summaryrefslogtreecommitdiffstats
path: root/base/server/cmsbundle/src
Commit message (Collapse)AuthorAgeFilesLines
* Ticket#1028 phase2: TPS rewrite: provide externalReg functionalityChristina Fu2015-04-141-8/+0
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | This patch is the 2nd phase of the externalReg feature, it makes the following improvements: * added feature: recovery by keyid (v.s. by cert) * fixed some auditing message errors * added some missing ldapStringAttributes needed for delegation to work properly * added missing externalReg required config parameters * made corrections to some externalReg related parameters to allow delegation to work properly * added handle of some error cases * made sure externalReg enrollment does not go half-way (once fails, bails out) tested: * enrollment of the three default TPS profiles (tokenTypes) * format of the tokens enrolled with the three default tps profiles * delegation enrollments * cuid match check next phase: * cert/key retention (allow preserving existing certs/keys on the token) note: * some of the activity log and cert status related issues that are not specifically relating to externalReg will be addressed in other more relevant tickets.
* Add LDAPProfileSubsystem to store profiles in LDAPFraser Tweedale2015-04-071-0/+1
| | | | | | | | | | | | Add the LDAPProfileSubsystem as another IProfileSubsystem implementation that can be used instead of ProfileSubsystem (which stores profiles on the file system) to store files in LDAP so that changes can be replicated. Extract common behaviour in to new AbstractProfileSubsystem superclass. Also address the minor issue #1220.
* Ticket#1028 Phase1:TPS rewrite: provide externalReg functionalityChristina Fu2015-02-101-0/+2
|
* Ticket #864 866 (part 1 symkey, common) NIST SP800-108 KDFChristina Fu2014-12-191-0/+80
| | | | | - this patch does not include TPS side of changes: (#865 needs to be rewritten in Java)
* Added rangeUnit property to certificate profiles.Endi S. Dewata2014-12-151-2/+4
| | | | | | | | | A new optional property has been added to certificate profiles to specify the range unit. The default range unit is 'day'. The code has been modified to use the Calendar API to calculate the end of validity range based on the range unit. https://fedorahosted.org/pki/ticket/1226
* Generate asymmetric keys in the DRM.Abhishek Koneru2014-08-271-0/+9
| | | | | | | | | | | | Adds methods to key client to generate asymmetric keys using algorithms RSA and DSA for a valid key sizes of 512, 1024, 2048,4096. The generated keys are archived in the database. Using the CLI, the public key(base64 encoded) can be retrieved by using the key-show command. The private key(base64 encoded) can be retrieved using the key-retrieve command. Ticket #1023
* Remove ACL mapping to user from error messagesMatthew Harmsen2014-07-281-1/+1
| | | | - PKI TRAC Ticket #965 - Improve error message - remove ACL mapping to the user
* Trac ticket # 884 TPS Rewrite: Audit and other LoggingChristina Fu2014-04-111-0/+59
| | | | http://pki.fedoraproject.org/wiki/TPS_Rewrite#Audit_Messages
* reame client_id to client_key_idAde Lee2014-02-261-5/+5
|
* Rename KeyRequest to ResourceMessageAde Lee2014-02-041-0/+14
| | | | | | Refactor ResourceMessage to include classname instead of Request Type. Also changed PKIException.Data to extend ResourceMessage. Modifications to the server code to get the tests working.
* External Registration feature merge (excluding TPS portion due to current ↵Christina Fu2014-01-231-0/+2
| | | | | | TPS-rewrite effort): http://pki.fedoraproject.org/wiki/TPS_-_New_Recovery_Option:_External_Registration_DS
* Moved cmsbundle into server folder.Endi S. Dewata2013-12-054-0/+3705
The pki-cmsbundle.jar is distributed in pki-server package so the files have been moved into the base/server folder.