summaryrefslogtreecommitdiffstats
path: root/base/server/cms/src
Commit message (Collapse)AuthorAgeFilesLines
...
* Added search filter for TPS resources.Endi S. Dewata2014-03-193-6/+27
| | | | | | | | | | | | | | | | | | The TPS resources have been modified to accept a basic search filter for find operation. For resources based on LDAP database, the filtering is done using LDAP filter. For other resources, the filtering is done using string comparison. For now the filter is will only be matched against entry IDs. In the future the filter may be expanded to support other entry attributes. The CLI has been updated accordingly. The total attribute in DataCollection was changed from Integer into int because the total size of the collection cannot be null. The PKIException constructors have been consolidated into a single actual constructor. The other constructors have been modified to call the actual constructor with some default values. Ticket #847
* Ticket #888 - (part 1: TKS) TPS rewrite: provide remote authority functionsChristina Fu2014-03-172-48/+111
|
* Removed redundant GenericServlet.destroy() invocation.Endi S. Dewata2014-03-171-1/+0
| | | | | | | | The CMSStartServlet has been modified to remove the code that calls GenericServlet.destroy() because it is an empty default implementation which was intended to provide convenience for writing servlets. Ticket #896
* Direct deployment for TPS.Endi S. Dewata2014-03-071-7/+24
| | | | | | | | | | | | | | | | | | | The deployment tool has been modified to deploy TPS directly from the share folder. This way the TPS UI can be upgraded automatically with RPM upgrade without having to write upgrade scripts. For this to work, the TPS web application files cannot contain any slot parameters. So, the cfgPath parameter has been removed from web.xml, and the CMSStartServlet has been modified such that if the parameter is missing it would generate a default path matching the original value in web.xml. Also, the velocity.properties has been modified to use a fixed value for the file.resource.loader.path parameter pointing to the share folder. In the future other subsystems may be modified to use the same deployment mechanism. Ticket #748, #752, #499
* trac ticket #862 - TPS rewrite: provide connector service for JAVA-based TPS ↵Christina Fu2014-03-061-0/+11
| | | | subsystem
* Added CLI parameter to select message format.Endi S. Dewata2014-03-042-0/+118
| | | | | | | | | | | A new CLI parameter has been added to allow the user select the REST message format. This is done by setting the default consumes and produces when creating the client proxy. For this to work the hard-coded @Consumes and @Produces annotations need to be removed from the interface definition. A new interceptor has been added to validate the message format before executing the operation. Ticket #554
* Reorganized REST service classes.Endi S. Dewata2014-02-2820-3742/+399
| | | | | | | | The REST service classes have been moved into org.dogtagpki.server namespace. A new upgrade script has been added to update existing instances. Ticket #114
* Upgraded RESTEasy client library.Endi S. Dewata2014-02-273-15/+52
| | | | | | | | | | The Dogtag client library has been modified to use RESTEasy 3.0 client library. A new upgrade script has been added to update existing servers. The JAXB annotation in ResourceMessage has been modified to require explicit property mapping. Ticket #554
* Add ability to archive without sending pkiArchiveOptions object.Ade Lee2014-02-262-4/+31
| | | | | | With this patch, you can now either send a pkiArchiveOptions object or the exploded parameters. This reduces the processing required on the client side.
* Added error checking in python client callsAde Lee2014-02-261-6/+23
| | | | | | | | | 1) Added error checking in python client calls. 2) Allow symmetric key generation with default params. Fix bug for when usages is not defined. 3) Fix bug when requesting key recovery - must check if key exists. 4) Extend key gen to allow for providing trans_wrapped_session_key 5) added constants to python client for key status
* reame client_id to client_key_idAde Lee2014-02-263-35/+35
|
* Add methods to getKeyInfo and change key statusAde Lee2014-02-191-0/+41
|
* Refactored GroupMemberProcessor.Endi S. Dewata2014-02-192-7/+5
| | | | | | | | The GroupMemberProcessor.addGroupMember() has been modified such that it returns the newly created group member data. This way the GroupService can use the common method to create the response object. Ticket #554
* Updated REST interface for key requests.Endi S. Dewata2014-02-191-7/+13
| | | | | | | The REST interface for key requests has been modified to return Response objects to allow better handling of server responses. Ticket #554
* Updated REST interface for keys.Endi S. Dewata2014-02-192-16/+45
| | | | | | | | | The REST interface for keys has been modified to return Response objects to allow better handling of server responses. Key-related methods in KRAClient have been moved into KeyClient. The DRMTest has been updated accordingly. Ticket #554
* Updated REST interface for CA profiles.Endi S. Dewata2014-02-191-14/+16
| | | | | | | The REST interface for CA profiles has been modified to return Response objects to allow better handling of server responses. Ticket #554
* Fix eclipse warnings.Ade Lee2014-02-194-26/+19
|
* Updated REST interface for TPS connectors.Endi S. Dewata2014-02-181-31/+50
| | | | | | | The REST interface for TPS connectors has been modified to return Response objects to allow better handling of server responses. Ticket #554
* Updated REST interface for account.Endi S. Dewata2014-02-181-3/+8
| | | | | | | The REST interface for account has been modified to return Response objects to allow better handling of server responses. Ticket #554
* Updated REST interface for groups.Endi S. Dewata2014-02-181-19/+21
| | | | | | | The REST interface for groups has been modified to return Response objects to allow better handling of server responses. Ticket #554
* Updated REST interface for certificate requests.Endi S. Dewata2014-02-181-21/+29
| | | | | | | The REST interface for certificate requests has been modified to return Response objects to allow better handling of server responses. Ticket #554
* Updated REST interface for certificates.Endi S. Dewata2014-02-181-18/+22
| | | | | | | The REST interface for certificates has been modified to return Response objects to allow better handling of server responses. Ticket #554
* Updated REST interface for users.Endi S. Dewata2014-02-182-36/+59
| | | | | | | | | | The REST interface for users has been modified to return Response objects to allow better handling of server responses. Other REST interfaces will be modified in subsequent patches. Once all interfaces are updated, the client library can be updated to use RESTEasy 3.0 API. Clients using the client library or XML/JSON directly are not affected by these changes. Ticket #554
* Removed hard-coded response type.Endi S. Dewata2014-02-106-22/+1
| | | | | | | | Previously some methods were hard-coded to return XML responses. The code has been removed to allow clients to request a different format. Ticket #554
* Fix minor issues from review.Ade Lee2014-02-102-17/+21
| | | | | | 1. Use size/keySize consistently, instead of strength. 2. Change to using Integer instead of int in SymKeyGenerationRequest. 3. Fix error message.
* Change the return type for KeyRequest creation operationsAde Lee2014-02-102-25/+47
| | | | | | We will likely want to extend the REST API to allow the immediate return of a generated key, and perhaps of a recovered key in a single step. This change allows us to do that.
* Add strength and algorithm to KeyData and KeyInfo classesAde Lee2014-02-102-9/+29
| | | | | | Make sure these are updated so that clients can get this information when accessing a symmetric key. Also allow a default for generation requests (but not for archival requests).
* Fix DRM archival, recovery and generation for non-DES3 keys.Ade Lee2014-02-042-6/+36
| | | | | | | | | | | In the archival, recovery and generation code for symmetric keys, we use functions that require knowledge of the symmetric keys algorithm and key size. These were hardcoded to DES3, and so only DES3 worked. We added those parameters to the archival request, save them in the KeyRecord and retrive them when recovering the key. Tests have been added to DRMTest for the relevant usages.
* Address review commentsAde Lee2014-02-043-8/+25
| | | | | | | | | 1. Remove Link attribute from ResourceMessage, 2. Rename KeyDataInfo and KeyDataInfoCollection. 3. Move KEYGEN_ALGORITHMS 4. Fix missing space in PKIException 5. Move properties to attributes in ResourceMessage 6. Add missing code to update the request and set IRequest.RESULT
* Rename KeyRequest to ResourceMessageAde Lee2014-02-041-14/+22
| | | | | | Refactor ResourceMessage to include classname instead of Request Type. Also changed PKIException.Data to extend ResourceMessage. Modifications to the server code to get the tests working.
* Added more client code for DRM testsAde Lee2014-02-042-24/+18
|
* Rename KeyDataInfos and KeyrequestInfosAde Lee2014-02-043-9/+9
|
* Fix some errors flagged by eclipseAde Lee2014-02-041-2/+2
|
* Added SymKeyGen serviceAde Lee2014-02-042-2/+81
|
* Remove old recovery and archival methodsAde Lee2014-02-041-16/+0
|
* Add new POST endpoint for creating requestsAde Lee2014-02-041-0/+28
|
* External Registration feature merge (excluding TPS portion due to current ↵Christina Fu2014-01-236-33/+186
| | | | | | TPS-rewrite effort): http://pki.fedoraproject.org/wiki/TPS_-_New_Recovery_Option:_External_Registration_DS
* authentication pluginAndrew Wnuk2014-01-021-0/+303
| | | | | | | | This patch provides authentication plugin avoiding anonymous access. Steps to use the plugin: https://wiki.idm.lab.bos.redhat.com/export/idmwiki/New_Directory_Authentication_Plugin BZ 861467/ Trac #348.
* Added dialog for adding TPS groups.Endi S. Dewata2013-12-161-5/+8
| | | | | | | | A new dialog box has been added for adding TPS groups. A separate group ID attribute has been added to the REST service as required by Backbone. Ticket #654
* Added dialog for adding TPS users.Endi S. Dewata2013-12-161-5/+18
| | | | | | | | | A new dialog box has been added for adding TPS users. Backbone requires that a separate attribute is used to specify the user ID (instead of id) when creating new users, so a new userID field has been added to the backend service as well. Ticket #654
* Using PATCH method for modify operations.Endi S. Dewata2013-12-162-1/+83
| | | | | | | | | | Some modify operations have been modified to use HTTP PATCH method since the request only contains changes to the resource, not the entire resource. To replace the entire resource, separate replace operations using HTTP PUT method will be used instead. The Backbone library is using the same convention by default. Ticket #654
* Replaced auth.properties with acl.properties.Endi S. Dewata2013-11-202-40/+56
| | | | | | | | | | | | | | The ACL mapping files have been renamed from auth.properties to acl.properties to match the actual content and moved into the subsystem conf folder. The authentication method mapping files have been extracted from the interceptor into actual files. The ACLInterceptor and AuthMethodInterceptors have been modified to read the default mapping first, then overwrite it with custom mapping if it exists in the subsystem folder. The UpdateAuthzProperties upgrade script has been replaced with RemoveAuthProperties that will remove the old auth.properties.
* Added ACL for TPS profile mapping.Endi S. Dewata2013-11-191-0/+1
| | | | | | | New ACL has been added to allow only the administrators to access TPS profile mappings. Ticket #652
* REST interface extensionAndrew Wnuk2013-11-182-7/+128
| | | | | | This patch provides REST interface extension allowing recovery of asymmetric keys. Ticket #439.
* Updated ACL and auth method mapping names.Endi S. Dewata2013-11-151-3/+9
| | | | | The ACL and auth method mapping names in some resources have been modified to be more consistent with those in other resources.
* Added ACL for TPS selftests.Endi S. Dewata2013-11-141-0/+1
| | | | | | | New ACL has been added to allow only the administrators to access TPS selftests. Ticket #652
* Added ACL for TPS connections.Endi S. Dewata2013-11-141-0/+1
| | | | | | | New ACL has been added to allow only the administrators to access TPS connections. Ticket #652
* Added ACL for TPS configuration.Endi S. Dewata2013-11-141-0/+1
| | | | | | | New ACL has been added to allow only the administrators to access TPS configuration. Ticket #652
* Added ACL for TPS authenticators.Endi S. Dewata2013-11-141-0/+1
| | | | | | | | | | New ACL has been added to allow only the administrators to access TPS authenticators. The set of interceptors in each application has been modified to preserve the order. Ticket #652
* Added paging on all find commands.Endi S. Dewata2013-11-147-104/+194
| | | | | | The find commands in some REST services have been modified to support paging to be consistent with others. The other find commands have been cleaned up as well.