summaryrefslogtreecommitdiffstats
path: root/base
Commit message (Collapse)AuthorAgeFilesLines
...
* Fixed missing links in TPS UI.Endi S. Dewata2014-05-071-0/+2
| | | | | New links to profiles and profile mappings have been added to TPS UI home page.
* Replaced filter in UGSubsystem.findUsers().Endi S. Dewata2014-05-052-7/+22
| | | | | | | | | The findUsers() method in UGSubsystem has been modified to search additional attributes in the user database. This method is only used by the UserService, so the impact is limited to user-find CLI command in all subsystems and TPS UI. Ticket #920
* Fixed UGSubsystem.getUser().Endi S. Dewata2014-05-052-31/+44
| | | | | | | | | | Previously the getUser() method in UGSubsystem was using findUsers() which uses a subtree search to find users. It has been replaced with a base search which is more accurate since the user DN is known. The code has also been simplified to merge the two cases where the input parameter could be a user ID or a DN. Ticket #920
* Fixed ConfigurationUtils.setupDBUser().Endi S. Dewata2014-05-051-10/+16
| | | | | | | | | | Previously the ConfigurationUtils.setupDBUser() was using findUsers() to get a list of users and then only use the first one. It has been replaced with getUser() which will return the user directly. If the user doesn't exist, findUsers() will throw an exception whereas the getUser() will return null, so the try-catch block has been removed. Ticket #920
* Support for Applet Upgrade and Format.Jack Magne2014-04-3010-50/+402
| | | | | | | | | | | | | | | | | | | | The following changes have been done: 1. Applet Upgrade for real token. The applet is written and an instance of applet created. 2. 95% of the format operation done. This includes proper status update progreass bar for esc and writing the phone home url to the token. Once this operation is complete, the token can be entered into esc and esc will be able to phone home and point to TPS for further operations such as enrollment and pin reset when they are implemented. 3. The phoneHome xml file changed slightly to prevent esc from reading exttraneous line feeds when phoning home. 4. The CS.cfg has been changed to correctly reflect the phone home url we want to write to the token. The following to be done to fully finish format, later tickets. 1.Updating the tokendb with tne newly formatted token. Future ticket. 2.Revoking tokens current certificates, if any. Future ticket. 3.Symmetric Key changeover. Future ticket.
* Attempt to clarify pki-cert-request-review commandMatthew Harmsen2014-04-302-4/+19
| | | | | * PKI TRAC Ticket #585 - 'pki cert-request-review' --output creates a file only when --action attribute is not present
* Fixed TPS connector configuration.Endi S. Dewata2014-04-3012-162/+313
| | | | | | | | | | | | | | | | | | | | The code that configures the TPS connectors during installation has been modified to use the ConnectionDatabase, which is also used by the CLI/UI after the installation. The code has also been fixed to configure the correct properties as defined in CS.cfg. The static properties have been removed from CS.cfg because now they will be generated dynamically by the ConnectionDatabase. Due to class dependency issue, the methods for configuring the TPS connectors have been moved from ConfigurationUtils into a new TPSInstaller class. The URI's in ConfigurationRequest have been converted from String into URI to simplify validation. Ticket #890
* Updated TPS search filters.Endi S. Dewata2014-04-294-6/+24
| | | | | | | The token, certificate, and activity database have been updated to search against some predetermined attributes. Ticket #920
* Fixed issue by streamlining code to be more consistent.Matthew Harmsen2014-04-29102-1022/+1839
| | | | * PKI TRAC Ticket #843 - Incorrect CLI argument parsing
* Updated REST interface for security domain.Endi S. Dewata2014-04-283-8/+21
| | | | | | | The REST interface for security domain has been modified to return Response objects to allow better handling of server responses. Ticket #554
* Secure Channel final steps.Jack Magne2014-04-283-19/+16
| | | | | | | | | | | | | This patch allows the current secure channel functionality to work with both tpsclient and esc. In order to get esc to work the following changes were needed. 1. It turns out the server has been been forcing chunked encoding format upon the outgoing data. Turns out that the system already knows how to do this so we were getting double chunk size values and getting twice the amount of CRLF chars. 2. There was a minor error where I was not attempting to select the card manager applet but the coolkey applet, which does not exist yet.
* Refactored SystemConfigService (part 12).Endi S. Dewata2014-04-255-127/+146
| | | | | | | Subsystem-specific configuration codes have been moved from the SystemConfigService into the subsystem-specific installer. Ticket #890
* Refactored SystemConfigService (part 11).Endi S. Dewata2014-04-252-15/+22
| | | | | | | TPS-specific database configuration code has been moved from the SystemConfigService into TPS-specific installer. Ticket #890
* Refactored SystemConfigService (part 10).Endi S. Dewata2014-04-252-79/+85
| | | | | | | The TPS-specific connector configuration code have been moved from the SystemConfigService into the TPS-specific installer. Ticket #890
* Refactored SystemConfigService (part 9).Endi S. Dewata2014-04-2510-10/+165
| | | | | | | | | New subclasses of SystemConfigService have been added for each subsystem to replace the base installer. Initially these classes are blank, so they are identical to the base class. Later they will store subsystem-specific installation code. Ticket #890
* Refactored SystemConfigService (part 8).Endi S. Dewata2014-04-251-32/+37
| | | | | | | The TPS-specific code to finalize the configuration has been moved into a separate method. Ticket #890
* Refactored SystemConfigService (part 7).Endi S. Dewata2014-04-251-22/+24
| | | | | | | The OCSP-specific codes to finalize the configuration have been moved into separate methods. Ticket #890
* Refactored SystemConfigService (part 6).Endi S. Dewata2014-04-251-20/+28
| | | | | | | The KRA-specific code to finalize the configuration has been moved into a separate method. Ticket #890
* Refactored SystemConfigService (part 5).Endi S. Dewata2014-04-251-18/+33
| | | | | | | The CA-specific code to finalize the configuration has been moved into a separate method. Ticket #890
* Refactored SystemConfigService (part 4).Endi S. Dewata2014-04-251-11/+14
| | | | | | Some methods have been renamed for clarity. Ticket #890
* Refactored SystemConfigService (part 3).Endi S. Dewata2014-04-251-90/+107
| | | | | | | Some additional codes in SystemConfigService.configure() have been moved into separate methods. Ticket #890
* Refactored SystemConfigService (part 2).Endi S. Dewata2014-04-251-178/+205
| | | | | | | | In this patch the code that processes the certificate list has been moved into a new processCerts() method. Some variables have been renamed and some cleanup has been done for clarity. Ticket #890
* Refactored SystemConfigService (part 1).Endi S. Dewata2014-04-251-45/+44
| | | | | | | | | | | | | | This series of patches will incrementally refactor the SystemConfigService to make it more manageable, which will help development and troubleshooting, and also to resolve potential dependency issues on subsystem-specific installation procedures. This patch converts the code that handles the certificate list to use to Collection framework and to avoid duplicate parsing. It also contains some code cleanup. Ticket #890
* Converted TPS connector docs into man page.Endi S. Dewata2014-04-253-81/+229
| | | | | | | | The TPS connector docs in the CS.cfg have been converted into pki-tps-connector manual page. The build scripts have been updated accordingly. Ticket #890, #950.
* Reorganized TPS installer classes.Endi S. Dewata2014-04-255-5/+19
| | | | | | | | Some TPS-specific installation wizard panels have been moved from the common server package into the TPS package. The build script has been fixed accordingly. Ticket #890
* Added group members table in TPS UI.Endi S. Dewata2014-04-226-13/+214
| | | | | | | | | | A new table has been added to the group page in TPS UI for managing the group members. The addGroupMember() method in group REST interface has been fixed to accept JSON request properly. Ticket #654
* Fixed user's name in TPS UI.Endi S. Dewata2014-04-218-12/+266
| | | | | | | | | | | | | | | | Previously the user's name displayed in the top right corner of the TPS UI was hardcoded to Administrator. It has been fixed to display the full name of the authenticated user obtained from the server. The login() method in the account REST service has been modified to return the account information about the user and the roles in which the user belongs. This information can later be used to further customize the behavior of the UI based on the authorization data. The PKIRealm has been modified to store the authenticated user info in the PKI principal. Ticket #654
* Added development tool to aid in verifying the following two PKI TRAC tickets:Matthew Harmsen2014-04-171-0/+310
| | | | | * PKI TRAC Ticket #843 - Incorrect CLI argument parsing * PKI TRAC Ticket #918 - CLI commands does not return code '1' for the failures
* CLI argument parsing and bad return codesMatthew Harmsen2014-04-17103-47/+731
| | | | | * PKI TRAC Ticket #843 - Incorrect CLI argument parsing * PKI TRAC Ticket #918 - CLI commands does not return code '1' for the failures
* Added help option for all Key CLIsAbhishek Koneru2014-04-1612-1/+90
|
* Fixes for comments on patches 87 and 89Abhishek Koneru2014-04-1623-277/+369
|
* Added new CLI commands for Key resource.Abhishek Koneru2014-04-1612-9/+763
| | | | | key-archive, key-retrieve, key-recover, key-generate, key-request-review, key-template-show, key-template-find
* New CLI commands for Key and KeyRequest resources.Abhishek Koneru2014-04-165-1/+189
| | | | | This patch adds three new CLI commands - KeyShowCLI, KeyRequestShowCLI, KeyModifyCLI
* PhoneHome feature:Jack Magne2014-04-156-0/+129
| | | | | | 1. Provides an xml file served by TPS to allow the client(esc) to configure itself to contact TPS. 2. Edewata review fixes. Return application/xml instead of text/xml, and fix how the phone home file path is calculated.
* Fixed missing Accept header handling.Endi S. Dewata2014-04-152-13/+41
| | | | | | | Some clients might not send the Accept header when invoking the REST services. To handle this the REST services have been modified to use the Content-type if the Accept header is missing, or use a default message format if Content-type is not specified.
* Added breadcrumb to TPS UI.Endi S. Dewata2014-04-1541-501/+677
| | | | | | | | | | | | | | | | | | | | The TPS UI has been modified to use Backbone.Router to assign a unique path for each page. This way the browser's Back button will work properly and the page can be bookmarked. A home page has been added for the UI. Currently it provide links to all available pages. In the future it might be changed to display more useful information. A breadcrumb has been added to the top of each page to provide links back to the home page. Some new font files have been added from PatternFly library. The EntryWithPropertiesPage has been renamed to ConfigEntryPage. The Navigation class is no longer used so it has been removed. Ticket #959
* Replaced activity dialog with activity page.Endi S. Dewata2014-04-154-39/+77
| | | | | | | | The dialog used to view activity attributes has been replaced with a details page since it will be required for breadcrumbs. A new HTML template has been added for this page. Ticket #654
* Replaced certificate dialog with certificate page.Endi S. Dewata2014-04-154-43/+81
| | | | | | | | The dialog used to view certificate attributes has been replaced with a details page since it will be required for breadcrumbs. A new HTML template has been added for this page. Ticket #654
* Replaced self test dialog with self test page.Endi S. Dewata2014-04-154-34/+75
| | | | | | | | The dialog used to view self test attributes has been replaced with a details page since it will be required for breadcrumbs. A new HTML template has been added for this page. Ticket #654
* Replaced group dialog with group page.Endi S. Dewata2014-04-154-36/+95
| | | | | | | | The dialog used to edit group attributes has been replaced with a details page since it will be required for breadcrumbs. A new HTML template has been added for this page. Ticket #654
* Replaced user dialog with user page.Endi S. Dewata2014-04-155-50/+105
| | | | | | | | | | | The dialog used to edit user attributes has been replaced with a details page since it will be required for breadcrumbs. A new HTML template has been added for this page. The renderField() in EntryPage has been renamed to loadField() for consistency with the Dialog clas. Ticket #654
* Replaced token dialog with token page.Endi S. Dewata2014-04-1520-135/+320
| | | | | | | | | | | | | | | | | The dialog used to edit token attributes has been replaced with a details page since it will be required for breadcrumbs. A new HTML template has been added for this page. Changing token status now can be done both in token list page and in token details page. The EntryPage has been modified such that it requires the editable fields to be specified for the add mode. To improve the appearance, the input fields in all dialogs and pages will now appear as read-only while the data is still loading. Ticket #654
* Added enable/disable functionality for TPS audit.Endi S. Dewata2014-04-1512-40/+189
| | | | | | | | | A new method has been added to TPS audit REST service to enable or disable audit logging. The CLI and UI have been modified to provide a way to acces this functionality. Also, new ACL entries have been added for audit. Ticket #955
* Added error dialog for TPS UI.Endi S. Dewata2014-04-155-12/+111
| | | | | | | Previously error messages were displayed using alert(). It has been replaced with a new ErrorDialog which can be formatted properly. Ticket #949
* Removed unused menu item in TPS UI.Endi S. Dewata2014-04-151-2/+0
| | | | | | | The Settings menu item in TPS UI has been removed because the functionality will not be added in this release. Ticket #654
* Added change token status dialog.Endi S. Dewata2014-04-1510-48/+393
| | | | | | | | | | | | | | | | | A new dialog has been added to change the token status. The status can be changed by clicking the Status value in the tokens table. Initially the status is Uninitialized. The status can be changed according to the allowed status transitions defined in the CS.cfg. The status and reason fields in TokenRecord is now translated into a single status field in TokenData. This way the UI only needs to handle a single status field. A new field has also been added to the database for token type. Some issues displaying and updating some token attributes have been fixed as well. Ticket #654
* Refactored UI framework.Endi S. Dewata2014-04-1521-133/+160
| | | | | | | | | | | | | | | | | | | Previously the content of table cells was generated by JavaScript code. Now the content can be defined in the HTML template to allow cleaner separation from the code. Attributes of the entry being displayed in the row can now be specified in the template using ${attribute} notation. A special attribute called "parent" can be used to refer to the attributes of the parent object. The current templates have been modified to utilize this feature. The renderIDColumn() in TableItem is no longer needed so it has been removed. An open() method is added to handle any links in the cell. The PropertiesTableItem has been moved into tps.js. The "attributes" property in Dialog and EntryPage has been renamed to "entry". Ticket #654
* Further progress Format operation.Jack Magne2014-04-1445-241/+1547
| | | | | | | | | | | | 1. Read applet into memory to prepare to write to token. 2. With tpsclient create secure channel by implementing Initialize Update and ExternalAuthenticate messages. 3. Support for MAC and encryption for messages going on after secure channel has been created. 4. Implemented method to remove an aid file or instance from the token. 5. Added some symkey methods to allow TPS to manipulate session keys. 6. Performed some cfu feedback fixes such as changing al the names of APDU classes to have APDU in the name. Have not tried this with real token as of yet. The tpsclient does verify of the MAC coming from the server and decrypts encrypted messages. Decrypted messages have to be correct for the MAC verification to work. Next step will be to add the phone home servlet to the TPS and give it a try with a real token and esc.
* Trac ticket # 884 TPS Rewrite: Audit and other LoggingChristina Fu2014-04-112-2/+61
| | | | http://pki.fedoraproject.org/wiki/TPS_Rewrite#Audit_Messages
* trac ticket #888 part2 CA/KRA functions - TPS rewrite: provide remote ↵Christina Fu2014-04-0920-90/+1439
| | | | authority functions
generated by cgit (git 2.34.1) at 2025-10-03 17:13:26 +0000