summaryrefslogtreecommitdiffstats
path: root/pki/base/tps
Commit message (Collapse)AuthorAgeFilesLines
* Fixed bugzilla bug #737184.awnuk2011-09-212-8/+20
| | | | git-svn-id: svn+ssh://svn.fedorahosted.org/svn/pki/trunk@2216 c9f7a03b-bd48-0410-a16d-cbbf54688b0b
* Fix bugzilla #730162 - TPS/TKS token enrollment failure in FIPS mode (hsm+NSS) .jmagne2011-09-163-22/+229
| | | | git-svn-id: svn+ssh://svn.fedorahosted.org/svn/pki/trunk@2205 c9f7a03b-bd48-0410-a16d-cbbf54688b0b
* Bugzilla 730146 - SSL handshake picks non-FIPS ciphers in FIPS modecfu2011-08-263-0/+61
| | | | git-svn-id: svn+ssh://svn.fedorahosted.org/svn/pki/trunk@2180 c9f7a03b-bd48-0410-a16d-cbbf54688b0b
* Fix Bugzilla Bug# 725572 - Starting TPS subsystem with no pre-existing audit ↵jmagne2011-08-013-8/+54
| | | | | | log file does not write audit messages. git-svn-id: svn+ssh://svn.fedorahosted.org/svn/pki/trunk@2089 c9f7a03b-bd48-0410-a16d-cbbf54688b0b
* Bugzilla Bug #669226 - Remove Legacy Build System (Ant + Autoconf --> CMake)mharmsen2011-07-1322-42908/+0
| | | | git-svn-id: svn+ssh://svn.fedorahosted.org/svn/pki/trunk@2057 c9f7a03b-bd48-0410-a16d-cbbf54688b0b
* Bugzilla BZ717765 - TPS configuration: logging into security domain from tps ↵vakwetu2011-07-055-10/+10
| | | | | | does not work with clientauth=want git-svn-id: svn+ssh://svn.fedorahosted.org/svn/pki/trunk@2041 c9f7a03b-bd48-0410-a16d-cbbf54688b0b
* Bugzilla Bug#717813 - EV_AUDIT_LOG_SHUTDOWN audit log not generated for tps ↵vakwetu2011-06-303-65/+113
| | | | | | and ca on server shutdown git-svn-id: svn+ssh://svn.fedorahosted.org/svn/pki/trunk@2030 c9f7a03b-bd48-0410-a16d-cbbf54688b0b
* Bugzilla BZ 707095 - tps delete user operation should check for roles (not ↵vakwetu2011-05-241-13/+29
| | | | | | have them passed in) git-svn-id: svn+ssh://svn.fedorahosted.org/svn/pki/trunk@2008 c9f7a03b-bd48-0410-a16d-cbbf54688b0b
* fix Bugzilla bug#696443 - ESC display renewal operation success for failed ↵jmagne2011-05-183-7/+20
| | | | | | renewal operation. git-svn-id: svn+ssh://svn.fedorahosted.org/svn/pki/trunk@1999 c9f7a03b-bd48-0410-a16d-cbbf54688b0b
* Bugzilla Bug #699837 - service command is not fully backwards compatible withmharmsen2011-04-261-0/+4
| | | | | | | Dogtag pki subsystems. git-svn-id: svn+ssh://svn.fedorahosted.org/svn/pki/trunk@1988 c9f7a03b-bd48-0410-a16d-cbbf54688b0b
* Possible Fix for Bugzilla Bug#696851 - TPS crashes that cause AuditVerify on ↵jmagne2011-04-161-1/+3
| | | | | | TPS audit logs - some of the signatures are failing. git-svn-id: svn+ssh://svn.fedorahosted.org/svn/pki/trunk@1973 c9f7a03b-bd48-0410-a16d-cbbf54688b0b
* Bugzilla BZ 694569 - parameter used by pkiremove not updatedvakwetu2011-04-151-2/+14
| | | | git-svn-id: svn+ssh://svn.fedorahosted.org/svn/pki/trunk@1964 c9f7a03b-bd48-0410-a16d-cbbf54688b0b
* Bugzilla Bug 697035: TPS dataabase schema not populated correctlyvakwetu2011-04-152-5/+42
| | | | git-svn-id: svn+ssh://svn.fedorahosted.org/svn/pki/trunk@1963 c9f7a03b-bd48-0410-a16d-cbbf54688b0b
* Bugzilla BZ#691867: add ldaps support through perLDAPvakwetu2011-04-0110-363/+416
| | | | git-svn-id: svn+ssh://svn.fedorahosted.org/svn/pki/trunk@1938 c9f7a03b-bd48-0410-a16d-cbbf54688b0b
* Bugzilla BZ#689956: TPS Configuration with nethsm: audit signing certificate ↵vakwetu2011-03-241-1/+7
| | | | | | location is not configured to nethsm in CS.cfg git-svn-id: svn+ssh://svn.fedorahosted.org/svn/pki/trunk@1923 c9f7a03b-bd48-0410-a16d-cbbf54688b0b
* revert mistakenly checked in changes in rev 1920vakwetu2011-03-241-7/+1
| | | | git-svn-id: svn+ssh://svn.fedorahosted.org/svn/pki/trunk@1921 c9f7a03b-bd48-0410-a16d-cbbf54688b0b
* Bugzilla BZ#689662 - ocsp publishing needs to be re-enabled on the EE portvakwetu2011-03-241-1/+7
| | | | git-svn-id: svn+ssh://svn.fedorahosted.org/svn/pki/trunk@1920 c9f7a03b-bd48-0410-a16d-cbbf54688b0b
* Bugzilla Bug #684381 - CS.cfg specifies incorrect type of comments . . .mharmsen2011-03-231-40/+45
| | | | git-svn-id: svn+ssh://svn.fedorahosted.org/svn/pki/trunk@1915 c9f7a03b-bd48-0410-a16d-cbbf54688b0b
* Bugzilla BZ#684259: incorrect group used for tps operatorsvakwetu2011-03-114-7/+14
| | | | git-svn-id: svn+ssh://svn.fedorahosted.org/svn/pki/trunk@1895 c9f7a03b-bd48-0410-a16d-cbbf54688b0b
* Fix Bugzilla Bug 681066 - TPS authentication crash when exercising audit log ↵jmagne2011-03-011-1/+1
| | | | | | message. git-svn-id: svn+ssh://svn.fedorahosted.org/svn/pki/trunk@1873 c9f7a03b-bd48-0410-a16d-cbbf54688b0b
* Fix Bugzilla Bug 680567 - CC doc: remove update.applet.directory audit ↵jmagne2011-02-263-4/+4
| | | | | | message from TPS doc. git-svn-id: svn+ssh://svn.fedorahosted.org/svn/pki/trunk@1867 c9f7a03b-bd48-0410-a16d-cbbf54688b0b
* Fix Bug 676152 - Token enrollment with symmetric key change over fails.jmagne2011-02-182-6/+53
| | | | git-svn-id: svn+ssh://svn.fedorahosted.org/svn/pki/trunk@1855 c9f7a03b-bd48-0410-a16d-cbbf54688b0b
* Bugzilla BZ674396: TPS: some audit signatures failed to verifyvakwetu2011-02-151-0/+2
| | | | git-svn-id: svn+ssh://svn.fedorahosted.org/svn/pki/trunk@1852 c9f7a03b-bd48-0410-a16d-cbbf54688b0b
* Fix Bug 676152 - Token enrollment with symmetric key change over fails.jmagne2011-02-152-11/+79
| | | | git-svn-id: svn+ssh://svn.fedorahosted.org/svn/pki/trunk@1851 c9f7a03b-bd48-0410-a16d-cbbf54688b0b
* Bugzilla Bug #606944 - Convert TPS to use ldap utilities and API from OpenLDAPmharmsen2011-02-156-7/+7
| | | | | | | instead of the Mozldap git-svn-id: svn+ssh://svn.fedorahosted.org/svn/pki/trunk@1848 c9f7a03b-bd48-0410-a16d-cbbf54688b0b
* Bugzilla Bug 676678 - Missing audit log messages for Secure Channel Generation.jmagne2011-02-103-2/+52
| | | | git-svn-id: svn+ssh://svn.fedorahosted.org/svn/pki/trunk@1841 c9f7a03b-bd48-0410-a16d-cbbf54688b0b
* Bugzilla Bug 676421 - CC: Remove unused TPS interface calls and add audit ↵vakwetu2011-02-091-29/+29
| | | | | | logging git-svn-id: svn+ssh://svn.fedorahosted.org/svn/pki/trunk@1836 c9f7a03b-bd48-0410-a16d-cbbf54688b0b
* Bugzilla Bug 669804 - on active token re-enroll, TPS does not revoke and ↵jmagne2011-02-012-2/+23
| | | | | | remove existing certs. git-svn-id: svn+ssh://svn.fedorahosted.org/svn/pki/trunk@1803 c9f7a03b-bd48-0410-a16d-cbbf54688b0b
* Bugzilla Bug #606944 - Convert TPS to use ldap utilities and API from OpenLDAPmharmsen2011-01-279-37/+55
| | | | | | | instead of the Mozldap (CMake diffs et. al.) git-svn-id: svn+ssh://svn.fedorahosted.org/svn/pki/trunk@1787 c9f7a03b-bd48-0410-a16d-cbbf54688b0b
* Bugzilla Bug 606944: convert to openldap - add -x to ldapsearch and ldapmodifyvakwetu2011-01-2710-9/+16
| | | | git-svn-id: svn+ssh://svn.fedorahosted.org/svn/pki/trunk@1786 c9f7a03b-bd48-0410-a16d-cbbf54688b0b
* Bug 671522 - TPS AuditVerify failscfu2011-01-271-1/+1
| | | | git-svn-id: svn+ssh://svn.fedorahosted.org/svn/pki/trunk@1785 c9f7a03b-bd48-0410-a16d-cbbf54688b0b
* Fix Bugzilla Bug 614639- 64k gemalto usb token no longer works properly ↵jmagne2011-01-274-14/+17
| | | | | | after a logout request is issued git-svn-id: svn+ssh://svn.fedorahosted.org/svn/pki/trunk@1783 c9f7a03b-bd48-0410-a16d-cbbf54688b0b
* Fix Bugzilla Bug 614639- 64k gemalto usb token no longer works properly ↵jmagne2011-01-271-0/+0
| | | | | | after a logout request is issued git-svn-id: svn+ssh://svn.fedorahosted.org/svn/pki/trunk@1782 c9f7a03b-bd48-0410-a16d-cbbf54688b0b
* Bugzilla BZ 606944: Convert TPS to use ldap utilities and API from OpenLDAP ↵vakwetu2011-01-2232-7641/+3987
| | | | | | instead of the Mozldap git-svn-id: svn+ssh://svn.fedorahosted.org/svn/pki/trunk@1766 c9f7a03b-bd48-0410-a16d-cbbf54688b0b
* Bug 669055 - TPS server does not re-start when signedAudit logging is turned ONcfu2011-01-153-14/+36
| | | | git-svn-id: svn+ssh://svn.fedorahosted.org/svn/pki/trunk@1736 c9f7a03b-bd48-0410-a16d-cbbf54688b0b
* Bugzilla Bug 223319 - Certificate Status inconsistency between token db and CAvakwetu2011-01-144-9/+41
| | | | git-svn-id: svn+ssh://svn.fedorahosted.org/svn/pki/trunk@1734 c9f7a03b-bd48-0410-a16d-cbbf54688b0b
* Bug 666902 - TPS needs to call CERT_VerifyCertificate() correctlycfu2011-01-123-34/+68
| | | | git-svn-id: svn+ssh://svn.fedorahosted.org/svn/pki/trunk@1728 c9f7a03b-bd48-0410-a16d-cbbf54688b0b
* cmake: Fixed tps library versioning.asn2010-12-171-5/+2
| | | | git-svn-id: svn+ssh://svn.fedorahosted.org/svn/pki/trunk@1647 c9f7a03b-bd48-0410-a16d-cbbf54688b0b
* Bugzilla Bug #586073 - Add new 'mod_revocator' runtime dependency to RA and TPSmharmsen2010-12-1411-1653/+156
| | | | git-svn-id: svn+ssh://svn.fedorahosted.org/svn/pki/trunk@1624 c9f7a03b-bd48-0410-a16d-cbbf54688b0b
* Fix Bugzilla Bug 512248 - Status mismatch for the encryption cert in tps ↵jmagne2010-12-102-2/+95
| | | | | | agent and CA when a temporary smart card is issued. git-svn-id: svn+ssh://svn.fedorahosted.org/svn/pki/trunk@1616 c9f7a03b-bd48-0410-a16d-cbbf54688b0b
* Bugzilla Bug 651001 - TPS does not create a password for entries in ldap. ↵vakwetu2010-12-082-1/+51
| | | | | | This violates STIG requirements git-svn-id: svn+ssh://svn.fedorahosted.org/svn/pki/trunk@1614 c9f7a03b-bd48-0410-a16d-cbbf54688b0b
* Bugzilla Bug 223314 - AOL: Better activities logsvakwetu2010-12-086-86/+178
| | | | git-svn-id: svn+ssh://svn.fedorahosted.org/svn/pki/trunk@1610 c9f7a03b-bd48-0410-a16d-cbbf54688b0b
* Bugzilla Bug 661128 - incorrect CA ports used for revoke, unrevoke certs in TPSvakwetu2010-12-081-2/+2
| | | | git-svn-id: svn+ssh://svn.fedorahosted.org/svn/pki/trunk@1608 c9f7a03b-bd48-0410-a16d-cbbf54688b0b
* Bugzilla Bug #643206 - New CMake based build system for Dogtagmharmsen2010-12-072-0/+16
| | | | git-svn-id: svn+ssh://svn.fedorahosted.org/svn/pki/trunk@1607 c9f7a03b-bd48-0410-a16d-cbbf54688b0b
* Bug 499494 - change CA defaults to SHA2cfu2010-12-031-3/+3
| | | | | | | - changed defaults in CS.cfg's from SHA1 to SHA2 git-svn-id: svn+ssh://svn.fedorahosted.org/svn/pki/trunk@1601 c9f7a03b-bd48-0410-a16d-cbbf54688b0b
* Bugzilla Bug #643206 - New CMake based build system for Dogtagmharmsen2010-12-025-106/+38
| | | | | | | (Legacy build system changes for compliance) git-svn-id: svn+ssh://svn.fedorahosted.org/svn/pki/trunk@1597 c9f7a03b-bd48-0410-a16d-cbbf54688b0b
* Bug 642357 - CC Feature- Self-Test plugins only check for validity (missing ↵cfu2010-12-011-0/+6
| | | | | | CS.cfg changes) git-svn-id: svn+ssh://svn.fedorahosted.org/svn/pki/trunk@1596 c9f7a03b-bd48-0410-a16d-cbbf54688b0b
* Bug 642357 - CC Feature- Self-Test plugins only check for validity - (TPS part)cfu2010-12-017-7/+293
| | | | git-svn-id: svn+ssh://svn.fedorahosted.org/svn/pki/trunk@1594 c9f7a03b-bd48-0410-a16d-cbbf54688b0b
* Bugzilla BZ640042: TPS Installlation Wizard: need to move Module Panel up to ↵vakwetu2010-11-302-4/+4
| | | | | | before Security Domain Panel git-svn-id: svn+ssh://svn.fedorahosted.org/svn/pki/trunk@1590 c9f7a03b-bd48-0410-a16d-cbbf54688b0b
* Fix issues discovered during testingjdennis2010-11-193-5/+0
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | During testing with Ade several issues were discovered which needed fixing, these included: Remove connectionTimeout on JSS connectors in the server.xml files due to JSS bug. We will reenable the timeouts when JSS is fixed. pki_apache_initscript had chmod & chown wrapped in an echo command which prevented them from executing, an artifact inadverantly left in the file during a debug session. The role parameter to runcon which had been added to facilitate test/debug was removed. The logfile variables shared between pkicommon, pkicreate and pkiremove were awkward and resulted in warnings about the use of uninitialized variables in some circumstances. Some functions were tweaked and some variables removed to enforce better data hiding and eliminate the warnings with respect to the logfile. If the pkicreate script aborted before it completed it would fail to write the installation manifest which made it impossible to remove the partial installation via pkiremove. A hander was added so it would run if Perl executed a "die" (e.g. aborted). The handler writes the manifest before final exit. The subroutine used to write the manifest was bullet proofed to avoid referencing uninitialized variables in the case of non-normal exit. The copy_directory() subroutine failed to preserve symbolic links in the source, instead it traversed the source link and copied the target of the link. copy_directory() and it's support routines were enhanced to preserve symbolic links. A new subrotine copy_symlink() was added. pkicreate failed to create a symbolic link to the symkey.jar file, it now creates the link to symkey.jar. The passwords written into the two password files were not terminated with a newline character, now they are. pkiremove would enter an infinate loop if the -force option was specified, this is now fixed. The tomcat6.conf file had been inadvertantly omitted from the tks subsystem. References to the deprecated apachectl file were expunged. git-svn-id: svn+ssh://svn.fedorahosted.org/svn/pki/trunk@1577 c9f7a03b-bd48-0410-a16d-cbbf54688b0b