summaryrefslogtreecommitdiffstats
path: root/base/ca/src/com/netscape
diff options
context:
space:
mode:
authorAde Lee <alee@redhat.com>2017-05-23 12:14:06 -0400
committerAde Lee <alee@redhat.com>2017-05-24 11:24:34 -0400
commitde9f890133e3acc660b985e8ef5950507d341a03 (patch)
tree02c83b1ac86f7b43dbfdb00e8530375771961b8b /base/ca/src/com/netscape
parentb9f906eb1f26cf3d82262bc9894785742f451cd9 (diff)
downloadpki-de9f890133e3acc660b985e8ef5950507d341a03.tar.gz
pki-de9f890133e3acc660b985e8ef5950507d341a03.tar.xz
pki-de9f890133e3acc660b985e8ef5950507d341a03.zip
Make sure archivalID is passed through archival
There was some confusion in the previous commit for archival logging. The archivalID is the id provided by the CA for the archival and is its requestID. This allows the cert request operation to be tracked through the archival. Made sure therefore, that we have two fields - one for the archivalID and one for the requestId (which is the KRA archival request ID) In addition, some of the archival events occur in the CA component just before the request id sent to the KRA. These events will not be displayed unless the audit event is added to the CA CS.cfg. Change-Id: I3904d42ae677d5916385e0120f0e25311b4d9d08
Diffstat (limited to 'base/ca/src/com/netscape')
-rw-r--r--base/ca/src/com/netscape/ca/CAService.java22
1 files changed, 17 insertions, 5 deletions
diff --git a/base/ca/src/com/netscape/ca/CAService.java b/base/ca/src/com/netscape/ca/CAService.java
index 45fae66d4..c9eacfe42 100644
--- a/base/ca/src/com/netscape/ca/CAService.java
+++ b/base/ca/src/com/netscape/ca/CAService.java
@@ -58,6 +58,7 @@ import com.netscape.certsrv.profile.IProfile;
import com.netscape.certsrv.profile.IProfileSubsystem;
import com.netscape.certsrv.request.IRequest;
import com.netscape.certsrv.request.IService;
+import com.netscape.certsrv.request.RequestId;
import com.netscape.cmscore.base.SubsystemRegistry;
import com.netscape.cmscore.connector.HttpConnector;
import com.netscape.cmscore.connector.LocalConnector;
@@ -371,6 +372,7 @@ public class CAService implements ICAService, IService {
public boolean serviceRequest(IRequest request) {
String auditSubjectID = auditSubjectID();
String auditRequesterID = auditRequesterID();
+ RequestId requestId = request.getRequestId();
boolean completed = false;
@@ -422,7 +424,9 @@ public class CAService implements ICAService, IService {
audit(new SecurityDataArchivalEvent(
auditSubjectID,
ILogger.SUCCESS,
- auditRequesterID));
+ auditRequesterID,
+ requestId,
+ null));
boolean sendStatus = mKRAConnector.send(request);
@@ -437,7 +441,9 @@ public class CAService implements ICAService, IService {
audit(new SecurityDataArchivalEvent(
auditSubjectID,
ILogger.FAILURE,
- auditRequesterID));
+ auditRequesterID,
+ requestId,
+ null));
return true;
} else {
@@ -451,7 +457,9 @@ public class CAService implements ICAService, IService {
audit(new SecurityDataArchivalEvent(
auditSubjectID,
ILogger.FAILURE,
- auditRequesterID));
+ auditRequesterID,
+ requestId,
+ null));
return true;
}
@@ -474,7 +482,9 @@ public class CAService implements ICAService, IService {
audit(new SecurityDataArchivalEvent(
auditSubjectID,
ILogger.FAILURE,
- auditRequesterID));
+ auditRequesterID,
+ requestId,
+ null));
}
return true;
@@ -490,7 +500,9 @@ public class CAService implements ICAService, IService {
audit(new SecurityDataArchivalEvent(
auditSubjectID,
ILogger.SUCCESS,
- auditRequesterID));
+ auditRequesterID,
+ requestId,
+ null));
}
return completed;