summaryrefslogtreecommitdiffstats
path: root/base/common/src/com
Commit message (Collapse)AuthorAgeFilesLines
...
* Fix identities for security data storage, retrieval and generationAde Lee2014-06-131-0/+3
| | | | | | | | | | | | For the new security data storage and retrieval, and for symmetric key generation, we need to store the identity of the agent that is requesting and approving each operation, both in the ldap record and in the audit logs. (Tickets 806 and 807) This patch also adds required logic to check that the owner of the recovery request is the same agent that retrieves the key. It also adds missing audit log constants for symmmetric key generation so that they will show up in the audit log.
* Removed requestID parameter usage in [un]revoke request.Abhishek Koneru2014-05-164-148/+3
| | | | | | | | | | | | | | | | There seems to be no use of the requestID parameter in both revoke and unrevoke request. Removed requestID attribute in CertRevokeRequest remove the class CertUnrevokeRequest. Also made changes in RevocationProcesor to use the requestID of the request created in it. The setRequestID() is being called in the DoRevoke and DoUnRevoke servlets. Removed the call and a function auditRequesterId in both the classes. The auditRequestorId method tries to get a "requestID" stored as a INPUT field in the reasonToRequest page. The ReasonToRevoke class which generates this page does not set the value.
* Renamed TPS connection to TPS connector (part 4).Endi S. Dewata2014-05-082-28/+28
| | | | | | The TPS connection REST service has been renamed to TPS connector. Ticket #977
* Renamed TPS connection to TPS connector (part 3).Endi S. Dewata2014-05-085-45/+45
| | | | | | The TPS connection client library has been renamed to TPS connector. Ticket #977
* Added filter to UserService.findUserMemberships().Endi S. Dewata2014-05-083-3/+5
| | | | | | | | The UserService.findUserMemberships() has been modified to accept an additional parameter to filter the groups in which the user is a member. The CLI has been updated accordingly. Ticket #920
* Added filter to GroupService.findGroupMembers().Endi S. Dewata2014-05-082-2/+7
| | | | | | | | The GroupService.findGroupMembers() has been modified to accept an additional parameter to filter the group members to be returned. The CLI has been modified accordingly. Ticket #920
* Fixed message format for PKIException.Endi S. Dewata2014-05-071-14/+0
| | | | | | | | | | | Previously PKIException was not displayed properly in browser because it doesn't have a writer for HTML. Now the exception mapper will compute the message format properly, and will default to XML. The exception mapper itself has been moved into a server package due to class dependency. The REST application classes have been updated accordingly. Ticket #554
* Fixed UGSubsystem.getUser().Endi S. Dewata2014-05-051-3/+3
| | | | | | | | | | Previously the getUser() method in UGSubsystem was using findUsers() which uses a subtree search to find users. It has been replaced with a base search which is more accurate since the user DN is known. The code has also been simplified to merge the two cases where the input parameter could be a user ID or a DN. Ticket #920
* Fixed TPS connector configuration.Endi S. Dewata2014-04-302-14/+44
| | | | | | | | | | | | | | | | | | | | The code that configures the TPS connectors during installation has been modified to use the ConnectionDatabase, which is also used by the CLI/UI after the installation. The code has also been fixed to configure the correct properties as defined in CS.cfg. The static properties have been removed from CS.cfg because now they will be generated dynamically by the ConnectionDatabase. Due to class dependency issue, the methods for configuring the TPS connectors have been moved from ConfigurationUtils into a new TPSInstaller class. The URI's in ConfigurationRequest have been converted from String into URI to simplify validation. Ticket #890
* Updated REST interface for security domain.Endi S. Dewata2014-04-282-4/+13
| | | | | | | The REST interface for security domain has been modified to return Response objects to allow better handling of server responses. Ticket #554
* Added group members table in TPS UI.Endi S. Dewata2014-04-222-2/+4
| | | | | | | | | | A new table has been added to the group page in TPS UI for managing the group members. The addGroupMember() method in group REST interface has been fixed to accept JSON request properly. Ticket #654
* Fixed user's name in TPS UI.Endi S. Dewata2014-04-213-3/+220
| | | | | | | | | | | | | | | | Previously the user's name displayed in the top right corner of the TPS UI was hardcoded to Administrator. It has been fixed to display the full name of the authenticated user obtained from the server. The login() method in the account REST service has been modified to return the account information about the user and the roles in which the user belongs. This information can later be used to further customize the behavior of the UI based on the authorization data. The PKIRealm has been modified to store the authenticated user info in the PKI principal. Ticket #654
* Fixes for comments on patches 87 and 89Abhishek Koneru2014-04-166-28/+80
|
* Added new CLI commands for Key resource.Abhishek Koneru2014-04-161-0/+21
| | | | | key-archive, key-retrieve, key-recover, key-generate, key-request-review, key-template-show, key-template-find
* New CLI commands for Key and KeyRequest resources.Abhishek Koneru2014-04-161-1/+1
| | | | | This patch adds three new CLI commands - KeyShowCLI, KeyRequestShowCLI, KeyModifyCLI
* Added enable/disable functionality for TPS audit.Endi S. Dewata2014-04-153-11/+29
| | | | | | | | | A new method has been added to TPS audit REST service to enable or disable audit logging. The CLI and UI have been modified to provide a way to acces this functionality. Also, new ACL entries have been added for audit. Ticket #955
* Added change token status dialog.Endi S. Dewata2014-04-153-24/+83
| | | | | | | | | | | | | | | | | A new dialog has been added to change the token status. The status can be changed by clicking the Status value in the tokens table. Initially the status is Uninitialized. The status can be changed according to the allowed status transitions defined in the CS.cfg. The status and reason fields in TokenRecord is now translated into a single status field in TokenData. This way the UI only needs to handle a single status field. A new field has also been added to the database for token type. Some issues displaying and updating some token attributes have been fixed as well. Ticket #654
* Added general configuration page.Endi S. Dewata2014-04-082-24/+13
| | | | | | | | | | | | | | | | | | | A new page has been added to manage general TPS configuration properties. The properties are read-only by default. In edit mode the property name will become a link which will show a dialog to edit the property value. The config REST service has been updated to use PATCH for update operation and handle possible null collection of properties. Fixed a bug in TableItem.reset() where the code didn't clear the table cell properly. Fixed a bug in ConfigDatabase.getProperties() where the code didn't handle null property key properly. Ticket #654
* Added audit page.Endi S. Dewata2014-04-082-100/+40
| | | | | | | | | | A new page has been added to the TPS UI to manage audit configuration. The audit REST service has been modified to use PATCH like the other services. The audit events will now have 3 possible values: mandatory, enabled, disabled. Mandatory events cannot be edited. Optional events can be edited in edit mode. Ticket #654
* Added profile mapping page.Endi S. Dewata2014-04-082-24/+9
| | | | | | | | A new profile mapping page has been added to TPS UI. The page is fully functional like other existing pages. The REST service for profile mappings has been updated to be more consistent with other resources. Ticket #654
* Share subsystem cert in shared tomcat instancesAde Lee2014-03-311-0/+45
| | | | | | | | | | In shared tomcat instances, we need to share the subsystem cert and not create a new one for each additional subsystem added to the instance. In addition, if the instances share the same database, then only one pkidbuser should be created with the relevant subsystem cert and seeAlso attribute. Ticket 893
* Refactoring KeyClient class and crypto classes.Abhishek Koneru2014-03-314-74/+209
|
* Refactored TPS authenticators.Endi S. Dewata2014-03-292-24/+9
| | | | | | | | | | The TPS authenticators has been modified to use PATCH for update operation as required by Backbone. The AuthenticatorData class has been modified to accept null properties to indicate that the properties are not being updated. The AuthenticatorModel class has been modified to use JSON data type for enable and disable operations. Ticket #654
* Refactored TPS connections.Endi S. Dewata2014-03-292-24/+9
| | | | | | | | | | The TPS connections has been modified to use PATCH for update operation as required by Backbone. The ConnectionData class has been modified to accept null properties to indicate that the properties are not being updated. The ConnectionModel class has been modified to use JSON data type for enable and disable operations. Ticket #654
* Refactored TPS profiles.Endi S. Dewata2014-03-292-24/+9
| | | | | | | | | | The TPS profile has been modified to use PATCH for update operation as required by Backbone. The ProfileData class has been modified to accept null properties to indicate that the properties are not being updated. The ProfileModel class has been modified to use JSON data type for enable and disable operations. Ticket #654
* Added details page for TPS authenticators.Endi S. Dewata2014-03-291-0/+3
| | | | | | | | | | | | | | A new page has been added to view TPS authenticator details. The properties are displayed in a table which provides pagination and search functionality. Currently the page is read-only. The edit functionality will be added separately later. Previously the AuthenticatorData had a problem with JSON mapping because it incorrectly included a PropertyNames attribute. To fix the problem the class has been modified to require explicit JAXB mapping by setting the @XmlAccessorType to NONE. Ticket #654
* Added details page for TPS connections.Endi S. Dewata2014-03-291-0/+3
| | | | | | | | | | | | | | A new page has been added to view TPS connection details. The properties are displayed in a table which provides pagination and search functionality. Currently the page is read-only. The edit functionality will be added separately later. Previously the ConnectionData had a problem with JSON mapping because it incorrectly included a PropertyNames attribute. To fix the problem the class has been modified to require explicit JAXB mapping by setting the @XmlAccessorType to NONE. Ticket #654
* Added details page for TPS profiles.Endi S. Dewata2014-03-291-0/+3
| | | | | | | | | | | | | | | | A new page has been added to view TPS profile details. The properties are displayed in a table which provides pagination and search functionality. Currently the page is read-only. The edit functionality will be added separately later. Previously the ProfileData had a problem with JSON mapping because it incorrectly included a PropertyNames attribute. To fix the problem the class has been modified to require explicit JAXB mapping by setting the @XmlAccessorType to NONE. New CSS classes have been added to format the details page. Ticket #654
* trac ticket #862 HTTP connection factory multi-uri addendumChristina Fu2014-03-253-52/+12
|
* Changes to KeyClient on the java side.Abhishek Koneru2014-03-199-100/+823
| | | | | The KeyClient class on the java side is modified to have a similar design as the KeyClient class on the python side.
* Added search filter for TPS resources.Endi S. Dewata2014-03-1918-39/+44
| | | | | | | | | | | | | | | | | | The TPS resources have been modified to accept a basic search filter for find operation. For resources based on LDAP database, the filtering is done using LDAP filter. For other resources, the filtering is done using string comparison. For now the filter is will only be matched against entry IDs. In the future the filter may be expanded to support other entry attributes. The CLI has been updated accordingly. The total attribute in DataCollection was changed from Integer into int because the total size of the collection cannot be null. The PKIException constructors have been consolidated into a single actual constructor. The other constructors have been modified to call the actual constructor with some default values. Ticket #847
* trac ticket #862 - TPS rewrite: provide connector service for JAVA-based TPS ↵Christina Fu2014-03-066-2/+100
| | | | subsystem
* Fixed CLI exceptions.Endi S. Dewata2014-03-061-8/+12
| | | | | | | | | | | Previously if the CLI requires SSL but the security database doesn't exist it would throw an IOException. Now it has been replaced with an Error. The exception handler also has been modified to generate better error messages. Ticket #821
* First cut at Java TPS Buffer class and APDU class.Jack Magne2014-03-052-199/+0
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | 1. Also simple framework for working with APDU command. 2. Implemented a few APDU commands in TPS_Processor class. 3. Can now attempt a format operation with TPS client. The code can performa a few apdu's talking to the client and return a success "EndOp" apdu to terminate the conversation. 4. APDU are being encoded/decoded properly to appease tpsclient. More info. 1. Patch is large but most of it consists of many similar apdu and msg classes. 2. APDU and msg classes are now bare bones and may need more work. Will address when class is needed. 3. A test tpsclient script call it (format.tst) to test this out is as follows: op=var_set name=ra_host value=localhost op=var_set name=ra_port value=8080 op=var_set name=ra_uri value=/tps/tps op=token_set cuid=40906145C76224192D2B msn=0120304 app_ver=6FBBC105 key_info=0101 major_ver=1 minor_ver=1 op=token_set auth_key=404142434445464748494a4b4c4d4e4f op=token_set mac_key=404142434445464748494a4b4c4d4e4f op=token_set kek_key=404142434445464748494a4b4c4d4e4f op=ra_format uid=jmagne pwd=redhat new_pin=rehat num_threads=1 op=exit 4: Execute as follows: tpsclient < format.tst
* Removed @Consumes and @Provides.Endi S. Dewata2014-03-0422-206/+0
| | | | | | | | The @Consumes and @Provides annotations have been removed from all methods (except from methods that consume forms) to allow client to use the default consumes and provides specified in the proxy. Ticket #554
* Added CLI parameter to select message format.Endi S. Dewata2014-03-044-1/+39
| | | | | | | | | | | A new CLI parameter has been added to allow the user select the REST message format. This is done by setting the default consumes and produces when creating the client proxy. For this to work the hard-coded @Consumes and @Produces annotations need to be removed from the interface definition. A new interceptor has been added to validate the message format before executing the operation. Ticket #554
* Cannot unmarshall *Request objects to ResourceMessage object.Abhishek Koneru2014-03-031-0/+6
| | | | | | | | | | When using XML for communicating with the server, the JAXBContext is not able to unmarshall KeyArchivalRequest,KeyRecoveryRequest, SymKeyGenerationRequest objects as it does not recognize them to be subclasses of ResourceMessage. Adding a @XmlSeeAlso attribute to the ResourceMessage class will let the JAXBContext to know that the subclasses are binded to the super class and unmarshalls the *Request objects. No problems were found when using JSON to communicate with the server.
* Upgraded RESTEasy client library.Endi S. Dewata2014-02-273-91/+50
| | | | | | | | | | The Dogtag client library has been modified to use RESTEasy 3.0 client library. A new upgrade script has been added to update existing servers. The JAXB annotation in ResourceMessage has been modified to require explicit property mapping. Ticket #554
* Add ability to archive without sending pkiArchiveOptions object.Ade Lee2014-02-263-4/+109
| | | | | | With this patch, you can now either send a pkiArchiveOptions object or the exploded parameters. This reduces the processing required on the client side.
* Added error checking in python client callsAde Lee2014-02-262-1/+22
| | | | | | | | | 1) Added error checking in python client calls. 2) Allow symmetric key generation with default params. Fix bug for when usages is not defined. 3) Fix bug when requesting key recovery - must check if key exists. 4) Extend key gen to allow for providing trans_wrapped_session_key 5) added constants to python client for key status
* reame client_id to client_key_idAde Lee2014-02-267-40/+40
|
* Add methods to getKeyInfo and change key statusAde Lee2014-02-193-0/+86
|
* Updated REST interface for key requests.Endi S. Dewata2014-02-192-11/+20
| | | | | | | The REST interface for key requests has been modified to return Response objects to allow better handling of server responses. Ticket #554
* Updated REST interface for keys.Endi S. Dewata2014-02-193-150/+115
| | | | | | | | | The REST interface for keys has been modified to return Response objects to allow better handling of server responses. Key-related methods in KRAClient have been moved into KeyClient. The DRMTest has been updated accordingly. Ticket #554
* Added REST client for system certificates.Endi S. Dewata2014-02-192-11/+50
| | | | | | A new REST client has been added to access system certificates. Ticket #554
* Updated REST interface for CA profiles.Endi S. Dewata2014-02-193-30/+20
| | | | | | | The REST interface for CA profiles has been modified to return Response objects to allow better handling of server responses. Ticket #554
* Fix eclipse warnings.Ade Lee2014-02-191-5/+0
|
* Updated REST interface for TPS tokens.Endi S. Dewata2014-02-182-6/+12
| | | | | | | The REST interface for TPS tokens has been modified to return Response objects to allow better handling of server responses. Ticket #554
* Updated REST interface for TPS profile mappings.Endi S. Dewata2014-02-182-6/+12
| | | | | | | The REST interface for TPS profile mappings has been modified to return Response objects to allow better handling of server responses. Ticket #554
* Updated REST interface for TPS profiles.Endi S. Dewata2014-02-182-6/+12
| | | | | | | The REST interface for TPS profiles has been modified to return Response objects to allow better handling of server responses. Ticket #554
generated by cgit (git 2.34.1) at 2025-09-28 08:30:48 +0000