pki.git/base/tks/shared, branch dev3

Added default config path.

2013-02-06T02:50:19+00:00

Previously the config path had to be defined in web.xml, so the web.xml
had to be customized during deployment. The CMSStartServlet code now
has been modified to generate the config path from catalina.base and
webapp's context path by default.

Reorganized CA, KRA, OCSP, TKS templates.

2012-11-12T17:04:02+00:00

All remaining theme files for Tomcat subsystems which include
the templates and JS files have been moved from the theme folder
at -ui/shared/webapps/ into the subsystem
webapp folder at base//shared/webapps/.

The deployment tools have been updated to use the new location.

Ticket #407

Added ACLInterceptor.

2012-11-08T16:20:05+00:00

Previously ACL checking was done in PKIRealm by matching the URL.
This code has been replaced by ACLInterceptor which will intercept
RESTEasy method invocations. This allows more precise mapping of
REST methods to ACL entries in acl.ldif.

Ticket #287

Updated clearpixel.gif paths.

2012-11-06T21:16:38+00:00

Enabled account service for TKS and OCSP.

2012-10-26T04:36:42+00:00

The REST account service has been added to TKS and OCSP to enable
authentication.

Ticket #375

Restrict AJP to localhost only by default

2012-10-26T02:13:09+00:00

Ticket 369

Provide option to install, rather than replicate schema in a clone

2012-10-22T16:03:39+00:00

Using RPM version number in CMake.

2012-10-01T18:15:44+00:00

The RPM spec files have been modified to pass the full RPM version
number to CMake. The version number contains the product version
number, release number, milestone, and platform. The CMake scritps
will parse and use this version number to generate Java manifest
files. The product version number will be used as the specification
version and full version number will be used as the implementation
version.

Ticket #339

Added common ROOT webapp.

2012-09-12T17:38:58+00:00

The current ROOT webapp will redirect users coming to the root
URL path to the proper path of the subsystem's webapp.

Since now a single Tomcat instance may have multiple subsystems,
a new ROOT webapp has been added to present the user with a menu
of all available webapps from all subsystems in the instance.

Ticket #89

Added proxy realm.

2012-09-05T15:09:41+00:00

CMS engine is a singleton and it's used by PKI realm to authenticate
users accessing the subsystem. Since a Tomcat instance may contain
multiple subsystems, each having separate realm, the PKI JAR links
need to be moved into WEB-INF/lib so that they will run inside
separate class loaders.

Tomcat also requires that the authenticator and realm classes be
available in common/lib. To address this a new package pki-tomcat.jar
has been added. The package contains the authenticator and a proxy
realm. When the subsystems start running, they will register their
own realms into the proxy realms such that the authentications will
be forwarded to the appropriate subsystems.

Ticket #89