summaryrefslogtreecommitdiffstats
path: root/base/common/src
Commit message (Collapse)AuthorAgeFilesLines
...
* Fix minor issues from review.Ade Lee2014-02-105-26/+26
| | | | | | 1. Use size/keySize consistently, instead of strength. 2. Change to using Integer instead of int in SymKeyGenerationRequest. 3. Fix error message.
* Change the return type for KeyRequest creation operationsAde Lee2014-02-104-12/+60
| | | | | | We will likely want to extend the REST API to allow the immediate return of a generated key, and perhaps of a recovered key in a single step. This change allows us to do that.
* Add strength and algorithm to KeyData and KeyInfo classesAde Lee2014-02-102-5/+39
| | | | | | Make sure these are updated so that clients can get this information when accessing a symmetric key. Also allow a default for generation requests (but not for archival requests).
* Fix DRM archival, recovery and generation for non-DES3 keys.Ade Lee2014-02-046-12/+53
| | | | | | | | | | | In the archival, recovery and generation code for symmetric keys, we use functions that require knowledge of the symmetric keys algorithm and key size. These were hardcoded to DES3, and so only DES3 worked. We added those parameters to the archival request, save them in the KeyRecord and retrive them when recovering the key. Tests have been added to DRMTest for the relevant usages.
* Address review commentsAde Lee2014-02-0415-141/+117
| | | | | | | | | 1. Remove Link attribute from ResourceMessage, 2. Rename KeyDataInfo and KeyDataInfoCollection. 3. Move KEYGEN_ALGORITHMS 4. Fix missing space in PKIException 5. Move properties to attributes in ResourceMessage 6. Add missing code to update the request and set IRequest.RESULT
* Rename KeyRequest to ResourceMessageAde Lee2014-02-0414-152/+109
| | | | | | Refactor ResourceMessage to include classname instead of Request Type. Also changed PKIException.Data to extend ResourceMessage. Modifications to the server code to get the tests working.
* Added more client code for DRM testsAde Lee2014-02-044-15/+68
|
* Rename KeyDataInfos and KeyrequestInfosAde Lee2014-02-046-16/+16
|
* Added SymKeyGen serviceAde Lee2014-02-042-9/+76
|
* Remove old recovery and archival methodsAde Lee2014-02-041-31/+0
|
* Add new POST endpoint for creating requestsAde Lee2014-02-046-11/+123
|
* Use a generic request objectAde Lee2014-02-044-86/+274
| | | | | Refactored KeyRequest API to use requests containing a generic request object.
* Fixed TPS resource statuses.Endi S. Dewata2014-01-307-10/+57
| | | | | | | | TPS resources that are stored in CS.cfg have been refactored to update their statuses properly. These resources include profiles, profile mappings, connections, and authenticators. Ticket #654
* Added dialog for adding TPS tokens.Endi S. Dewata2014-01-281-0/+52
| | | | | | | | A new dialog box has been added for adding TPS token. A separate token ID attribute has been added to the REST service as required by Backbone. Ticket #654
* External Registration feature merge (excluding TPS portion due to current ↵Christina Fu2014-01-231-0/+1
| | | | | | TPS-rewrite effort): http://pki.fedoraproject.org/wiki/TPS_-_New_Recovery_Option:_External_Registration_DS
* Added dialog for adding TPS groups.Endi S. Dewata2013-12-161-0/+23
| | | | | | | | A new dialog box has been added for adding TPS groups. A separate group ID attribute has been added to the REST service as required by Backbone. Ticket #654
* Added dialog for adding TPS users.Endi S. Dewata2013-12-161-0/+22
| | | | | | | | | A new dialog box has been added for adding TPS users. Backbone requires that a separate attribute is used to specify the user ID (instead of id) when creating new users, so a new userID field has been added to the backend service as well. Ticket #654
* Using PATCH method for modify operations.Endi S. Dewata2013-12-166-158/+52
| | | | | | | | | | Some modify operations have been modified to use HTTP PATCH method since the request only contains changes to the resource, not the entire resource. To replace the entire resource, separate replace operations using HTTP PUT method will be used instead. The Backbone library is using the same convention by default. Ticket #654
* Added TPS UI skeleton.Endi S. Dewata2013-12-061-1/+1
| | | | | | | An inititial implementation of TPS UI has been added. The UI will display TPS resources as tables. Ticket #654
* Moved cmsbundle into server folder.Endi S. Dewata2013-12-054-3705/+0
| | | | | The pki-cmsbundle.jar is distributed in pki-server package so the files have been moved into the base/server folder.
* Added ACL for TPS profile mapping.Endi S. Dewata2013-11-191-0/+8
| | | | | | | New ACL has been added to allow only the administrators to access TPS profile mappings. Ticket #652
* REST interface extensionAndrew Wnuk2013-11-183-0/+71
| | | | | | This patch provides REST interface extension allowing recovery of asymmetric keys. Ticket #439.
* Fixed problem with key-find.Endi S. Dewata2013-11-152-2/+2
| | | | | | The key-find command did not return any results due to recent changes. The method name in KeyDataInfos has been fixed such that XML mapping would work properly.
* Added client-init command.Endi S. Dewata2013-11-152-4/+1
| | | | | A new CLI command has been added to simplify the creation of client certificate database.
* Updated ACL and auth method mapping names.Endi S. Dewata2013-11-159-43/+43
| | | | | The ACL and auth method mapping names in some resources have been modified to be more consistent with those in other resources.
* Added ACL for TPS selftests.Endi S. Dewata2013-11-141-0/+6
| | | | | | | New ACL has been added to allow only the administrators to access TPS selftests. Ticket #652
* Added ACL for TPS connections.Endi S. Dewata2013-11-141-0/+8
| | | | | | | New ACL has been added to allow only the administrators to access TPS connections. Ticket #652
* Added ACL for TPS configuration.Endi S. Dewata2013-11-141-0/+6
| | | | | | | New ACL has been added to allow only the administrators to access TPS configuration. Ticket #652
* Added ACL for TPS authenticators.Endi S. Dewata2013-11-141-0/+8
| | | | | | | | | | New ACL has been added to allow only the administrators to access TPS authenticators. The set of interceptors in each application has been modified to preserve the order. Ticket #652
* Added paging on all find commands.Endi S. Dewata2013-11-1417-424/+84
| | | | | | The find commands in some REST services have been modified to support paging to be consistent with others. The other find commands have been cleaned up as well.
* Fixed find commands.Endi S. Dewata2013-11-088-151/+36
| | | | | | | | | | | Some of the REST services have been fixed to consistently return a DataCollection which contains the total count, the requested subset of results, and links to request other subsets of the results. The TPSConnectorFindCLI has been split into separate find and show commands. Ticket #749
* Fixed return code for user and group services.Endi S. Dewata2013-11-073-18/+10
| | | | | | | | | The user and group services have been modified to return consistent HTTP return codes under various situations. The UGSubsystem has been modified to capture any LDAP exceptions and throw the proper PKIException subclass that represents the appropriate HTTP error code for the situation. Ticket #669, #749
* Added checks for CertRequest and Cert ResourcesAde Lee2013-11-071-15/+15
| | | | Ticket 749
* Fix KeyRequest and Key Resources to return correct exit codesAde Lee2013-11-062-8/+19
| | | | Also added some missing checks, and some missing options in the Key Request CLI
* Modify profile resource to return correct response for create or modify opAde Lee2013-11-063-6/+35
| | | | Ticket 749
* Added TPS profile resource.Endi S. Dewata2013-11-045-0/+438
| | | | | | | A new REST service and clients have been added to manage the profiles in the TPS configuration file. Ticket #652
* Removed duplicate ACL classes.Endi S. Dewata2013-11-012-30/+30
| | | | | | | The ACL and ACLEntry in com.netscape.cmscore.realm are duplicates of the ones in com.netscape.certsrv.acls. They have been removed since they are no longer used. All differences have been merged into the remaining copy.
* Fixed tests dependencies.Endi S. Dewata2013-10-311-2/+11
| | | | | The test classes have been moved from base/common/test to base/server/test and into the cmscore package because they are dependent on server classes.
* Fixed errors during Tomcat shutdown.Endi S. Dewata2013-10-281-0/+17
| | | | | | | | | Previously the CMS.shutdown() was called multiple times during Tomcat shutdown, one by CMSStarServlet.destroy() and the other by the shutdown hook, causing some errors. The shutdown hook should only be used in a standalone application, so it has been moved into CMS.main(). Bugzilla #1018628
* Added access control for TPS token.Endi S. Dewata2013-10-281-0/+9
| | | | | | | The TPS token REST interface has been modified to require client certificate authentication. TPS admins, agents, and operators are allowed to view tokens, but only admins are allowed to add and remove tokens, and only agents are allowed to modify tokens.
* Cleaned up CertEnrollmentRequest.Endi S. Dewata2013-10-254-136/+242
| | | | | The CertEnrollmentRequest, ProfileInput, ProfileAttribute, and Descriptor have been cleaned up to fix some bugs and minor formatting issues.
* Reorganized server packages.Endi S. Dewata2013-10-25646-221446/+0
| | | | | The tomcat, cms, and cmscore packages have been moved from base/common into separate folders in base/server so that they can be built separately.
* Fixed problems finding user and group sub-resources.Endi S. Dewata2013-10-2513-1035/+716
| | | | | | | Due to a regression RESTEasy is unable to find some sub-resources properly. As a workaround some resources need to be merged into the parent resource. The UserCertResource and UserMembershipResource have been merged into UserResource. The GroupMemberResource has been merged into GroupResource.
* Reorganized PKIPrincipal.Endi S. Dewata2013-10-257-7/+6
| | | | | The PKIPrincipal is in cmscore package but it's needed by the REST services in cms package so the class has been moved into cms package.
* Refactored authentication managers.Endi S. Dewata2013-10-255-21/+79
| | | | | | | The CertUserDBAuthentication and PasswdUserDBAuthentication are authentication managers in cmscore package but they are needed by PKIRealm that is now in cms package, so new interfaces have been refactored from these classes so they can be used without causing dependency issue.
* Reorganized PKIRealm class.Endi S. Dewata2013-10-252-2/+3
| | | | | PKIRealm has been moved from pki-cmscore into pki-cms package because it's needed by CMSStartServlet which is in the pki-cms package.
* Stand-alone DRMMatthew Harmsen2013-10-153-51/+207
| | | | * TRAC Ticket #667 - provide option for ca-less drm install
* Fix correct ACL for profile REST interfaceAde Lee2013-10-091-0/+2
|
* fix auth and authz for Profiles REST APIAde Lee2013-10-092-5/+7
| | | | Ticket 727
* Added audit resource.Endi S. Dewata2013-10-0811-123/+678
| | | | | | | A new REST service and clients have been added to manage the audit configuration in all subsystems. Ticket #652