having it queued
as pending), the user must be authenticated *by the profile*; auth
tokens from the main authentication system are not used.

For external authentication support it is possible that the external
authentication is sufficient to authenticate use of a problem;
especially when the profile uses componenets like
ExternalProcessConstraint to perform validation of the cert request
against external sources of information.

To support this use case, add the SessionAuthentication profile
authenticator, which merely reuses the IAuthToken from the session
context, if present.

Part of: https://pagure.io/dogtagpki/issue/1359

Add ExternalProcessConstraint for request validation

2017-04-19T01:15:00+00:00

Add the ExternalProcessConstraint profile policy constraint class.
It can be configured to execute an arbitrary program that performs
additional request validation, rejecting the request if it
terminates with a nonzero exit status.  Information about the
request is conveyed in the subprocess' environment.

Part of: https://pagure.io/dogtagpki/issue/1359

Add upgrade script to add CommonNameToSANDefault plugin

2017-02-09T04:05:37+00:00

Part of: https://fedorahosted.org/pki/ticket/1710

Fixed MergePKIWebapps upgrade script.

2017-02-04T00:10:03+00:00

The MergePKIWebapps upgrade script has been modified to ensure
that the old deployment descriptors exist before deleting them.

https://fedorahosted.org/pki/ticket/2582

Merged /pki webapps.

2017-01-30T20:20:32+00:00

Previously the /pki webapp was only added if the theme was present
during installation, and there were separate webapps for /pki/admin
and /pki/js. If the theme was installed later, the /pki webapp had
to be configured manually.

To simplify the installation and to support other developments
(e.g. login banner), the /pki webapp will always be added during
installation regardless of theme, and the /pki/admin and /pki/js
webapps are merged into /pki webapp. When the theme package is
installed, it will create links in /pki webapp so the theme files
will become available without additional configuration.

An upgrade script has been added to merge the /pki webapp in
existing instances.

https://fedorahosted.org/pki/ticket/2582

Added upgrade script to update AJP loopback address.

2017-01-20T00:35:30+00:00

An upgrade script has been added to replace IPv4- and IPv6-specific
AJP loopback address with a more generic "localhost" in existing
instances.

https://fedorahosted.org/pki/ticket/2570

Removed FixSELinuxContexts upgrade script.

2016-09-06T22:59:05+00:00

The FixSELinuxContexts upgrade script has been removed temporarily
due to a problem importing selinux library during RPM upgrade.

The FixDeploymentDescriptor script number has been changed
accordingly.

https://fedorahosted.org/pki/ticket/2452

Added upgrade script to fix deployment descriptors.

2016-08-26T15:19:39+00:00

An upgrade script has been added to fix missing deployment
descriptors or deployment descriptors that are pointing to
non-existent or empty folders.

https://fedorahosted.org/pki/ticket/2439