summaryrefslogtreecommitdiffstats
path: root/base/java-tools/src
Commit message (Collapse)AuthorAgeFilesLines
...
* Fix various issues with Profile InterfaceAde Lee2013-07-312-13/+62
| | | | | 1. Fixed REST API as per review. 2. Add output for profile-show and profile-find
* Fixed token authentication problem on RHEL.Endi S. Dewata2013-07-221-5/+39
| | | | | | | | The CryptoManager.initialize() and CryptoToken.login() invocation has been moved into the main program as a workaround for the authentication problem on RHEL and to ensure proper initialization in general. Bugzilla #985111
* Add interfaces for managing profilesAde Lee2013-07-229-0/+451
| | | | | This adds the initial framework for viewing and managing profiles. Also adds CLI code for viewing/adding/deleting and editing profiles.
* Reverting to old CLI behavior on client database initialization.Endi Sukma Dewata2013-04-281-43/+7
| | | | | | | | | Recently the CLI was changed to initialize the default client database automatically which will create it if it did not exist before. This was causing a problem since the database was not created with a password. To create the database properly a separate command is needed. For now the CLI is reverted to the old behavior where it initializes the database only if it requires for SSL connection and/or client authentication.
* Added separate CLI option for client database password.Endi Sukma Dewata2013-04-281-2/+10
| | | | | | | | Previously the -w option is used to specify the password for either the username/password authentication or client database password to do client certificate authentication. Since the passwords now may be used at the same time, a new -c option has been added for the client database password.
* Ignoring warnings/errors during installation.Endi Sukma Dewata2013-04-281-10/+6
| | | | | | | | The code used by pkispawn and pkidestroy has been modified to ignore certificate validity warnings/errors that happens during installation. The instanceCreationMode is now redundant and has been removed from ClientConfig.
* Added method to download CA cert chain from admin interface.Endi Sukma Dewata2013-04-261-10/+18
| | | | | | | | A new method has been added to the PKIClient to download the CA certificate chain from an alternative location including the admin interface. Ticket #491
* Updated default client database location for CLI.Endi Sukma Dewata2013-04-261-23/+33
| | | | | | | | The default client database location for CLI has been changed to ~/.dogtag/nssdb. The database will always be initialized regardless whether it is actually used. Ticket #491
* Added Client CLI module.Endi Sukma Dewata2013-04-256-1/+372
| | | | | | | A new CLI module has been added to manage certificates in client security database. Ticket #491
* Refactored code to import CA certificate.Endi Sukma Dewata2013-04-257-19/+33
| | | | | | | | | | | | | The code to import CA certificate has been moved from PKIConnection into PKIClient to allow reuse. The Client classes have been modified such that it uses a shared PKIClient object instead of PKIConnection. The return codes in CertFindCLI has been fixed to be more consistent with other commands. Ticket #491
* Check the actual result of operations cert revoke/unrevoke.Abhishek Koneru2013-04-234-21/+51
| | | | | | | | Output the actual result of a revoke/unrevoke operation in CLI. Since the actual result of the operation can be different from the cert request status. Ticket #217
* Added options to reject/ignore cert validity statuses.Endi Sukma Dewata2013-04-221-2/+45
| | | | | | | | New options have been added to the CLI to reject or ignore certain cert validity statuses such as UNTRUSTED_ISSUER or BAD_CERT_DOMAIN. The options can also be defined in pki.conf as a system-wide policy. Ticket #491
* Using FQDN instead of localhost in CLIEndi Sukma Dewata2013-04-191-4/+6
| | | | | | | The CLI has been modified such that by default it will use FQDN instead of localhost to avoid SSL certificate warnings. Ticket #541
* Remove [OPTIONS] from usage in commands with no options.Abhishek Koneru2013-04-1712-12/+12
| | | | | | | Remove the text [OPTIONS]... in user-show message, which misleads that there are other optional arguements. Ticket #543
* Change calls CMS.AtoB and CMS.BtoA on client side.Abhishek Koneru2013-03-282-7/+7
| | | | | | | | The PKCS10Client and CRMFPopClient use the CMS.BtoA and CMS.Atob for encoding and decoding purposes which throws an exception. Instead using the base64decode and the base64encode methods in Utils. Ticket #549
* Added CLI option to capture HTTP messages.Endi Sukma Dewata2013-03-221-3/+16
| | | | | | | A new option has been added to the CLI to capture HTTP requests and responses and store them in the specified folder. Ticket #523
* Plug resource leaksAde Lee2013-03-086-25/+21
|
* Clean up various eclipse warningsAde Lee2013-03-073-72/+55
|
* Added cert-request-show command.Endi Sukma Dewata2013-03-072-1/+63
| | | | | | | A new cert-request-show command has been added to allow EE users to check certificate request status. Ticket #511
* Added CLI to manage user membership.Endi Sukma Dewata2013-02-185-1/+230
| | | | | | | | New CLI's have been added to search, add, and remove user membership. The group member management code has been refactored into a processor to allow reuse. Ticket #190
* Added certificate status option for cert-find.Endi Sukma Dewata2013-02-121-0/+8
| | | | | | | The cert-find command has been modified to provide an option to search by certificate status. Ticket #501
* Additional output attributes for cert-find.Endi Sukma Dewata2013-02-072-10/+44
| | | | | | | | The cert-find command has been modified to include some additional attributes including certificate type and version, key algorithm name and length, validity dates, creation time and issuer. Ticket #498
* Fixed validity duration options for cert-find.Endi Sukma Dewata2013-02-071-6/+46
| | | | | | | | | The cert-find command has been fixed to show better error messages on missing validity duration options. The validity duration unit has been changed to take "day", "week", "month", or "year" and convert it into milliseconds. Ticket #291, #500
* Fixed date format for cert-find parameters.Endi Sukma Dewata2013-02-071-12/+18
| | | | | | | | All date parameters for cert-find have been modified to use the YYYY-MM-DD date format. Date parsing code in FilterBuilder has been modified not to ignore parsing errors. Ticket #497
* Merged cert-request-review/approve commands.Endi Sukma Dewata2013-02-043-96/+111
| | | | | | | The cert-request-approve has been merged into cert-request-review to ensure that these operations are executed in the same session. Ticket #474
* Ticket 419 - REST interface for cert requestsAde Lee2013-01-222-0/+145
|
* https://fedorahosted.org/pki/ticket/362 RFE: CMC ECCChristina Fu2013-01-155-379/+756
|
* Added nonce validation for certificate revocation.Endi Sukma Dewata2013-01-152-6/+9
| | | | | | | The certificate REST service has been modified to validate nonce when revoking a certificate. Ticket #213
* Resolved Trac Ticket 367 - pkidestroy does not remove connectorAde Lee2013-01-154-0/+223
| | | | | | | | | | | * Added RESTful servlet to add/remove a KRA connector from the CA. * Modified ACL to allow KRA subsystem user to remove connector. * Modified connector code to allow the connector to be replaced without a server restart. * Added functionality to pki CLI to add/remove connector * Added code to pkidestroy to remove the connector (using both pki CLI and sslget) When the issues with pki connection are resolved, we will use that method instead. * Modified sslget to accept HTTP return codes != 200. In this case, we were returning 204 - which is perfectly legitimate.
* Parameterizing RESTEasy paths.Endi Sukma Dewata2012-12-061-6/+3
| | | | | | | | | The paths to RESTEasy jar files have been modified such that it can be configured globally at build time using the spec file to support different distributions, and at deployment time using a system-wide configuration in /etc/pki/pki.conf. Ticket #422, #423.
* Fixed issuedOn parameters for cert-find.Endi Sukma Dewata2012-11-301-7/+24
| | | | | | | | The CertSearchRequest has been modified to fix the infinite loop in getIssuedOnTo(). The CertFindCLI has been modified to accept dates with format YYYY-MM-DD instead of epoch time. Ticket #416
* Misc changes to get rhel 7 build to workAde Lee2012-11-211-0/+3
| | | | | | | 1. Modified cmake dependency 2. Corrected conditionals in spec file 3. Added paths for resteasy-base 4. Added paths to policy for resteasy-base
* Change cmake projects from Java to NONEAde Lee2012-11-201-1/+1
|
* Removal of version numbers from jar file namesMatthew Harmsen2012-10-291-12/+2
| | | | * TRAC Ticket #350 - Dogtag 10: Remove version numbers from PKI jar files . . .
* Enabled authentication for key services.Endi Sukma Dewata2012-10-295-1/+341
| | | | | | | | The web.xml in KRA has been modified to enable the authentication for key and key request services. Some tools have been added to access the services via command-line. Ticket #376
* Added REST interface to get domain info.Endi Sukma Dewata2012-10-262-0/+93
| | | | | | | | The REST interface for security domain has been updated to provide a method to get the domain info. A CLI has been provided to access this method. Ticket #309
* Added REST account service.Endi Sukma Dewata2012-10-221-5/+29
| | | | | | | | | A REST account service has been added to allow client to login to establish a session and to logout to destroy the session. This way multiple operations can be executed using the same session without having to re-authenticate. Ticket #357
* Added PKIConnection.Endi Sukma Dewata2012-10-186-28/+23
| | | | | | | | | The code in PKIClient has been refactored into PKIConnection such that a single connection object can be used by several REST clients. The PKIClient will remain the base class for all REST clients. Ticket #357
* Enabled authentication for security domain REST interface.Endi Sukma Dewata2012-10-183-0/+181
| | | | | | | | The REST interface for security domain has been refactored and configured such that it requires authentication. A CLI has been added to get an installation token. Ticket #309
* Using RPM version number in CMake.Endi Sukma Dewata2012-10-011-1/+2
| | | | | | | | | | | | The RPM spec files have been modified to pass the full RPM version number to CMake. The version number contains the product version number, release number, milestone, and platform. The CMake scritps will parse and use this version number to generate Java manifest files. The product version number will be used as the specification version and full version number will be used as the implementation version. Ticket #339
* Added VERSION file.Endi Sukma Dewata2012-09-283-0/+22
| | | | | | | | | | | The CMake scripts have been modified to store the version number in /usr/share/pki/VERSION and in JAR manifest files. These files can be read by PKI applications to obtain the version number without having to query the RPM database. Fixed warnings in Java.cmake file. Ticket #339
* Merged Javadoc packages.Endi Sukma Dewata2012-09-051-31/+0
| | | | | | | The Javadocs for pki-util, pki-java-tools and pki-common have been merged and packaged into pki-javadoc RPM. Ticket #295
* Moved REST CLI into pki-tools.Endi Sukma Dewata2012-08-2932-3/+3417
| | | | | | | | | | The pki-client.jar has been split and merged into pki-certsrv.jar and pki-tools.jar. The REST client classes are now packaged in com.netscape.certsrv.<component> packages. The REST CLI classes are now packaged in com.netscape.cmstools.<component> packages. The "pki" script has been moved into pki-tools RPM package. Ticket #215
* Updated the remaining build scripts.Endi Sukma Dewata2012-08-151-43/+65
| | | | | | | The remaining build scripts have been updated to automatically find the source codes. Ticket #62
* Misc Fixes Remaining part of the code.Abhishek Koneru2012-07-181-6/+9
|
* NO_HASHCODE_OVERRIDDENAbhishek Koneru2012-07-121-3/+9
|
* SE_BAD_FIELD, MIGHT_IGNORE , STATIC_INNER_CLASSAbhishek Koneru2012-07-102-69/+67
|
* Coverity CATCH_REXCEPTION and UNREAD_FIELD_CASESAbhishek Koneru2012-07-061-2/+5
|
* LeftOver Cases in Resource Leaks and NULL_RETURNSAbhishek Koneru2012-07-021-3/+11
|
* Fixes for Forward Null Cases in Coverity for DogTag10Abhishek Koneru2012-06-292-3/+10
| | | | Addressed review coments.
generated by cgit (git 2.34.1) at 2025-09-28 12:41:22 +0000