summaryrefslogtreecommitdiffstats
diff options
context:
space:
mode:
authorJack Magne <jmagne@localhost.localdomain>2015-07-01 15:01:45 -0700
committerJack Magne <jmagne@localhost.localdomain>2015-07-01 16:08:10 -0700
commitb253cad196f57e79a5aede53aceffede1c9edfbe (patch)
tree149e31a3eeb7977a837001e8914e9f9c82992f70
parent7c1af7f7dac89363c7923802ec759ccb84813bfb (diff)
downloadpki-b253cad196f57e79a5aede53aceffede1c9edfbe.tar.gz
pki-b253cad196f57e79a5aede53aceffede1c9edfbe.tar.xz
pki-b253cad196f57e79a5aede53aceffede1c9edfbe.zip
Ability to toggle profile usablity in Web vs CLI tools.
Ticket #1442. This fix gives the command line enrollment commands the ability to enroll a cert against a profile that has been marked as not visible but "enabled". With the simple fix the following scenarios tested to work: The "caUserCert" Profile was marked as not visible, but enabled. 1. pki -c Secret123 client-cert-request --profile caUserCert uid=jmagne This is the simplest form of user cert enrollment. 2. pki ca-cert-request-profile-show caUserCert --output testuser.xml pki ca-cert-request-submit testuser.xml The first command gives us the profile's xml file, which after modification is used to enroll. 3. pki -d ~/.dogtag/pki -c "" -n "PKI Administrator for localdomain" ca-profile-show caUserCert This one shows that we can view the contents of a non visible profile. Listing is not allowed. We felt this appropiate to allow a command line user to get the details of a non visible profile that they know aobut and want to use.
-rw-r--r--base/ca/src/org/dogtagpki/server/ca/rest/CertRequestService.java5
1 files changed, 2 insertions, 3 deletions
diff --git a/base/ca/src/org/dogtagpki/server/ca/rest/CertRequestService.java b/base/ca/src/org/dogtagpki/server/ca/rest/CertRequestService.java
index 969cfd1a6..a11cb470b 100644
--- a/base/ca/src/org/dogtagpki/server/ca/rest/CertRequestService.java
+++ b/base/ca/src/org/dogtagpki/server/ca/rest/CertRequestService.java
@@ -336,9 +336,8 @@ public class CertRequestService extends PKIService implements CertRequestResourc
}
if (! profile.isVisible()) {
- CMS.debug("getEnrollmentTemplate(): attempt to get enrollment template for non-visible profile");
- throw new BadRequestException("Cannot provide enrollment template for profile `" + profileId +
- "`. Profile not marked as visible");
+ CMS.debug("getEnrollmentTemplate(): attempt to get enrollment template for non-visible profile. This is ok since command line enrollments should be able to use enabled but non visible profiles.");
+
}
CertEnrollmentRequest request = new CertEnrollmentRequest();