summaryrefslogtreecommitdiffstats
path: root/base/common/src/com/netscape/cms/servlet/cert/RequestProcessor.java
Commit message (Collapse)AuthorAgeFilesLines
* Session-based nonces.ticket-474-2Endi Sukma Dewata2013-01-301-32/+19
| | | | | | | | | | | | | | | | | | | | | | | Previously nonces were stored in a global map which might not scale well due to some issues: 1. The map uses the nonces as map keys. There were possible nonce collisions which required special handling. 2. The collision handling code was not thread safe. There were possible race conditions during concurrent modifications. 3. The map was shared and size limited. If there were a lot of users using the system, valid nonces could get pruned. 4. The map maps the nonces to client certificates. This limits the possible authentication methods that can be supported. Now the code has been modified such that each user has a private map in the user's session to store the nonces. Additional locking has been implemented to protect against concurrent modifications. The map now uses the target of the operation as the map key, eliminating possible collisions and allowing the use of other authentication methods. Since this is a private map, it's not affected by the number of users using the system. Ticket #474
* number verificationAndrew Wnuk2012-12-061-1/+5
| | | | | | This patch improves number verification. Bug 864397.
* Reorganized REST common classes.Endi Sukma Dewata2012-08-151-6/+6
| | | | | | | The common classes used by REST client and services have been moved into the com.netscape.certsrv.<component> packages. Ticket #215
* Reorganized REST server classes.Endi Sukma Dewata2012-08-151-2/+1
| | | | | | | The factory and DAO classes used by REST services have been moved into the com.netscape.cms.servlet.<component> packages. Ticket #215
* Cleaned up REST common class names.Endi Sukma Dewata2012-08-151-7/+7
| | | | | | | The REST common classes have been renamed for better clarity and consistency. Ticket #259
* Cleaned up REST server class names.Endi Sukma Dewata2012-08-151-2/+2
| | | | | | | The REST server classes have been renamed for better clarity and consistency. Ticket #259
* Cert CLI - cert-request-review and cert-request-approve implementationsAbhishek Koneru2012-07-301-1/+0
|
* Adding restful interface to create certificate requests and issue certificates.Ade Lee2012-07-031-0/+475
Refactored ProfileSubmitServlet to make the flow clearer. Both the legacy servlets and the new RESTful servlets use common ProfileProcessor objects that contain the main business logic, so that the amount of duplicated code is minimized. Refactored ProfileProcessServlet to use the new common classes. Addressed review comments. Removed an unneeded class and reverted some unneeded jaxb annotations. Added factory methods.