summaryrefslogtreecommitdiffstats
path: root/base/server/man/man8
Commit message (Collapse)AuthorAgeFilesLines
* pkispawn.8: fix setup-ds.pl command nameFraser Tweedale2017-03-141-1/+1
|
* Separated TPS does not automatically receive shared secret from remote TKS.Jack Magne2016-07-011-3/+8
| | | | | | | | | | | | | | | | | | | | | Support to allow the TPS to do the following: 1. Request that the TKS creates a shared secret with the proper ID, pointing to the TPS. 2. Have the TKS securely return the shared secret back to the TPS during the end of configuration. 3. The TPS then imports the wrapped shared secret into it's own internal NSS db permanenty and. 4. Given a name that is mapped to the TPS's id string. Additional fixes: 1. The TKS was modified to actually be able to use multiple shared secrets registered by multiple TPS instances. Caveat: At this point if the same remote TPS instance is created over and over again, the TPS's user in the TKS will accumulate "userCert" attributes, making the exportation of teh shared secret not functional. At this point we need to assume that the TPS user has ONE "userCert" registered at this time.
* Add HSM informationMatthew Harmsen2016-07-011-0/+173
| | | | | - PKI TRAC Ticket #1405 - Add additional HSM details to 'pki_default.cfg' & 'pkispawn' man pages
* Separate PKI Instances versus Shared PKI InstancesMatthew Harmsen2016-06-301-42/+318
| | | | | - PKI TRAC Ticket #1607 - [MAN] man pkispawn has inadequate description for shared vs non shared tomcat instance installation
* Added entry of pki-server instance-cert command in man page.Amol Kahat2016-06-151-0/+6
|
* Add man page entry for pki-server instance-cert-export commandAde Lee2016-06-101-0/+10
| | | | Ticket 2339
* Fix name fields in man pages for correct man -k outputAde Lee2016-06-084-4/+4
| | | | Ticket 1563
* Additional clean-ups for PKCS #12 utilities.Endi S. Dewata2016-03-181-3/+3
| | | | | | | | | | | | | | | | The pki_server_external_cert_path has been renamed to pki_server_external_certs_path to match the file name. A default pki_server_external_certs_path has been added to default.cfg. The pki pkcs12-export has been modified to export into existing PKCS #12 file by default. The pki-server instance-cert-export has been modified to accept a list of nicknames to export. https://fedorahosted.org/pki/ticket/1742
* Man page updates for new cloning optionsAde Lee2016-03-012-1/+88
|
* Man updates for pre-check modeAde Lee2016-03-011-0/+19
|
* Updated pki-cert and pki-server-subsystem man pages.Endi S. Dewata2015-11-251-1/+25
| | | | | | | The pki-cert and pki-server-subsystem man pages have been updated to include recent changes. https://fedorahosted.org/pki/ticket/456
* Add certutil options for ECCMatthew Harmsen2015-07-281-1/+3
| | | | | - PKI TRAC Ticket #1524 - pkispawn: certutil options incorrect for creating ecc admin certificate
* Updated man pages with TPS info.Endi S. Dewata2015-07-181-19/+118
| | | | | | | The man pages for pkispawn and pki_default.cfg have been updated to include TPS deployment parameters. https://fedorahosted.org/pki/ticket/1277
* Updated man page for configuring secure LDAP connection.Endi S. Dewata2015-07-181-36/+77
| | | | | | | | | | | | The instruction to setup secure LDAP connection in the pkispawn man page has been updated. The sample deployment configuration file has been made more generic. The setup-ds.pl has been removed from the instruction since generating a self-signed certificate requires a DS admin server. The URL to download setupssl2.sh has been changed with a more direct link. The sample LDAP password has been changed to match the current deployment configuration examples. Some paragraphs have been line wrapped to simplify man page development.
* Document workaround for 1454 in 'pkispawn' man page.Jack Magne2015-07-171-1/+18
| | | | Ticket #1486.
* Removed hard-coded /root in pkispawn man page.Endi S. Dewata2015-07-171-5/+6
| | | | | | | | | The /root in pkispawn man page has been replaced with a more generic $HOME. An incorrect /root in the following example has been removed: semanage -a -t pki_tomcat_cert_t /root/backup_keys.p12
* Updated pkispawn man page.Endi S. Dewata2015-07-161-103/+302
| | | | | | | | | The pkispawn man page has been updated to clarify the section headers of various deployment scenarios. Some paragraphs have been line wrapped to simplify man page development. The existing sample password has been replaced with another password that does not match a parameter name to simplify search and replace for customization.
* Added man pages for pki-serverAde Lee2015-07-165-0/+429
| | | | Trac ticket 1356
* Man page updates for cloningAde Lee2015-07-141-6/+41
| | | | Ticket 1076
* Add details on exporting and importing system certs when cloning.Ade Lee2015-07-131-1/+16
| | | | Trac ticket 852, 853
* pkispawn man page ECC exampleMatthew Harmsen2015-07-101-0/+34
| | | | - PKI TRAC Ticket #1460 - Add 'pkispawn' man page example for ECC
* Omit OCSP from clone description.Jack Magne2015-07-061-4/+4
| | | | | Ticket #1358. Also note that OCSP cloning is unsupported as of now.
* Fix interactive install to not reprompt for portsAde Lee2015-04-291-0/+2
| | | | | Ports are already set when deploying into an existing instance. Having a user re-enter these is repetitious and error prone.
* pki-tomcatd fails to start on system bootMatthew Harmsen2015-04-131-7/+0
| | | | | - PKI TRAC Ticket #1315 - pki-tomcatd fails to start on system boot - PKI TRAC Ticket #1340 - pkidestroy should not remove /var/lib/pki
* Allow use of secure LDAPS connectionMatthew Harmsen2015-03-131-2/+70
| | | | - PKI TRAC Ticket #1144 - pkispawn needs option to specify ca cert for ldap
* Fix sub-CA installation with own security domainAde Lee2014-10-011-1/+27
| | | | | | | | | Installation code failed to anticipate installation of a subordinate CA that would host its own security domain. This patch includes changes to python installation code, java configuration servlet and changes to man pages. Ticket 1132
* Fix manpage errorsBenjamin Drung2014-09-092-14/+14
| | | | | This patch fixes manpage-has-errors-from-man and hyphen-used-as-minus-sign found by lintian tool on Debian.
* Remove Apache info from pkispawn and pkidestroyMatthew Harmsen2014-09-022-7/+0
| | | | - PKI TRAC Ticket #1077 - Consider removing [Apache] section from 'default.cfg'
* Disable PKI GUI ConfigurationMatthew Harmsen2014-08-281-15/+1
| | | | - PKI TRAC Ticket #1120 - Remove Firefox PKI GUI Configuration Panel Interface
* Ticket 757 - Allow unescaped '%' characters in deployment file password valuesNathan Kinder2013-10-091-1/+1
| | | | | | | | | | | | | This patch allows password values in pkispawn deployment files to contain unescaped '%' characters. Non password settings support interpolation, so they still require escaping. This patch has been tested with deployment file based installs as well as interactive installs. The way it works is that we escape the password settings internally immediately after reading the deployment config file. The interactive installation code already escapes password values as it receives them from the user. This approach allows the rest of the installation code to remain as-is.
* Ticket 755 - Detect unescaped percent characters in deployment filesNathan Kinder2013-10-071-0/+3
| | | | | | | | | | | | The deployment config files used by pkispawn support interpolation as supplied by ConfigParser. Interpolation uses the '%' character, which means values that need to contain a '%' character need to be properly escaped. This patch detects errors with unescaped '%' characters and reports a useful message bac kto the user who is running pkispawn. This patch also adds notes to the pkispawn and pki_default.cfg man pages to explain that escaping of '%' characters is required.
* Added man pages for upgrade tools.Endi S. Dewata2013-07-221-0/+184
| | | | | | | New man pages have been added for pki-upgrade and pki-server-upgrade. The spec file and build scripts have been updated accordingly. Ticket #582
* Updated man pages:Matthew Harmsen2013-06-061-3/+89
| | | | | | * TRAC Ticket #606 - add restart / start at boot info to pkispawn man page * TRAC Ticket #610 - Document limitation in using GUI install * TRAC Ticket #629 - Package ownership of '/usr/share/pki/etc/' directory
* Replaced ~/.pki with ~/.dogtag.Endi Sukma Dewata2013-04-271-3/+3
| | | | | The default folder for to store user files in the home directory has been changed from .pki to .dogtag.
* Remove the respawn logic in deploy scripts.Abhishek Koneru2013-04-091-4/+1
| | | | | | | | Remove all the declarations, definitions and invocations of respawn() method in the deploment scripts. Remove the -u update option in pkispawn script. Ticket #542
* Renamed base/deploy to base/server.Endi Sukma Dewata2013-04-092-0/+441
The base/deploy folder has been renamed to base/server to match the package name. The pki.conf has been moved into pki-base package. Ticket #553, #564
generated by cgit (git 2.34.1) at 2025-09-27 02:58:24 +0000