summaryrefslogtreecommitdiffstats
path: root/base/server
Commit message (Collapse)AuthorAgeFilesLines
...
* Added Tomcat-based TPS instance.Endi S. Dewata2013-06-109-28/+63
| | | | | | | | | The build and deployment tools have been modified to support creating a basic Tomcat instance to run TPS. New configuration and template files for TPS have been copied from another Tomcat subsystem. The TPS functionality itself will be added in future patches. Ticket #526
* Updated man pages:Matthew Harmsen2013-06-061-3/+89
| | | | | | * TRAC Ticket #606 - add restart / start at boot info to pkispawn man page * TRAC Ticket #610 - Document limitation in using GUI install * TRAC Ticket #629 - Package ownership of '/usr/share/pki/etc/' directory
* Use 'with' construct for file operations.Abhishek Koneru2013-06-063-52/+46
| | | | | | | | Replace try-except with with construct in python code in applicable places where there is no exception handling required. Also added finally block to close resources opened in a try except block. Ticket #560
* Changes to the displayed installation summary.Abhishek Koneru2013-06-063-59/+62
| | | | | | | | | If pki_skip_configuration=True, then do not display the installation summary. And, display client database details only when pki_client_database_purge=False. Also replace \t with spaces in the print messages. Ticket #599
* Fixed hard-coded server certificate nickname.Endi Sukma Dewata2013-06-032-1/+4
| | | | | | | | | | | Previously the server certificate name was partially hard-coded as "Server-Cert cert-[PKI_INSTANCE_NAME]". Now in Tomcat-based subsystems it can be fully configured using pki_ssl_server_nickname parameter. In Apache-based subsystems it's left unchanged. Unused serverCertNick.conf files have been removed. Ticket #631
* Renamed CA_PORT into PKI_CA_PORT.Endi Sukma Dewata2013-06-033-0/+4
| | | | | The CA_PORT variable has been renamed into PKI_CA_PORT for consistency.
* Renamed CA_HOST into PKI_CA_HOSTNAME.Endi Sukma Dewata2013-06-033-0/+4
| | | | | The CA_HOST variable has been renamed into PKI_CA_HOSTNAME for consistency.
* Replaced PKI_SUBSYSTEM_DIR with PKI_SUBSYSTEM_TYPE.Endi Sukma Dewata2013-05-302-3/+0
| | | | | The PKI_SUBSYSTEM_DIR variable is redundant and can be replaced with PKI_SUBSYSTEM_TYPE.
* Renamed PKI_INSTANCE_ID into PKI_INSTANCE_NAME.Endi Sukma Dewata2013-05-303-31/+31
| | | | | The PKI_INSTANCE_ID variable has been renamed into PKI_INSTANCE_NAME for consistency.
* Renamed SERVER_NAME and PKI_MACHINE_NAME into PKI_HOSTNAME.Endi Sukma Dewata2013-05-303-15/+15
| | | | | The SERVER_NAME and PKI_MACHINE_NAME variables have been renamed into PKI_HOSTNAME for consistency.
* Renamed PORT and UNSECURE_PORT into PKI_UNSECURE_PORT.Endi Sukma Dewata2013-05-301-11/+11
| | | | | The PORT and UNSECURE_PORT variables in RA and TPS has been renamed into PKI_UNSECURE_PORT to match the Tomcat-based subsystems.
* Do not use sys.exit() after an error.Abhishek Koneru2013-05-215-626/+671
| | | | | | | Raise an exception on error so that it can be handled by the caller. Ticket #562
* Removing JNI_JAR_DIR from /etc/pki/pki.conf.Endi Sukma Dewata2013-05-151-0/+4
| | | | | | Recently the JNI_JAR_DIR was moved into /usr/share/pki/etc/pki.conf. A new upgrade script has been added to remove the unused JNI_JAR_DIR from /etc/pki/pki.conf.
* Added support for backup/restore on upgrade.Endi Sukma Dewata2013-05-155-15/+46
| | | | | | | | | | The upgrade framework has been modified to support backup and restore functionality. A new method backup(filename) has been added to save a file into a backup folder. The CLI's have been modified to accept a --revert parameter which will restore the backup files one version at a time. Ticket #583
* Fixed incorrect JNI_JAR_DIR.Endi Sukma Dewata2013-05-072-4/+4
| | | | | | | | | | The JNI_JAR_DIR is supposed to be architecture-specific but the pki-base package is architecture-neutral. So, to ensure it has the correct value, the variable will be set at post installation. Also, to simplify the upgrade process, the variable has been moved from /etc/pki/pki.conf into /usr/share/pki/etc/pki.conf. The build, deployment, startup, and upgrade scripts have been modified accordingly.
* Fix tests in pkispawn to use legacy URLs as fallbackAde Lee2013-05-041-3/+22
| | | | | | | | | | When setting up clones or non-CA subsystems, pkispawn checks if the security domain is accessible and if the user can log in. These calls invoke REST URIs, which are not available on older subsystems. To support these subsystems, we need to attempt the older legacy servlets if the REST APIs are not available. Ticket #604
* Fixed undefined PKIException.Endi Sukma Dewata2013-04-291-2/+2
| | | | | The pki.server module has been fixed to include the module name of the PKIException.
* Fixed undefined BASE_DIR.Endi Sukma Dewata2013-04-291-4/+4
| | | | | The pki.server module has been fixed to include the module name of the BASE_DIR.
* Added upgrade scriptlet to add JNI_JAR_DIR.Endi Sukma Dewata2013-04-292-3/+1
| | | | | | | | | | A new upgrade scriptlet has been added to add JNI_JAR_DIR into pki.conf. The code to manipulate property files has been refactored from PKIUpgradeTracker into a separate PropertyFile class to allow reuse. The pki-base package has been modified to deliver a default pki.conf in /usr/share/pki/etc and copy it into /etc/pki if it doesn't exist.
* Fixed server upgrade problem on new installation.Endi Sukma Dewata2013-04-291-0/+4
| | | | | | | | The PKIServerUpgrader.get_current_version() incorrectly returns None if there is no instance on the system. It has been modified to return the target version so that no upgrade operation will occur. Bugzilla #957690
* Fix some errors in patch.Ade Lee2013-04-281-4/+3
| | | | | | Update kraconnector-delete call to use -c for database password. Update get-install-token call to specify instance certdb. Removed --ignore-untrusted directives on both. Update man page.
* Ignoring warnings/errors during installation.Endi Sukma Dewata2013-04-281-0/+2
| | | | | | | | The code used by pkispawn and pkidestroy has been modified to ignore certificate validity warnings/errors that happens during installation. The instanceCreationMode is now redundant and has been removed from ClientConfig.
* Replaced ~/.pki with ~/.dogtag.Endi Sukma Dewata2013-04-272-4/+4
| | | | | The default folder for to store user files in the home directory has been changed from .pki to .dogtag.
* Set log level in logfile to debug in pkispawnAde Lee2013-04-263-18/+7
| | | | | | | | The log file is not very useful without the level of logging. If you have occasion to go to the log file, then you want to see all the gory details, This of course is valid for pkidestroy too. Also removed an unneeded import introduced by mistake.
* Show error messages and stack trace when an error occurs.Abhishek Koneru2013-04-262-61/+89
| | | | | | | Print the stacktrace to the log file if there is an error while executing pkispawn. Ticket #592
* Refactored upgrade framework into base and server upgrade.Endi Sukma Dewata2013-04-257-14/+435
| | | | | | | | | | The upgrade framework has been split into base and server upgrade frameworks since they will be run automatically by different RPM packages during upgrade. The base upgrade framework will upgrade the system configuration. The server upgrade framework will upgrade the instances and subsystems. Ticket #544
* Moved pki.conf into base/common.Endi Sukma Dewata2013-04-242-19/+1
| | | | | | | The pki.conf has been moved into the base/common folder to match the RPM package. Ticket #553
* Defect: Installation fails if there is only one system cert.Abhishek Koneru2013-04-231-0/+3
| | | | | | | | | After configuration is done, the JSON result can have only one system cert (in case of clone installation). But the code expects a list of certs rather than a single cert. So when there is only one certificate it is added to a list and processed. Ticket #593
* Remove installation information logs in pkispawn.Abhishek Koneru2013-04-222-20/+2
| | | | | | Do not log the installation information after completion of installation in pkispawn because, when run in verbose mode, All the information is printed twice in an unordered way.
* Added servlet to return 501 for rest operations for d9 instancesAde Lee2013-04-224-40/+177
| | | | | | | | | | D9 instances run on tomcat6, which does not have support for the autheticator and realm. We are not supporting the REST operations on D9 style instances. They will need to be migrated. The migration framework has been modified to process d9 or d10 style instances, and a migration script has been added to add the new servlet to existing d9 instances.
* random certificate serial numbersAndrew Wnuk2013-04-193-0/+6
| | | | | | This patch adds support for random certificate serial numbers. Bug 912554.
* pkispawn/pkidestroy retry setting selinux contexts.Abhishek Koneru2013-04-171-93/+127
| | | | | | | | Add a retry mechanism to pkispawn/pkidestroy when they could not acquire semanage transaction lock while setting/deleting selinux contexts. Ticket #470
* Show some more information after installing a subsystem.Abhishek Koneru2013-04-172-1/+45
| | | | | | | Print the command to get the status of a subsystem and the URL to access after installation. Ticket #514
* Remove sensitive parameters from archived deployment cfg.Abhishek Koneru2013-04-172-6/+10
| | | | | | | Remove the sensitive parameters before archiving the user configurations in the archive file. Ticket #566
* Tracking upgrade using existing config files.Endi Sukma Dewata2013-04-173-1/+9
| | | | | | | | | | | The upgrade framework has been modified to use pki.conf to track system upgrade, tomcat.conf to track instance upgrade, and CS.cfg to track subsystem upgrade. The preop.product.version in CS.cfg has been renamed into cms.product.version and is now used to track upgrade. Ticket #544
* Refactored pki.upgrade module.Endi Sukma Dewata2013-04-175-5/+13
| | | | | | | Some common constants and methods in pki.upgrade have been moved into the pki module. Ticket #544
* Added tokenAuthenticate to admin interfaceAde Lee2013-04-161-6/+63
| | | | | | | Modified code to use this interface by default. Added required migration script code. Ticket 546
* Migration script for cloning changes.Ade Lee2013-04-161-0/+138
| | | | Ticket 546
* Added upgrade script for random number generator.Endi Sukma Dewata2013-04-162-0/+163
| | | | | | | An upgrade script has been added to update the context.xml to configure the random number generator. Ticket #545
* Added upgrade framework.Endi Sukma Dewata2013-04-092-0/+163
| | | | | | | | A new Python library has been added to provide a framework to develop upgrade scriptlets. A new CLI has been added to execute the upgrade scriptlets. Ticket #544
* Remove the respawn logic in deploy scripts.Abhishek Koneru2013-04-0916-145/+16
| | | | | | | | Remove all the declarations, definitions and invocations of respawn() method in the deploment scripts. Remove the -u update option in pkispawn script. Ticket #542
* Renamed base/deploy to base/server.Endi Sukma Dewata2013-04-0936-0/+10944
The base/deploy folder has been renamed to base/server to match the package name. The pki.conf has been moved into pki-base package. Ticket #553, #564
generated by cgit (git 2.34.1) at 2025-10-01 02:28:11 +0000