pki.git - Unnamed repository; edit this file 'description' to name the repository.

	Commit message (Collapse)	Author	Age	Files	Lines
*	Added AuthMapping annotation.ticket-477-1	Endi Sukma Dewata	2013-02-02	2	-0/+4
\| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \|	A new AuthMapping annotation has been added to configure the required authentication methods to acces each REST method. The annotation maps each method into a list of authentication methods in auth.properties. For security reason, most REST methods that require authentication have been configured to require client certificate authentication. Authentication using username and password will only be used to get installation token from the security domain. Previously the auth.properties files were used to store ACL mappings. Now the ACL mappings have been moved into acl.properties. Ticket #477
*	Added ACLInterceptor.	Endi Sukma Dewata	2012-11-08	2	-0/+6
\| \| \| \| \| \| \| \| \|	Previously ACL checking was done in PKIRealm by matching the URL. This code has been replaced by ACLInterceptor which will intercept RESTEasy method invocations. This allows more precise mapping of REST methods to ACL entries in acl.ldif. Ticket #287
*	Added PKIConnection.	Endi Sukma Dewata	2012-10-18	1	-0/+9
\| \| \| \| \| \| \| \| \|	The code in PKIClient has been refactored into PKIConnection such that a single connection object can be used by several REST clients. The PKIClient will remain the base class for all REST clients. Ticket #357
*	Moved REST CLI into pki-tools.	Endi Sukma Dewata	2012-08-29	1	-0/+83
\| \| \| \| \| \| \| \| \| \|	The pki-client.jar has been split and merged into pki-certsrv.jar and pki-tools.jar. The REST client classes are now packaged in com.netscape.certsrv.<component> packages. The REST CLI classes are now packaged in com.netscape.cmstools.<component> packages. The "pki" script has been moved into pki-tools RPM package. Ticket #215
*	Moved REST services into separate URLs.	Endi Sukma Dewata	2012-08-03	2	-7/+7
\| \| \| \| \| \| \| \| \| \| \|	To support different access control configurations the REST services have been separated by roles. Services that don't need authentication will be available under /rest. Services that require agent rights will be available under /rest/agent. Services that require admin rights will be available under /rest/admin. Ticket #107
*	Added cert revocation REST service.	Endi Sukma Dewata	2012-07-11	1	-6/+9
\| \| \| \| \| \| \|	The cert revocation REST service is based on DoRevoke and DoUnrevoke servlets. It provides an interface to manage certificate revocation. Ticket #161
*	Added user REST service.	Endi Sukma Dewata	2012-05-31	6	-0/+750
	The user REST service is based on UsrGrpAdminServlet. It provides an interface to manage users and user certificates. Ticket #160