summaryrefslogtreecommitdiffstats
path: root/base
Commit message (Collapse)AuthorAgeFilesLines
* Renamed PORT and UNSECURE_PORT into PKI_UNSECURE_PORT.Endi Sukma Dewata2013-05-3010-47/+46
| | | | | The PORT and UNSECURE_PORT variables in RA and TPS has been renamed into PKI_UNSECURE_PORT to match the Tomcat-based subsystems.
* Renamed SECURE_PORT into PKI_SECURE_PORT.Endi Sukma Dewata2013-05-307-16/+15
| | | | | The SECURE_PORT variable in RA and TPS has been renamed into PKI_SECURE_PORT to match the Tomcat-based subsystems.
* Reorganized CS.cfg.in in RA and TPS.Endi Sukma Dewata2013-05-306-2/+2
| | | | | The CS.cfg.in in RA and TPS has been moved from doc into shared/conf to match the Tomcat-based subsystems.
* pki-tps various flawsAndrew Wnuk2013-05-232-12/+58
| | | | | | This patch provides fixes to various pki-tps flaws. Bug 966189.
* Do not use sys.exit() after an error.Abhishek Koneru2013-05-215-626/+671
| | | | | | | Raise an exception on error so that it can be handled by the caller. Ticket #562
* Removing JNI_JAR_DIR from /etc/pki/pki.conf.Endi Sukma Dewata2013-05-152-0/+81
| | | | | | Recently the JNI_JAR_DIR was moved into /usr/share/pki/etc/pki.conf. A new upgrade script has been added to remove the unused JNI_JAR_DIR from /etc/pki/pki.conf.
* Added support for backup/restore on upgrade.Endi Sukma Dewata2013-05-159-45/+279
| | | | | | | | | | The upgrade framework has been modified to support backup and restore functionality. A new method backup(filename) has been added to save a file into a backup folder. The CLI's have been modified to accept a --revert parameter which will restore the backup files one version at a time. Ticket #583
* Option to include nextUpdate as an offset to thisUpdateAndrew Wnuk2013-05-143-0/+100
| | | | | | This patch provides an option to generate CRLs with nextUpdate calculated as sum of thisUpdate and an offset. Ticket #571
* Randomized validityAndrew Wnuk2013-05-144-1/+363
| | | | | | This patch provides plug-in randomizing validity Ticket #607
* Bug 952500 - CMCAuth fails with error "CMCAuth: ↵Christina Fu2013-05-101-2/+5
| | | | | | java.security.NoSuchAlgorithmException" when using NetHSM token - small patch to remove Eclipse warning
* Fixed incorrect JNI_JAR_DIR.Endi Sukma Dewata2013-05-076-8/+14
| | | | | | | | | | The JNI_JAR_DIR is supposed to be architecture-specific but the pki-base package is architecture-neutral. So, to ensure it has the correct value, the variable will be set at post installation. Also, to simplify the upgrade process, the variable has been moved from /etc/pki/pki.conf into /usr/share/pki/etc/pki.conf. The build, deployment, startup, and upgrade scripts have been modified accordingly.
* JUnit internal class used in TestRunnerAde Lee2013-05-041-1/+23
| | | | | | | | | runMain() has been changed to private access in latest junit(), breaking the 19 build. We should not have been using this class in the first place. Replaced it with the implementation of runMain() which uses run(classes). Ticket 605
* Fix tests in pkispawn to use legacy URLs as fallbackAde Lee2013-05-042-3/+32
| | | | | | | | | | When setting up clones or non-CA subsystems, pkispawn checks if the security domain is accessible and if the user can log in. These calls invoke REST URIs, which are not available on older subsystems. To support these subsystems, we need to attempt the older legacy servlets if the REST APIs are not available. Ticket #604
* Fixed pkiconsole to work on Fedora 19Matthew Harmsen2013-05-021-2/+2
| | | | * TRAC Ticket #602 - pkiconsole cannot find 'jss4.jar' on Fedora 19
* Bug 952500 - CMCAuth fails with error "CMCAuth: ↵Christina Fu2013-05-021-1/+25
| | | | java.security.NoSuchAlgorithmException" when using NetHSM token
* Restored /etc/pki/pki.conf.Endi Sukma Dewata2013-04-302-3/+11
| | | | | | The /etc/pki/pki.conf has been restored. The RPM spec file has been modified such that it will create system upgrade tracker file (/etc/pki/pki.version) on install and remove it on uninstall.
* Fixed undefined PKIException.Endi Sukma Dewata2013-04-291-2/+2
| | | | | The pki.server module has been fixed to include the module name of the PKIException.
* Fixed undefined BASE_DIR.Endi Sukma Dewata2013-04-291-4/+4
| | | | | The pki.server module has been fixed to include the module name of the BASE_DIR.
* Added upgrade scriptlet to add JNI_JAR_DIR.Endi Sukma Dewata2013-04-298-117/+253
| | | | | | | | | | A new upgrade scriptlet has been added to add JNI_JAR_DIR into pki.conf. The code to manipulate property files has been refactored from PKIUpgradeTracker into a separate PropertyFile class to allow reuse. The pki-base package has been modified to deliver a default pki.conf in /usr/share/pki/etc and copy it into /etc/pki if it doesn't exist.
* Fixed server upgrade problem on new installation.Endi Sukma Dewata2013-04-291-0/+4
| | | | | | | | The PKIServerUpgrader.get_current_version() incorrectly returns None if there is no instance on the system. It has been modified to return the target version so that no upgrade operation will occur. Bugzilla #957690
* Fix some errors in patch.Ade Lee2013-04-282-6/+8
| | | | | | Update kraconnector-delete call to use -c for database password. Update get-install-token call to specify instance certdb. Removed --ignore-untrusted directives on both. Update man page.
* Reverting to old CLI behavior on client database initialization.Endi Sukma Dewata2013-04-283-43/+68
| | | | | | | | | Recently the CLI was changed to initialize the default client database automatically which will create it if it did not exist before. This was causing a problem since the database was not created with a password. To create the database properly a separate command is needed. For now the CLI is reverted to the old behavior where it initializes the database only if it requires for SSL connection and/or client authentication.
* Added separate CLI option for client database password.Endi Sukma Dewata2013-04-282-2/+26
| | | | | | | | Previously the -w option is used to specify the password for either the username/password authentication or client database password to do client certificate authentication. Since the passwords now may be used at the same time, a new -c option has been added for the client database password.
* Ignoring warnings/errors during installation.Endi Sukma Dewata2013-04-285-52/+51
| | | | | | | | The code used by pkispawn and pkidestroy has been modified to ignore certificate validity warnings/errors that happens during installation. The instanceCreationMode is now redundant and has been removed from ClientConfig.
* Replaced ~/.pki with ~/.dogtag.Endi Sukma Dewata2013-04-273-5/+5
| | | | | The default folder for to store user files in the home directory has been changed from .pki to .dogtag.
* Fixed missing classpath for javadoc.Endi Sukma Dewata2013-04-261-1/+1
| | | | | | | The CMake script has been fixed to include the commons-io library when building javadoc. Ticket #491
* Added method to download CA cert chain from admin interface.Endi Sukma Dewata2013-04-263-14/+27
| | | | | | | | A new method has been added to the PKIClient to download the CA certificate chain from an alternative location including the admin interface. Ticket #491
* Updated default client database location for CLI.Endi Sukma Dewata2013-04-262-48/+33
| | | | | | | | The default client database location for CLI has been changed to ~/.dogtag/nssdb. The database will always be initialized regardless whether it is actually used. Ticket #491
* Set log level in logfile to debug in pkispawnAde Lee2013-04-263-18/+7
| | | | | | | | The log file is not very useful without the level of logging. If you have occasion to go to the log file, then you want to see all the gory details, This of course is valid for pkidestroy too. Also removed an unneeded import introduced by mistake.
* Show error messages and stack trace when an error occurs.Abhishek Koneru2013-04-262-61/+89
| | | | | | | Print the stacktrace to the log file if there is an error while executing pkispawn. Ticket #592
* Refactored upgrade framework into base and server upgrade.Endi Sukma Dewata2013-04-2513-403/+682
| | | | | | | | | | The upgrade framework has been split into base and server upgrade frameworks since they will be run automatically by different RPM packages during upgrade. The base upgrade framework will upgrade the system configuration. The server upgrade framework will upgrade the instances and subsystems. Ticket #544
* Added Client CLI module.Endi Sukma Dewata2013-04-257-1/+373
| | | | | | | A new CLI module has been added to manage certificates in client security database. Ticket #491
* Refactored code to import CA certificate.Endi Sukma Dewata2013-04-2520-180/+264
| | | | | | | | | | | | | The code to import CA certificate has been moved from PKIConnection into PKIClient to allow reuse. The Client classes have been modified such that it uses a shared PKIClient object instead of PKIConnection. The return codes in CertFindCLI has been fixed to be more consistent with other commands. Ticket #491
* Fix sslget to skip link local addressesMatthew Harmsen2013-04-261-40/+83
| | | | | * Bugzilla Bug #953464 - ipa-server-install crashes due to sslget error * Bugzilla Bug #859043 - ipa-server-install results in error -5987
* cloning improvementAndrew Wnuk2013-04-251-6/+11
| | | | | | This patch improves cloning in regards to configuration of random certificate serial numbers. Bug: 922121.
* Moved pki.conf into base/common.Endi Sukma Dewata2013-04-243-13/+14
| | | | | | | The pki.conf has been moved into the base/common folder to match the RPM package. Ticket #553
* correcting JavaScript inability to handle big numbersAndrew Wnuk2013-04-248-8/+24
| | | | | | This patch corrects JavaScript inability to handle big numbers in key key recovery process. Bug: 955784.
* Defect: Installation fails if there is only one system cert.Abhishek Koneru2013-04-231-0/+3
| | | | | | | | | After configuration is done, the JSON result can have only one system cert (in case of clone installation). But the code expects a list of certs rather than a single cert. So when there is only one certificate it is added to a list and processed. Ticket #593
* Check the actual result of operations cert revoke/unrevoke.Abhishek Koneru2013-04-236-23/+88
| | | | | | | | Output the actual result of a revoke/unrevoke operation in CLI. Since the actual result of the operation can be different from the cert request status. Ticket #217
* corrected JavaScript issue with big numbersAndrew Wnuk2013-04-235-9/+12
| | | | | | This patch corrects key IDs miscalculated by JavaScript for key search results and key record views. Bug: 951501.
* Added options to reject/ignore cert validity statuses.Endi Sukma Dewata2013-04-223-17/+124
| | | | | | | | New options have been added to the CLI to reject or ignore certain cert validity statuses such as UNTRUSTED_ISSUER or BAD_CERT_DOMAIN. The options can also be defined in pki.conf as a system-wide policy. Ticket #491
* Adding CLI functionality to import CA certificate.Endi Sukma Dewata2013-04-222-2/+75
| | | | | | | | | The CLI has been modified such that when it connects to an untrusted server it will ask the user whether to import the CA certificate and also ask for the location of the CA server from which to download the CA certificate. Ticket #491
* Remove installation information logs in pkispawn.Abhishek Koneru2013-04-222-20/+2
| | | | | | Do not log the installation information after completion of installation in pkispawn because, when run in verbose mode, All the information is printed twice in an unordered way.
* Minor fixes in a few configuration UI panels of RA and TPS.Abhishek Koneru2013-04-229-34/+25
| | | | | | | | Changed the status check and restart commands to systemctl. The text $errorString will not be seen when the security domain login panel is launched for the first time. Ticket #452
* Added servlet to return 501 for rest operations for d9 instancesAde Lee2013-04-227-122/+370
| | | | | | | | | | D9 instances run on tomcat6, which does not have support for the autheticator and realm. We are not supporting the REST operations on D9 style instances. They will need to be migrated. The migration framework has been modified to process d9 or d10 style instances, and a migration script has been added to add the new servlet to existing d9 instances.
* random certificate serial numbersAndrew Wnuk2013-04-1917-60/+733
| | | | | | This patch adds support for random certificate serial numbers. Bug 912554.
* Using FQDN instead of localhost in CLIEndi Sukma Dewata2013-04-191-4/+6
| | | | | | | The CLI has been modified such that by default it will use FQDN instead of localhost to avoid SSL certificate warnings. Ticket #541
* pkispawn/pkidestroy retry setting selinux contexts.Abhishek Koneru2013-04-171-93/+127
| | | | | | | | Add a retry mechanism to pkispawn/pkidestroy when they could not acquire semanage transaction lock while setting/deleting selinux contexts. Ticket #470
* Show some more information after installing a subsystem.Abhishek Koneru2013-04-172-1/+45
| | | | | | | Print the command to get the status of a subsystem and the URL to access after installation. Ticket #514
* Remove sensitive parameters from archived deployment cfg.Abhishek Koneru2013-04-172-6/+10
| | | | | | | Remove the sensitive parameters before archiving the user configurations in the archive file. Ticket #566
generated by cgit (git 2.34.1) at 2024-07-01 05:34:56 +0000