summaryrefslogtreecommitdiffstats
path: root/base/common/src/com/netscape/certsrv/kra
Commit message (Collapse)AuthorAgeFilesLines
* Ticket #1593 auto-shutdown - for HSM failover supportChristina Fu2015-10-011-0/+2
| | | | | | | | | | | | | | | This is an interim solution for supporting HSM failover by automatically shutting down the server when signing key becomes inaccessible. At auto-shutdown, a crumb fiile will be left in the instance directory for an external daemon to detect and restart, if necessary. Due to limitation of the watch dog (nuxwdog) at present time, the restart option currently only works if started with watch dog (nuxwdog), and it will prompt for passwords on the terminals. The restart counter is to prevent the server from going into an infinite restart loop. Administrator will have to reset autoShutdown.restart.count to 0 when max is reached. (cherry picked from commit 5a9ecad9172f76ca1b94b40aedcdd49d009aceb1)
* Removed audit CLI from non-TPS subsystems.Endi S. Dewata2015-07-171-2/+0
| | | | | | | | | | Due to database upgrade issue the pki <subsystem>-audit CLI has been removed from all subsystems except TPS. The AuditModifyCLI has been modified to clarify that the --action and the --input parameters are mutually exclusive. https://fedorahosted.org/pki/ticket/1437
* Removed unnecessary EBaseException constructor.Endi S. Dewata2015-01-211-11/+0
| | | | | | | | | The EBaseException(String msgFormat, String param) constructor has been removed because it's only used once and can be substituted with another constructor. All subclasses of EBaseException have been updated accordingly. https://fedorahosted.org/pki/ticket/915
* Changes to KeyClient on the java side.Abhishek Koneru2014-03-191-4/+2
| | | | | The KeyClient class on the java side is modified to have a similar design as the KeyClient class on the python side.
* Updated REST interface for keys.Endi S. Dewata2014-02-191-140/+2
| | | | | | | | | The REST interface for keys has been modified to return Response objects to allow better handling of server responses. Key-related methods in KRAClient have been moved into KeyClient. The DRMTest has been updated accordingly. Ticket #554
* Added REST client for system certificates.Endi S. Dewata2014-02-191-11/+2
| | | | | | A new REST client has been added to access system certificates. Ticket #554
* Replaced deprecated ClientResponse class.Endi S. Dewata2014-02-101-21/+11
| | | | | | | The ClientResponse class has been deprecated in RESTEasy 3.0, so most of the code using the class has been modified to use the Response class instead. There are a few remaining references to ClientResponse. They will be removed separately later.
* Fix minor issues from review.Ade Lee2014-02-101-2/+2
| | | | | | 1. Use size/keySize consistently, instead of strength. 2. Change to using Integer instead of int in SymKeyGenerationRequest. 3. Fix error message.
* Change the return type for KeyRequest creation operationsAde Lee2014-02-101-8/+10
| | | | | | We will likely want to extend the REST API to allow the immediate return of a generated key, and perhaps of a recovered key in a single step. This change allows us to do that.
* Fix DRM archival, recovery and generation for non-DES3 keys.Ade Lee2014-02-041-1/+3
| | | | | | | | | | | In the archival, recovery and generation code for symmetric keys, we use functions that require knowledge of the symmetric keys algorithm and key size. These were hardcoded to DES3, and so only DES3 worked. We added those parameters to the archival request, save them in the KeyRecord and retrive them when recovering the key. Tests have been added to DRMTest for the relevant usages.
* Address review commentsAde Lee2014-02-041-7/+7
| | | | | | | | | 1. Remove Link attribute from ResourceMessage, 2. Rename KeyDataInfo and KeyDataInfoCollection. 3. Move KEYGEN_ALGORITHMS 4. Fix missing space in PKIException 5. Move properties to attributes in ResourceMessage 6. Add missing code to update the request and set IRequest.RESULT
* Rename KeyRequest to ResourceMessageAde Lee2014-02-041-4/+0
| | | | | | Refactor ResourceMessage to include classname instead of Request Type. Also changed PKIException.Data to extend ResourceMessage. Modifications to the server code to get the tests working.
* Added more client code for DRM testsAde Lee2014-02-041-2/+17
|
* Rename KeyDataInfos and KeyrequestInfosAde Lee2014-02-041-4/+4
|
* Add new POST endpoint for creating requestsAde Lee2014-02-041-3/+6
|
* REST interface extensionAndrew Wnuk2013-11-181-0/+22
| | | | | | This patch provides REST interface extension allowing recovery of asymmetric keys. Ticket #439.
* Fixed problem with key-find.Endi S. Dewata2013-11-151-1/+1
| | | | | | The key-find command did not return any results due to recent changes. The method name in KeyDataInfos has been fixed such that XML mapping would work properly.
* Added paging on all find commands.Endi S. Dewata2013-11-141-2/+2
| | | | | | The find commands in some REST services have been modified to support paging to be consistent with others. The other find commands have been cleaned up as well.
* Fix KeyRequest and Key Resources to return correct exit codesAde Lee2013-11-061-4/+8
| | | | Also added some missing checks, and some missing options in the Key Request CLI
* Added audit resource.Endi S. Dewata2013-10-081-0/+2
| | | | | | | A new REST service and clients have been added to manage the audit configuration in all subsystems. Ticket #652
* Added selftest resource.Endi S. Dewata2013-10-081-0/+2
| | | | | | | New REST service and clients have been added for managing selftests in all subsystems. Ticket #652
* Added subsystem group commands.Endi S. Dewata2013-08-241-0/+2
| | | | | | | The group client and CLI has been added into each subsystem (e.g. ca-group-*) while keeping the original command for backward compatibility. Ticket #652
* Reorganized CLI user commands.Endi S. Dewata2013-08-231-0/+4
| | | | | | | | New CLI modules have been added for each subsystem. The user commands have been added to these subsystems while keeping the original command for backward compatibility. Ticket #701
* Refactored client framework.Endi S. Dewata2013-08-231-12/+7
| | | | | | | | | A new Client class was added as a base for all client classes. The SubsystemClient was added as a base for all subsystem clients. It also provides methods to authenticate against the subsystem. The DRMClient has been renamed to KRAClient to match the actual subsystem name. Ticket #701
* Refactored code to import CA certificate.Endi Sukma Dewata2013-04-251-11/+10
| | | | | | | | | | | | | The code to import CA certificate has been moved from PKIConnection into PKIClient to allow reuse. The Client classes have been modified such that it uses a shared PKIClient object instead of PKIConnection. The return codes in CertFindCLI has been fixed to be more consistent with other commands. Ticket #491
* Added PKIConnection.Endi Sukma Dewata2012-10-181-0/+9
| | | | | | | | | The code in PKIClient has been refactored into PKIConnection such that a single connection object can be used by several REST clients. The PKIClient will remain the base class for all REST clients. Ticket #357
* Moved REST CLI into pki-tools.Endi Sukma Dewata2012-08-291-0/+130
| | | | | | | | | | The pki-client.jar has been split and merged into pki-certsrv.jar and pki-tools.jar. The REST client classes are now packaged in com.netscape.certsrv.<component> packages. The REST CLI classes are now packaged in com.netscape.cmstools.<component> packages. The "pki" script has been moved into pki-tools RPM package. Ticket #215
* Removed whitespaces from Java code.Endi Sukma Dewata2012-04-098-74/+74
| | | | | | | | Whitespaces in Java code have been removed with the following command: find . -not -path .git -name *.java -exec sed -i 's/[[:blank:]]\+$//' {} \; Ticket #134
* Removed unnecessary pki folder.Endi Sukma Dewata2012-03-268-0/+1245
Previously the source code was located inside a pki folder. This folder was created during svn migration and is no longer needed. This folder has now been removed and the contents have been moved up one level. Ticket #131
generated by cgit (git 2.34.1) at 2024-06-19 20:05:26 +0000