| Commit message (Collapse) | Author | Age | Files | Lines |
... | |
| |
|
|
|
|
|
|
|
|
|
| |
Modified submit_new_request to do substring match
of profile names, because we want to users to pass new
profile names.
Add new function generate_cert_request_xml which retrieves
the xml template of the profile and fills with the data provided
|
|
|
|
|
|
| |
Add new file shared/pki-profile-lib.sh
currently it adds new profiles based on Netscape
certificate extensions
|
|
|
|
|
| |
Add new automation script pki-cert-cli-find-ca.sh
modify Makefile and runtests.sh to include pki-cert-find automation
|
|
|
|
| |
- PKI TRAC Ticket #832 - Remove legacy 'systemctl' files . . .
|
|
|
|
|
|
|
|
| |
The CryptoUtil classes in the Python client library has been renamed
to CryptoProvider for consistency with the Java client library. The
cryptoutil.py module has been renamed to crypto.py.
Ticket #1042
|
|
|
|
|
| |
- Bugzilla Bug #1081916 - freeipa does not install on arm architecture
- PKI TRAC Ticket #935 - patch to BtoA and AtoB to get ARM working
|
|
|
|
| |
* PKI TRAC Ticket #899 - RFE - ipa-server should keep backup of CS.cfg
|
|
|
|
|
|
| |
Added new methods to allow user to provide file input to perform
operations like create profile/modify profile.
The supported file formats a re xml and json.
|
|
|
|
|
| |
Provides methods to create/modify/delete a profile.
Also adds put and delete methods to the PKIConnection object.
|
| |
|
|
|
|
|
|
| |
- Removed dependency on removed internal junit class
- moved cmake reference to junit4.jar to junit.jar
- Disambiguate a couple of references
|
| |
|
|
|
|
|
|
|
|
|
|
| |
Ticket 1040 - Perform null checks on JSON attributes.
Ticket 1041 - Rename module kraclient to kra.
Also refactored the code in cert module removing the usage of
property. Achieved the conversion of names(camelCase to '_' separated )
using a dictionaries in the objects. The default method in encoder module
has also been modified to perform the reverse conversion.
|
| |
|
| |
|
|
|
|
| |
* PKI TRAC Ticket #898 - Giant /var/log/pki-ca/debug
|
|
|
|
| |
Files modified are pki user-mod and pki user-cert-delete
|
|
|
|
| |
Ticket 781
|
|
|
|
|
|
|
|
| |
The ActivityService has been fixed to return the missing TPS activity
attributes including IP, operation, result, and message. The TPS CLI
and UI has been fixed to display the activity date in UTC format.
Ticket #1050
|
|
|
|
|
|
|
|
| |
A new method has been added to log TPS activities. The method will
create a new activity record with ID generated from timestamp and
thread ID.
Ticket #1049
|
|
|
|
|
|
|
|
|
|
|
| |
Previously if a key archival failed, the REST service would return
an invalid key URL, which would cause an exception when the CLI tried
to parse it. The service has been fixed to return a null URL which
can be detected to avoid parsing invalid value.
The Python library has been modified to handle missing key URL.
Ticket #1043
|
| |
|
| |
|
| |
|
| |
|
| |
|
|
|
|
| |
revoke/unrevoke processor
|
|
|
|
|
|
|
|
|
|
|
|
| |
For the new security data storage and retrieval, and for symmetric
key generation, we need to store the identity of the agent that is
requesting and approving each operation, both in the ldap record
and in the audit logs. (Tickets 806 and 807)
This patch also adds required logic to check that the owner of the
recovery request is the same agent that retrieves the key. It also
adds missing audit log constants for symmmetric key generation so that
they will show up in the audit log.
|
| |
|
|
|
|
|
| |
Improve the layout of strings in pkimessages and fix
a couple more PEP 8 issues.
|
|
|
|
|
| |
Mostly reformatting due to PEP8. Not all pycharm warnings are
addressed, but the vast majority are.
|
|
|
|
| |
Mostly handle pycharm warnings about code formatting.
|
|
|
|
|
|
| |
Most of the install python scripts do not meet PEP8 including
being less than 80 chars. Changing master_dict to mdict helps
fix this and improves or at least does not degrade readability.
|
|
|
|
| |
Corrected error message in user-add tests.
|
|
|
|
|
|
|
|
|
|
|
|
| |
1. Changed the names of some message classes.
2. Did some minor refactoring of methods needed by both the enroll and tps processor.
3. Created classes to handle the parsing and archival of PKCS#11 token data.
4. Created prep code for enrollment that reads in a bunch of config params and creates
convenience objects to carry the data instead of lengthy parameter lists we have had before.
5. Code to generate key on token, tested tpsclient so far.
6. Additional review changes, and merging.
Review changes.
|
| |
|
|
|
|
|
|
|
| |
Addressed review comments for the patches that
implement the CertClient and a part of ProfileClient.
Also includes the pycharm project files in pki/.idea.
|
|
|
|
|
|
|
| |
This patch adds methods for listing profiles, retrieving aprofile,
enabling a profile and disabling a profile.
It also contains few cosmetic changes in account.py and
client.py(pycharm PEP8 warnings addressed)
|
|
|
|
|
|
|
|
|
| |
Adds the methods for fetching the enrollment templates,
creating the enrollment requests, submitting the requests,
performing actions(approve, reject, cancel etc.) on the requests.
Also defined the classes needed for representing data used to
perform the above mentioned operations.
|
|
|
|
| |
tokentype
|
| |
|
| |
|
| |
|
|
|
|
|
|
|
|
|
| |
Currently the security domain python API just extracts the security
domain name from the json returned by the server. This patch allows
it to extract and use all the information in the response.
This info is needed to determine the state of the security domain for
the IPA vault case.
|
| |
|
| |
|
|
|
|
|
|
|
|
| |
The methods currently implemented in the CertClient are:
get_cert(), review_cert(), list_certs(), revoke_cert(),
revoke_ca_cert(), hold_cert(), unrevoke_cert()
Also included some test code in main method.
|
|
|
|
|
|
|
| |
The index.ldif for TPS has been fixed to remove hard-coded database
names and to add the missing the index for the description attribute.
Ticket #979
|
|
|
|
|
|
|
| |
A README file has been added containing a link to the Database
Upgrade wiki page.
Ticket #998
|