summaryrefslogtreecommitdiffstats
path: root/base/server/src/engine
Commit message (Collapse)AuthorAgeFilesLines
* Reorganized deployment tools.Endi S. Dewata2013-07-227-5353/+0
| | | | | | | The pkispawn and pkidestroy scripts have been moved into sbin folder. The Python deployment library and the scriptlets were moved into pki.server.deployment and pki.server.deployment.scriptlets packages, respectively.
* Minor changes in Installation Summary.Abhishek Koneru2013-07-221-5/+6
| | | | | | | Added pki client directory to the installation summary. Also formatted the access url statement. Ticket #645
* Fixes for issues reported by pylint.Abhishek Koneru2013-07-183-5/+14
| | | | | | Fixed the warning W0202 - attributes defined outside init and error E0202 - An instance attribute hiding a method (which is actually an error in json.encoder.JSONEncoder line 157.)
* Fixed pylint warning W0212.Abhishek Koneru2013-07-101-2/+2
| | | | | Replaced accessing _sections, a protected member in ConfigParser with function call ConfigParser.items('SECTION_NAME')
* Fixes for issues reported by pylint.Abhishek Koneru2013-07-101-1/+2
| | | | | Fixes for issues in other files. Ticket #316
* Fix issues reported by pylint.Abhishek Koneru2013-07-104-13/+13
| | | | | | | Fixed all warnings caused due to absolute import of modules in same package and not marking the regexes with an r when trying to match. Ticket #316
* Fixes for issues reported by pylint.Abhishek Koneru2013-07-033-20/+18
| | | | | Fixes for issues in other files. Ticket #316
* Fixes for issues reported by pylint.Abhishek Koneru2013-07-022-45/+42
| | | | | Fixes for issues in other files. Ticket #316
* Fixes for issues reported by pylint.Abhishek Koneru2013-07-021-9/+9
| | | | | Fixes for issues in other files. Ticket #316
* Fixes for issues reported by pylint.Abhishek Koneru2013-07-022-63/+57
| | | | | Fixes for issues in pkihelper.py. Ticket #316
* Applied PEP8 formatting to python files.Abhishek Koneru2013-06-275-613/+613
| | | | | | | General formatting done for all the python files except for the line length issue, which could not be formatted using Pydev in Eclipse. Ticket #316
* Code refactored for global variables and utility classes.Abhishek Koneru2013-06-273-854/+917
| | | | | | | | | | Added a new class PKIDeployer, whose object holds references to global dictionaries for master and slots and also objects of utility classes in pkihelper.py. This object once created in pkispawn/pkidestroy will be passed on to the PKIScriptlets and used. This also fixes few pylint related errors (E1120) Ticket #316
* Modify pkispawn to handle case where no subsystemCerts are generatedAde Lee2013-06-261-1/+8
| | | | | | When installing clone of a KRA into an existing instance, no new system certs are generated, and so the systemCerts parameter is not populated. This patch addresses this issue.
* Added Tomcat-based TPS instance.Endi S. Dewata2013-06-103-14/+14
| | | | | | | | | The build and deployment tools have been modified to support creating a basic Tomcat instance to run TPS. New configuration and template files for TPS have been copied from another Tomcat subsystem. The TPS functionality itself will be added in future patches. Ticket #526
* Use 'with' construct for file operations.Abhishek Koneru2013-06-063-52/+46
| | | | | | | | Replace try-except with with construct in python code in applicable places where there is no exception handling required. Also added finally block to close resources opened in a try except block. Ticket #560
* Changes to the displayed installation summary.Abhishek Koneru2013-06-061-33/+35
| | | | | | | | | If pki_skip_configuration=True, then do not display the installation summary. And, display client database details only when pki_client_database_purge=False. Also replace \t with spaces in the print messages. Ticket #599
* Fixed hard-coded server certificate nickname.Endi Sukma Dewata2013-06-031-1/+3
| | | | | | | | | | | Previously the server certificate name was partially hard-coded as "Server-Cert cert-[PKI_INSTANCE_NAME]". Now in Tomcat-based subsystems it can be fully configured using pki_ssl_server_nickname parameter. In Apache-based subsystems it's left unchanged. Unused serverCertNick.conf files have been removed. Ticket #631
* Renamed CA_PORT into PKI_CA_PORT.Endi Sukma Dewata2013-06-031-0/+2
| | | | | The CA_PORT variable has been renamed into PKI_CA_PORT for consistency.
* Renamed CA_HOST into PKI_CA_HOSTNAME.Endi Sukma Dewata2013-06-031-0/+2
| | | | | The CA_HOST variable has been renamed into PKI_CA_HOSTNAME for consistency.
* Replaced PKI_SUBSYSTEM_DIR with PKI_SUBSYSTEM_TYPE.Endi Sukma Dewata2013-05-301-2/+0
| | | | | The PKI_SUBSYSTEM_DIR variable is redundant and can be replaced with PKI_SUBSYSTEM_TYPE.
* Renamed PKI_INSTANCE_ID into PKI_INSTANCE_NAME.Endi Sukma Dewata2013-05-301-1/+1
| | | | | The PKI_INSTANCE_ID variable has been renamed into PKI_INSTANCE_NAME for consistency.
* Renamed SERVER_NAME and PKI_MACHINE_NAME into PKI_HOSTNAME.Endi Sukma Dewata2013-05-301-2/+2
| | | | | The SERVER_NAME and PKI_MACHINE_NAME variables have been renamed into PKI_HOSTNAME for consistency.
* Do not use sys.exit() after an error.Abhishek Koneru2013-05-213-624/+668
| | | | | | | Raise an exception on error so that it can be handled by the caller. Ticket #562
* Fixed incorrect JNI_JAR_DIR.Endi Sukma Dewata2013-05-071-1/+1
| | | | | | | | | | The JNI_JAR_DIR is supposed to be architecture-specific but the pki-base package is architecture-neutral. So, to ensure it has the correct value, the variable will be set at post installation. Also, to simplify the upgrade process, the variable has been moved from /etc/pki/pki.conf into /usr/share/pki/etc/pki.conf. The build, deployment, startup, and upgrade scripts have been modified accordingly.
* Fix tests in pkispawn to use legacy URLs as fallbackAde Lee2013-05-041-3/+22
| | | | | | | | | | When setting up clones or non-CA subsystems, pkispawn checks if the security domain is accessible and if the user can log in. These calls invoke REST URIs, which are not available on older subsystems. To support these subsystems, we need to attempt the older legacy servlets if the REST APIs are not available. Ticket #604
* Fix some errors in patch.Ade Lee2013-04-281-4/+3
| | | | | | Update kraconnector-delete call to use -c for database password. Update get-install-token call to specify instance certdb. Removed --ignore-untrusted directives on both. Update man page.
* Ignoring warnings/errors during installation.Endi Sukma Dewata2013-04-281-0/+2
| | | | | | | | The code used by pkispawn and pkidestroy has been modified to ignore certificate validity warnings/errors that happens during installation. The instanceCreationMode is now redundant and has been removed from ClientConfig.
* Set log level in logfile to debug in pkispawnAde Lee2013-04-263-18/+7
| | | | | | | | The log file is not very useful without the level of logging. If you have occasion to go to the log file, then you want to see all the gory details, This of course is valid for pkidestroy too. Also removed an unneeded import introduced by mistake.
* Show error messages and stack trace when an error occurs.Abhishek Koneru2013-04-261-60/+69
| | | | | | | Print the stacktrace to the log file if there is an error while executing pkispawn. Ticket #592
* Defect: Installation fails if there is only one system cert.Abhishek Koneru2013-04-231-0/+3
| | | | | | | | | After configuration is done, the JSON result can have only one system cert (in case of clone installation). But the code expects a list of certs rather than a single cert. So when there is only one certificate it is added to a list and processed. Ticket #593
* Remove installation information logs in pkispawn.Abhishek Koneru2013-04-221-1/+1
| | | | | | Do not log the installation information after completion of installation in pkispawn because, when run in verbose mode, All the information is printed twice in an unordered way.
* random certificate serial numbersAndrew Wnuk2013-04-191-0/+4
| | | | | | This patch adds support for random certificate serial numbers. Bug 912554.
* Show some more information after installing a subsystem.Abhishek Koneru2013-04-171-0/+12
| | | | | | | Print the command to get the status of a subsystem and the URL to access after installation. Ticket #514
* Remove sensitive parameters from archived deployment cfg.Abhishek Koneru2013-04-171-0/+1
| | | | | | | Remove the sensitive parameters before archiving the user configurations in the archive file. Ticket #566
* Tracking upgrade using existing config files.Endi Sukma Dewata2013-04-171-1/+6
| | | | | | | | | | | The upgrade framework has been modified to use pki.conf to track system upgrade, tomcat.conf to track instance upgrade, and CS.cfg to track subsystem upgrade. The preop.product.version in CS.cfg has been renamed into cms.product.version and is now used to track upgrade. Ticket #544
* Remove the respawn logic in deploy scripts.Abhishek Koneru2013-04-094-40/+1
| | | | | | | | Remove all the declarations, definitions and invocations of respawn() method in the deploment scripts. Remove the -u update option in pkispawn script. Ticket #542
* Renamed base/deploy to base/server.Endi Sukma Dewata2013-04-097-0/+5235
The base/deploy folder has been renamed to base/server to match the package name. The pki.conf has been moved into pki-base package. Ticket #553, #564