pki.git - Unnamed repository; edit this file 'description' to name the repository.

	Commit message (Collapse)	Author	Age	Files	Lines
*	Add realm to the request record	Ade Lee	2016-04-20	1	-6/+15
\| \| \| \|	Part of Trac Ticket #2041
*	Ticket #1007 TPS audit events	Christina Fu	2016-02-15	1	-0/+5
\| \| \| \| \| \|	This patch implements the TPS operation auditing: TOKEN_APPLET_UPGRADE_SUCCESS,TOKEN_APPLET_UPGRADE_FAILURE,TOKEN_CERT_ENROLLMENT,TOKEN_CERT_RENEWAL,TOKEN_CERT_RETRIEVAL,TOKEN_KEY_RECOVERY,TOKEN_CERT_STATUS_CHANGE_REQUEST,TOKEN_OP_REQUEST,TOKEN_FORMAT_SUCCESS,TOKEN_FORMAT_FAILURE,TOKEN_KEY_CHANGEOVER,TOKEN_KEY_CHANGEOVER_FAILURE,TOKEN_PIN_RESET_SUCCESS,TOKEN_PIN_RESET_FAILURE,TOKEN_STATE_CHANGE,TOKEN_AUTH_SUCCESS,TOKEN_AUTH_FAILURE Administrative auditing (via REST interface) will be covered in a separate ticket
*	Fixed selftest error handling.	Endi S. Dewata	2015-12-01	1	-15/+12
\| \| \| \| \| \| \| \|	The selftest has been modified to throw an exception and provide more specific error message if a test fails in order to help troubleshoot the problem. https://fedorahosted.org/pki/ticket/1328
*	Ticket #1648 [RFE] provide separate cipher lists for CS instances acting as ↵	Christina Fu	2015-10-20	1	-1/+1
\| \| \| \|	client and server This patch provides subsystem->subsystem cipher configuration when acting as a client
*	Ticket #1593 auto-shutdown - for HSM failover support	Christina Fu	2015-10-01	1	-0/+6
\| \| \| \| \| \| \| \| \| \| \| \| \| \| \|	This is an interim solution for supporting HSM failover by automatically shutting down the server when signing key becomes inaccessible. At auto-shutdown, a crumb fiile will be left in the instance directory for an external daemon to detect and restart, if necessary. Due to limitation of the watch dog (nuxwdog) at present time, the restart option currently only works if started with watch dog (nuxwdog), and it will prompt for passwords on the terminals. The restart counter is to prevent the server from going into an infinite restart loop. Administrator will have to reset autoShutdown.restart.count to 0 when max is reached. (cherry picked from commit 5a9ecad9172f76ca1b94b40aedcdd49d009aceb1)
*	Fixed thread leaks during shutdown.	Endi S. Dewata	2015-06-18	1	-3/+3
\| \| \| \| \| \| \| \|	Various codes have been modified to properly stop threads during shutdown. A new ID attribute has been added to the LDAP connection factory classes to help identify leaking threads. https://fedorahosted.org/pki/ticket/1327
*	Add ability to enable/disable dynamic subsystems	Fraser Tweedale	2015-04-07	1	-0/+3
\| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \|	The CA installation process requires starting with the profile subsystem disabled, then enabling it once profiles have been loaded into the database. Accordingly, to avoid hacks with hardcoded offsets, add the "enabled" CS.cfg configuration parameter along with methods to enable or disable a subsystem based on the subsystem ID. A disabled subsystem does not have its `init` method called, but it is still instantiated and added to the registry so that other code can look up a subsystem by name and find out its class. Subsystems are enabled by default. This commit also removes an assumption that the subsystem config sub-store names are sequential numbers beginning at `0`.
*	Fixed CMake issues on F22.	Endi S. Dewata	2015-03-05	1	-1/+1
\| \| \| \| \| \|	Some CMake scripts have been updated to work on both F21 and F22. https://fedorahosted.org/pki/ticket/1281
*	trac ticket #862 - TPS rewrite: provide connector service for JAVA-based TPS ↵	Christina Fu	2014-03-06	1	-0/+8
\| \| \| \|	subsystem
*	Fixed tests dependencies.	Endi S. Dewata	2013-10-31	22	-0/+3595
	The test classes have been moved from base/common/test to base/server/test and into the cmscore package because they are dependent on server classes.