summaryrefslogtreecommitdiffstats
Commit message (Collapse)AuthorAgeFilesLines
...
* Update dependenciesMatthew Harmsen2014-12-172-9/+24
| | | | | | | - PKI TRAC Ticket #1187 - mod_perl should be removed from requirements for 10.2 - PKI TRAC Ticket #1205 - Outdated selinux-policy dependency. - Removed perl(XML::LibXML), perl-Crypt-SSLeay, and perl-Mozilla-LDAP runtime dependencies
* Fix-for-Bug-1170867-TPS-Installation-FailedJack Magne2014-12-1623-1767/+205
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | Fix now includes last review comments where we decided to consolidate 3 of the ldif files: schema.ldif,database.ldif, and manager.ldif. Each one of these 3 files contains the data needed for any subsystem for that file. The subsystem specific files for these 3 go away in the source tree. The first iteration of this fix was copying these 3 files into an undesirable directory. This is no longer the case. Extra code in the python installer allows one to establish a "file exclusion" callback to keep a set of desired files from being copied when the installer does a directory copy. All subsystems have been tested, including TPS with a brand new DS (which was the original reason for this fix), and they appear to work fine. Addressed further review comments: 1. Removed trailing whitespace instances from schema.ldif which had some. 2. Used pycharm to remove the few PEP violations I had previously added to the Python code. 3. Changed the format of the schema.ldif file to make all the entries use the same style. Previously the TPS entries was using an all in one syntax. No more since now each entry is separate. 4. Changed the name of an argument in one of the new Python methods to get rid of a camelCase instance. 5. Tested everything to work as before, including basic TPS operations such as Format. Fixed a method comment string and fixed some typos.
* Ticket 1180 RFE: show link to request record from cert displayChristina Fu2014-12-162-0/+14
|
* Ticket 1173 Directory-based renewal evaluator fails authorizationChristina Fu2014-12-161-10/+10
|
* Decode challengePassword attribute as DirectoryStringFraser Tweedale2014-12-163-1/+27
| | | | | | | | | | | The PKCS #9 challengePassword attribute has DirectoryString syntax. Dogtag currently attempts only to decode it as a PrintableString, causing failures when the attribute is encoded as a UTF8String. Add method DerValue.getDirectoryString() to decode any of the valid DirectoryString encodings and update ChallengePassword to use it. https://fedorahosted.org/pki/ticket/1221
* Require resteasy sub modules for F22+Ade Lee2014-12-151-2/+19
|
* Added rangeUnit property to certificate profiles.Endi S. Dewata2014-12-1513-55/+213
| | | | | | | | | A new optional property has been added to certificate profiles to specify the range unit. The default range unit is 'day'. The code has been modified to use the Calendar API to calculate the end of validity range based on the range unit. https://fedorahosted.org/pki/ticket/1226
* Modified RHEL Source URL to prevent potential collisions with Fedora releasesMatthew Harmsen2014-12-123-3/+3
| | | | - PKI TRAC #1211 - New release overwrites old source tarball
* Cleaned up clone installation code.Endi S. Dewata2014-12-121-107/+97
| | | | | The code in ConfigurationUtils has been cleaned up and reformatted to improve readability.
* Fixed problem importing renewed system certificate.Endi S. Dewata2014-12-122-51/+144
| | | | | | | | | | | | Previously during clone installation if the PKCS12 file contains both expired and renewed certificates the code might incorrectly import the expired certificate instead of the renewed one, thus failing the installation. The code has been fixed to validate the certificates in the PKCS12 file such that only the valid ones will be imported into the clone. https://fedorahosted.org/pki/ticket/1093
* comment lines which add cer to TEMP NSS DBNiranjan Mallapadi2014-12-081-21/+21
| | | | | | Modify generate_new_cert function to comment out the lines which add the CA signing cert and user/server cert to Temp NSS DB
* Add CA Legacy profile testsNiranjan Mallapadi2014-12-083-0/+1825
|
* CLI user-add and ca-user-add tests modifiedAsha Akkiangady2014-12-0615-71/+700
| | | | | to have random strings generated with openssl rand and $RANDOM.
* Some updates to the script for certutilRoshni Pattath2014-12-051-4/+530
|
* Changed the CA Host parameterRoshni Pattath2014-12-0521-574/+28
|
* Fix BasicConstraints min/max path length checkFraser Tweedale2014-12-051-1/+1
| | | | | | | | | | | | The BasicConstraintsExtConstraint min/max path length validity check ensures that the max length is greater than the min length, however, when a negative value is used to represent "no max", the check fails. Only compare the min and max length if the max length is non-negative. Ticket #1035
* Spec file changes to support the following issues:Matthew Harmsen2014-12-043-10/+28
| | | | | | | - Ticket 1198 Bugzilla 1158410 add TLS range support to server.xml by default (cfu) - PKI Trac Ticket #1211 - New release overwrites old source tarball (mharmsen) - TLS Compliance
* Fix spec file to address the following ticket:Matthew Harmsen2014-12-041-2/+10
| | | | - PKI Trac Ticket #1211 - New release overwrites old source tarball
* Remove legacy multilib JNI_JAR_DIR logicMatthew Harmsen2014-12-046-6/+7
| | | | | | | | | | | | | | | | * Bugzilla Bug #1165351 - Errata TPS test fails due to dependent packages not found (cherry picked from commit d7a0807b7493fc3d86900ee4aaf8199efd824907) Conflicts: base/java-tools/templates/pki_java_command_wrapper.in base/java-tools/templates/pretty_print_cert_command_wrapper.in base/java-tools/templates/pretty_print_crl_command_wrapper.in base/server/python/pki/server/deployment/pkiparser.py base/server/scripts/operations (cherry picked from commit c8d73ade2c651fd5ca01226c89d5d19828bfc9b7)
* Removed reference to files that are not added to gitRoshni Pattath2014-12-042-3/+0
|
* KRA group test scripts and CI changesRoshni Pattath2014-12-0460-3068/+14775
|
* Changes to Makefile and runtest.shRoshni Pattath2014-12-032-58/+120
| | | | Included files relating to bug verification
* RHEL 7.1 bug verification automationRoshni Pattath2014-12-037-0/+927
|
* Minor changes to pki-ca-cert-cli-release & revokeNiranjan Mallapadi2014-12-012-54/+54
|
* Add minor fixes to cert-release-hold and revokeNiranjan Mallapadi2014-12-012-57/+57
| | | | | | In pki cert-revoke, comment the SUBCA test, because when jobs are ran in parallel, this can go for a very big loop.
* Minor fixes to pki-cert.shNiranjan Mallapadi2014-12-011-2/+2
|
* Minor fixes to pki-cert-cli-lib.shNiranjan Mallapadi2014-12-011-0/+1
|
* Modify ca profile cli's tests with minor changesNiranjan Mallapadi2014-12-015-9/+8
|
* emove /dev/urandom from kra-key-cliNiranjan Mallapadi2014-11-2611-270/+270
|
* Remove /dev/urandom from key-cliNiranjan Mallapadi2014-11-2612-271/+271
|
* Remove /dev/urandom from ca-cert-cliNiranjan Mallapadi2014-11-2612-35/+34
| | | | | Replace /dev/urandom for junk characters with openssl rand and user $RANDOM for random integer values
* Replace /dev/urandom with openssl randNiranjan Mallapadi2014-11-2612-34/+33
|
* Improvements for KeyClient.archive_encrypted_data().Endi S. Dewata2014-11-251-26/+41
| | | | | | | | | The archive_encrypted_data() in KeyClient has been modified to have a default value for the algorithm OID and to take a nonce IV object instead of the base-64 encoded value. https://fedorahosted.org/pki/ticket/1155 https://fedorahosted.org/pki/ticket/1156
* Removed profile input/output IDs from CLI output.Endi S. Dewata2014-11-252-4/+26
| | | | | | | | | | | | The current profile inputs/outputs do not have meaningful IDs (e.g. i1, i2, o1) and are not used by the client so they should not be displayed in the CLI output. In the future the IDs should be renamed into something meaningful (e.g. keygen, sn, cert) and the inputs/outputs should be retrieved by ID. New methods have been added to retrieve by ID. https://fedorahosted.org/pki/ticket/1147
* Ticket 1198 Bugzilla 1158410 add TLS range support (spec file jss tomcatjss ↵Christina Fu2014-11-242-4/+4
| | | | dependencies)
* Ticket 1198 Bugzilla 1158410 add TLS range support to server.xml by default ↵Christina Fu2014-11-249-12/+178
| | | | and upgrade
* Ticket 1206 (java console) TLS range support: code change needed for cs when ↵Christina Fu2014-11-241-36/+17
| | | | acting as client
* Modify importP12FileNew function to check NSS DBNiranjan Mallapadi2014-11-241-3/+9
| | | | | We first verify if the /opt/rhqa_pki/certsdb_dir exits if it exits, we do not run client-init
* Remove --password from group-add-member, cert-addNiranjan Mallapadi2014-11-241-13/+11
| | | | | --password option has been removed from pki group-add-member, user-cert-add commands
* Added check for installation to exit if CAAsha Akkiangady2014-11-215-32/+62
| | | | | | install fails. env.sh client_database_dir param included for every CA install.
* bugzilla 871171 (client-side code) Provide Tomcat support for TLS v1.1 and ↵Christina Fu2014-11-214-103/+44
| | | | TLS v1.2
* Add pki ca-profile-tests in runtest and MakefileNiranjan Mallapadi2014-11-102-1/+79
|
* Add pki ca-profile config automationNiranjan Mallapadi2014-11-101-0/+75
|
* Add pki ca-profile-del automationNiranjan Mallapadi2014-11-101-0/+477
|
* Add pki ca-profile-disable AutomationNiranjan Mallapadi2014-11-101-0/+510
|
* Add pki ca-profile-enable AutomationNiranjan Mallapadi2014-11-101-0/+534
|
* Add pki ca-profile-show AutomationNiranjan Mallapadi2014-11-101-0/+459
|
* Add pki ca-profile-find AutomationNiranjan Mallapadi2014-11-101-0/+453
|
* Add pki ca-profile-mod AutomationNiranjan Mallapadi2014-11-101-0/+1541
|
* Add pki ca-profile-add AutomationNiranjan Mallapadi2014-11-101-0/+1707
|
generated by cgit (git 2.34.1) at 2025-10-02 04:25:47 +0000