summaryrefslogtreecommitdiffstats
Commit message (Collapse)AuthorAgeFilesLines
* Minor changes to the test scripts.Abhishek Koneru2013-11-133-13/+2
| | | | | Removed unnecessary lines and changed the classpath used to build the JUnit tests.
* fix spec typoAde Lee2013-11-101-2/+2
|
* Update spec files for beta buildAde Lee2013-11-106-6/+24
|
* Added null parameter checking.Endi S. Dewata2013-11-109-0/+90
| | | | | | | Some REST services have been modified to throw BadRequestException on null parameters. Ticket #749
* Fixes for review commentsAbhishek Koneru2013-11-1022-246/+197
| | | | | | Fixed the basic review comments for patches 74,75,76,77,78. Tickets #657,722,723,724,725,785
* Provide build scripts for the Java test classes.Abhishek Koneru2013-11-102-1/+67
| | | | | | | | Added the scripts to compile the java test sources when trying to build a beaker test rpm. This is required in a CI setup as the source is freshly checked out and the build is automated. Tickets 725, 785
* README file for setting up and running the tests.Abhishek Koneru2013-11-102-1/+181
| | | | | | | | Provides the steps required to setup the tests and run the tests in eclipse or from command line. Will be updated with details setting up the CI test framework. Tickets #657,722,723,724
* Added JUnit tests upstream.Abhishek Koneru2013-11-1012-0/+697
| | | | | | | | Include JUnit tests to the upstream. This will be the location for all the new tests to come. These tests can be run on a beaker machine as part of the QE tests or in eclipse to test an already existing test framework. Tickets #657,722,723,724
* Provide compose scripts for tests.Abhishek Koneru2013-11-108-15/+278
| | | | | | | | | | Provide a compose script for building the test rpm and creating the job xml (by updating the job template with custom values provided in a job xml config file). Also add a new option --createrepo to the compose_pki_core_package script to create a repository of the built rpms at the location specified in a config file. Tickets #657, 722,723,724
* Add the QE tests to upstream git.Abhishek Koneru2013-11-1057-0/+10465
| | | | | | | Opensource all the QE tests to upstream git so that the tests can be run by setting up a local beaker server. Ticket #657,722,723,724
* Fixed find commands.Endi S. Dewata2013-11-0835-244/+266
| | | | | | | | | | | Some of the REST services have been fixed to consistently return a DataCollection which contains the total count, the requested subset of results, and links to request other subsets of the results. The TPSConnectorFindCLI has been split into separate find and show commands. Ticket #749
* Fixed database cleanup issues.Endi S. Dewata2013-11-082-228/+207
| | | | | | | | | The configuration code has been modified not to remove the LDAP database folder since it may not have access to it. It will also not continue with the cleanup if the database is used by another subtree. Manual removal of old entries in the subtree is redundant so the code has been removed. The exception handling has been improved as well.
* Revert to allowing security managerAde Lee2013-11-072-3/+11
| | | | | | | Bug in tomcat for security manager has been resolved. Updated tomcat requirement accordingly. Ticket 774
* Fixed return code for user and group services.Endi S. Dewata2013-11-0713-225/+165
| | | | | | | | | The user and group services have been modified to return consistent HTTP return codes under various situations. The UGSubsystem has been modified to capture any LDAP exceptions and throw the proper PKIException subclass that represents the appropriate HTTP error code for the situation. Ticket #669, #749
* Added checks for CertRequest and Cert ResourcesAde Lee2013-11-074-35/+79
| | | | Ticket 749
* Fix KeyRequest and Key Resources to return correct exit codesAde Lee2013-11-065-18/+72
| | | | Also added some missing checks, and some missing options in the Key Request CLI
* Fix return values in ProfileResourceAde Lee2013-11-061-8/+49
| | | | Ticket 749
* Modify profile resource to return correct response for create or modify opAde Lee2013-11-066-14/+69
| | | | Ticket 749
* Fix tpsclient failureMatthew Harmsen2013-11-051-1/+7
| | | | * TRAC Ticket #760 - Tpsclient Failure on F20 and TPS
* Renamed CLI commands.Endi S. Dewata2013-11-055-40/+39
| | | | | | | | | | | | | | | | | | The following commands have been renamed. The old commands will no longer work. * profile -> ca-profile * kraconnector -> ca-kraconnector The following commands have also been renamed, but the old commands will continue to work: * cert -> ca-cert * key -> kra-key The user and group commands have already been renamed to <subsytem>- user and <subsystem>-group. The old commands will continue to work and will use CA subsystem by default. Ticket #701
* Added TPS profile resource.Endi S. Dewata2013-11-0425-21/+1578
| | | | | | | A new REST service and clients have been added to manage the profiles in the TPS configuration file. Ticket #652
* Removed duplicate ACL classes.Endi S. Dewata2013-11-014-466/+30
| | | | | | | The ACL and ACLEntry in com.netscape.cmscore.realm are duplicates of the ones in com.netscape.certsrv.acls. They have been removed since they are no longer used. All differences have been merged into the remaining copy.
* Renamed CLI commands.Endi S. Dewata2013-11-015-7/+7
| | | | | | | | The following commands have been renamed for consistency: * client-cert-remove -> client-cert->del * group-member-remove -> group-member-del * user-cert-remove -> user-cert-del * user-membership-remove -> user-membership-del
* Fixed problem running GroupMemberProcessor on non-CA.Endi S. Dewata2013-11-015-69/+98
| | | | | | | | Previously the GroupMemberProcessor class inherits from CAProcessor that can only run on CA. To fix the problem a generic Processor has been created as a super class of the CAProcessor and some of the fields and methods that are not CA-specific have been moved into the super class. The GroupMemberProcessor will now inherit directly from the super class.
* Renamed Processor to CAProcessor.Endi S. Dewata2013-11-019-21/+21
| | | | | | The Processor class depends on CertificateAuthority subsystem which only exists on CA, so the class has been renamed to CAProcessor to reflect the dependency.
* Added mechanism to deprecate CLI commands.Endi S. Dewata2013-11-011-2/+39
| | | | | The CLI framework has been modified to support deprecating CLI commands by adding @Deprecated to the class name.
* Backup upgrade tracker.Endi S. Dewata2013-10-313-3/+12
| | | | | | | | | The upgrade framework has been modified to backup the files used to track the upgrade progress. If the tracker file is also modified by the upgrade scriptlet, it will only keep the initial backup (before any modifications were made). Ticket #763
* Modify output file option for cert-request-review command.Abhishek Koneru2013-10-312-44/+18
| | | | | | | | Change the --output option to --file for providing a file to store the certificate request to be reviewed using the cert-request-review cli command. Update the man page entry for the same. Ticket #674
* Fixed references to /var/run and /var/lock in spec files for RA and TPS.Ade Lee2013-10-312-10/+16
|
* Fixed tests dependencies.Endi S. Dewata2013-10-3126-36/+49
| | | | | The test classes have been moved from base/common/test to base/server/test and into the cmscore package because they are dependent on server classes.
* Fixed logic for setting admin cert signing algorithmAde Lee2013-10-313-45/+81
| | | | | Should now be SHA256 by default. Bugzilla BZ 1024445
* Fixed errors during Tomcat shutdown.Endi S. Dewata2013-10-283-16/+20
| | | | | | | | | Previously the CMS.shutdown() was called multiple times during Tomcat shutdown, one by CMSStarServlet.destroy() and the other by the shutdown hook, causing some errors. The shutdown hook should only be used in a standalone application, so it has been moved into CMS.main(). Bugzilla #1018628
* Fixed error handling in DoUnrevoke servlet.Endi S. Dewata2013-10-281-2/+3
| | | | | | | The DoUnrevoke servlet has been modified to re-throw the EBaseException such that the error message can be returned properly to the client. Ticket #739
* Added access control for TPS token.Endi S. Dewata2013-10-285-11/+40
| | | | | | | The TPS token REST interface has been modified to require client certificate authentication. TPS admins, agents, and operators are allowed to view tokens, but only admins are allowed to add and remove tokens, and only agents are allowed to modify tokens.
* Cleaned up CertEnrollmentRequest.Endi S. Dewata2013-10-2512-162/+270
| | | | | The CertEnrollmentRequest, ProfileInput, ProfileAttribute, and Descriptor have been cleaned up to fix some bugs and minor formatting issues.
* Reorganized server packages.Endi S. Dewata2013-10-25654-153/+519
| | | | | The tomcat, cms, and cmscore packages have been moved from base/common into separate folders in base/server so that they can be built separately.
* Fixed problems finding user and group sub-resources.Endi S. Dewata2013-10-2518-1065/+716
| | | | | | | Due to a regression RESTEasy is unable to find some sub-resources properly. As a workaround some resources need to be merged into the parent resource. The UserCertResource and UserMembershipResource have been merged into UserResource. The GroupMemberResource has been merged into GroupResource.
* Renamed client commands.Endi S. Dewata2013-10-254-17/+17
| | | | | The client-{action}-cert commands have been renamed into client-cert-{action} for consistency.
* Reorganized PKIPrincipal.Endi S. Dewata2013-10-257-7/+6
| | | | | The PKIPrincipal is in cmscore package but it's needed by the REST services in cms package so the class has been moved into cms package.
* Refactored authentication managers.Endi S. Dewata2013-10-255-21/+79
| | | | | | | The CertUserDBAuthentication and PasswdUserDBAuthentication are authentication managers in cmscore package but they are needed by PKIRealm that is now in cms package, so new interfaces have been refactored from these classes so they can be used without causing dependency issue.
* Reorganized PKIRealm class.Endi S. Dewata2013-10-252-2/+3
| | | | | PKIRealm has been moved from pki-cmscore into pki-cms package because it's needed by CMSStartServlet which is in the pki-cms package.
* Stand-alone DRMMatthew Harmsen2013-10-2511-276/+339
| | | | * TRAC Ticket #762 - Stand-alone DRM (cleanup tasks)
* Stand-alone DRMMatthew Harmsen2013-10-1528-400/+1583
| | | | * TRAC Ticket #667 - provide option for ca-less drm install
* enable tomcat access logAndrew Wnuk2013-10-151-2/+2
| | | | | | This patch enables Tomcat access log for Java subsystems. Ticket #558.
* Moved EnableSessionInAuthenticator script to 10.0.5.Endi S. Dewata2013-10-112-0/+4
|
* Fix correct ACL for profile REST interfaceAde Lee2013-10-092-1/+5
|
* Add upgrade file for auth.propertiesAde Lee2013-10-092-0/+45
| | | | Also moved 10.1 version upgrade scripts to 10.0.99.
* fix auth and authz for Profiles REST APIAde Lee2013-10-093-5/+11
| | | | Ticket 727
* Ticket 757 - Allow unescaped '%' characters in deployment file password valuesNathan Kinder2013-10-093-3/+36
| | | | | | | | | | | | | This patch allows password values in pkispawn deployment files to contain unescaped '%' characters. Non password settings support interpolation, so they still require escaping. This patch has been tested with deployment file based installs as well as interactive installs. The way it works is that we escape the password settings internally immediately after reading the deployment config file. The interactive installation code already escapes password values as it receives them from the user. This approach allows the rest of the installation code to remain as-is.
* Added audit resource.Endi S. Dewata2013-10-0825-124/+983
| | | | | | | A new REST service and clients have been added to manage the audit configuration in all subsystems. Ticket #652