summaryrefslogtreecommitdiffstats
path: root/pki/specs
Commit message (Collapse)AuthorAgeFilesLines
* Removed unnecessary pki folder.Endi Sukma Dewata2012-03-268-4248/+0
| | | | | | | | | Previously the source code was located inside a pki folder. This folder was created during svn migration and is no longer needed. This folder has now been removed and the contents have been moved up one level. Ticket #131
* BZ 802396 - Change location of TOMCAT_LOG to match tomcat6 changesAde Lee2012-03-201-6/+27
| | | | | | | | | | Tomcat6 has changed the changed the location of the TOMCAT_LOG, and it should no longer point to catalina.out. This initially caused dogtag to break because the code to chown TOMCAT_LOG to TOMCAT_USER was removed. Added code to spec file to fix existing instances. Also fixed error in spec file. Incorrect selinux patch was being applied for f17.
* Removed extraneous 'endif'DOGTAG_10_0_0_ALPHA_FEDORA_16_17_20120314Matthew Harmsen2012-03-141-1/+0
|
* Corrected 'junit' dependency checkMatthew Harmsen2012-03-142-11/+14
|
* PKI Deployment FrameworkMatthew Harmsen2012-03-121-2/+72
| | | | | | | | | | | | | | | | | | Initial attempt at 'http://pki.fedoraproject.org/wiki/PKI_Instance_Deployment'. Corrected imports to work with site-packages. Standardized log messages via encapsulation in a central file. Updated top-level instance directory. Streamlined parsing and enhanced logging. Added "--dry_run" option. Added umask and default permissions; sanitized use of '+' and '\'. Aliased 'pkiconfig' as 'config' Created a single master PKI dictionary from the sectional dictionaries
* Provide Custom PKI JNDI Realm.Jack Magne2012-03-121-2/+19
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Provide a Realm that provides the following: 1. Allows SSL client certificate authentation upon protected URLs. For now we are protecting the new DRM Rest functions. 2. Allows simple PKI ACL checking like we have in the current server. This is accomplished with the help of a simple file that maps URLs to ACL resourceIDs and operations. 3. DRMRestClient now support SSL Client authentication to test the feature. How to test this: Install new KRA server, after installing build pki-core rpm. Uncomment "PKIJNDIRealm" settings in conf/server.xml Some customization will be needed for instance specific info. See the sample in server.xml. Uncomment the "Security Constraint" and "login-config" settings webapps/kra/WEB-INF/web.xml In running DRMTest.java in eclipse do the following: Change the arguments to support SSL Client auth such as: -h localhost -p 10443 -w secret -d ~/archive-test -s true -c "KRA Administrator of Instance pki-kra's SjcRedhat Domain ID" where the new flags are -s = true for SSL and -c = <client auth cert name> Export the KRA's admin/agent client auth cert from Firefox to a pk12 file. Import this cert into ~/archive-test by using "pk12util" utility. Run the DRMTest.java program in eclipse and observe the results. There should be a prompt for a client cert.
* Revert "Initial attempt at ↵Matthew Harmsen2012-03-061-67/+0
| | | | | | | | | | | | 'http://pki.fedoraproject.org/wiki/PKI_Instance_Deployment'." This reverts commit b5219f534cf0b60452346b31a84b9eddd881f614. This patch was accidently committed to origin as part of a previous push. Conflicts: pki/specs/pki-core.spec
* Remove platform specific logic from patches for mock purposes.Matthew Harmsen2012-03-021-9/+9
|
* Initial attempt at 'http://pki.fedoraproject.org/wiki/PKI_Instance_Deployment'.Matthew Harmsen2012-03-011-1/+68
| | | | | | | | | | | | | | | | Corrected imports to work with site-packages. Standardized log messages via encapsulation in a central file. Corrected imports to work with site-packages. Standardized log messages via encapsulation in a central file. Updated top-level instance directory. Streamlined parsing and enhanced logging. Added "--dry_run" option. Added umask and default permissions; sanitized use of '+' and '\'.
* Removed dependency on OSUtil.Endi Sukma Dewata2012-02-292-10/+6
| | | | | | | The OSUtil is no longer used by the code. It has been removed from build scripts and tools. Ticket #90
* Enhanced compose scripts to download patchesMatthew Harmsen2012-02-281-1/+22
| | | | | | Added platform-dependent patches for SELinux component Bugzilla Bug #739708 - Selinux fix for ephemeral ports (F16) Bugzilla Bug #795966 - pki-selinux policy is kind of a mess (F17)
* Replaced BtoA/AtoB with Apache codec.Endi Sukma Dewata2012-02-232-0/+10
| | | | | | | | The OSUtil's BtoA() and AtoB() have been replaced by Base64 codec from Apache Commons library. The codec is configured to use 64-byte line width as defined in RFC 1421. Ticket #90
* Fixed several miscellaneous build issuesMatthew Harmsen2012-02-222-3/+24
| | | | (see https://fedorahosted.org/pki/ticket/104)
* Bug 788787 added junit dependency plus integrated KRA OCSP and TKSMatthew Harmsen2012-02-204-1318/+506
|
* Update version number to 10.0.0Nathan Kinder2012-02-0111-84/+180
|
* Changes to pkicreate to create resteasy links.Ade Lee2012-01-161-3/+7
| | | | | Added resteasy-jettison-provider to pki-setup as it is not currently delivered by candlepin-deps.
* Initial skeleton code for drm resteasy interfaceAde Lee2012-01-131-1/+5
| | | | | | | Integrated files into current servlet structure. Allowed exceptions to bubble up to top level. Move bean initialization logic into DAO objects. Fixed "keyRequest" path to "keyrequest" in KeyRequestDAO
* Split make to avoid build failureAdam Young2011-12-011-1/+2
|
* Added support for JUnit in CMake.Endi Sukma Dewata2011-11-281-1/+4
| | | | | | | | A new function add_junit_test() has been added to execute JUnit tests in CMake. The function is used to execute the unit tests in the common package. Ticket #36
* Bugzilla Bug #737761 - Update Dogtag Packages for Fedora 16mharmsen2011-10-296-6/+71
| | | | git-svn-id: svn+ssh://svn.fedorahosted.org/svn/pki/trunk@2277 c9f7a03b-bd48-0410-a16d-cbbf54688b0b
* Bugzilla Bug #749945 - Installation error reported during CA, DRM, OCSP, and ↵mharmsen2011-10-294-76/+84
| | | | | | TKS package installation . . . git-svn-id: svn+ssh://svn.fedorahosted.org/svn/pki/trunk@2276 c9f7a03b-bd48-0410-a16d-cbbf54688b0b
* Resolves #737192 - Need script to upgrade proxy configurationvakwetu2011-09-301-0/+2
| | | | git-svn-id: svn+ssh://svn.fedorahosted.org/svn/pki/trunk@2244 c9f7a03b-bd48-0410-a16d-cbbf54688b0b
* SPEC FILE CHANGE: Specify '_unitdir' macro for F15 platforms, also.mharmsen2011-09-304-4/+4
| | | | git-svn-id: svn+ssh://svn.fedorahosted.org/svn/pki/trunk@2239 c9f7a03b-bd48-0410-a16d-cbbf54688b0b
* SPEC FILE CHANGE: Changed "%elseif" to "%else", "%if", and "%endif".mharmsen2011-09-305-9/+47
| | | | | | | SPEC FILE CHANGE: Specified '_unitdir' macro for non-'systemd' platforms. git-svn-id: svn+ssh://svn.fedorahosted.org/svn/pki/trunk@2238 c9f7a03b-bd48-0410-a16d-cbbf54688b0b
* Bugzilla Bug #737761 - Update Dogtag Packages for Fedora 16mharmsen2011-09-299-156/+310
| | | | git-svn-id: svn+ssh://svn.fedorahosted.org/svn/pki/trunk@2237 c9f7a03b-bd48-0410-a16d-cbbf54688b0b
* Bugzilla Bug #734590 - Refactor JNI libraries for Fedora 16+ . . .mharmsen2011-09-131-37/+78
| | | | | | | Established MINIMUM package versions based upon platform git-svn-id: svn+ssh://svn.fedorahosted.org/svn/pki/trunk@2199 c9f7a03b-bd48-0410-a16d-cbbf54688b0b
* Bugzilla Bug #699809 - Convert certificate system to use systemd (migration ↵mharmsen2011-09-134-5/+65
| | | | | | scripts) git-svn-id: svn+ssh://svn.fedorahosted.org/svn/pki/trunk@2198 c9f7a03b-bd48-0410-a16d-cbbf54688b0b
* Bugzilla Bug #734590 - Refactor JNI libraries for Fedora 16+ . . .mharmsen2011-09-136-12/+102
| | | | git-svn-id: svn+ssh://svn.fedorahosted.org/svn/pki/trunk@2197 c9f7a03b-bd48-0410-a16d-cbbf54688b0b
* Bugzilla BZ# 699809 - Convert certificate system to use systemdvakwetu2011-09-094-12/+189
| | | | git-svn-id: svn+ssh://svn.fedorahosted.org/svn/pki/trunk@2196 c9f7a03b-bd48-0410-a16d-cbbf54688b0b
* Bugzilla Bug #690950 - Update Dogtag Packages for Fedora 15mharmsen2011-08-236-6/+73
| | | | git-svn-id: svn+ssh://svn.fedorahosted.org/svn/pki/trunk@2167 c9f7a03b-bd48-0410-a16d-cbbf54688b0b
* Bugzilla Bug #690950 - Update Dogtag Packages for Fedora 15mharmsen2011-08-102-2/+38
| | | | git-svn-id: svn+ssh://svn.fedorahosted.org/svn/pki/trunk@2136 c9f7a03b-bd48-0410-a16d-cbbf54688b0b
* Bugzilla Bug #690950 - Update Dogtag Packages for Fedora 15mharmsen2011-07-221-1/+26
| | | | git-svn-id: svn+ssh://svn.fedorahosted.org/svn/pki/trunk@2077 c9f7a03b-bd48-0410-a16d-cbbf54688b0b
* Bugzilla Bug #690950 - Update Dogtag Packages for Fedora 15mharmsen2011-07-1511-24/+228
| | | | git-svn-id: svn+ssh://svn.fedorahosted.org/svn/pki/trunk@2058 c9f7a03b-bd48-0410-a16d-cbbf54688b0b
* Bugzilla Bug #669226 - Remove Legacy Build System (Ant + Autoconf --> CMake)mharmsen2011-07-132-7/+9
| | | | git-svn-id: svn+ssh://svn.fedorahosted.org/svn/pki/trunk@2057 c9f7a03b-bd48-0410-a16d-cbbf54688b0b
* Bugzilla Bug #532548 - Tool to do DRM re-key (use configuration file, ↵mharmsen2011-06-301-1/+14
| | | | | | process based upon records, added additional options) git-svn-id: svn+ssh://svn.fedorahosted.org/svn/pki/trunk@2034 c9f7a03b-bd48-0410-a16d-cbbf54688b0b
* Bugzilla Bug #532548 - Tool to do DRM re-keymharmsen2011-05-251-1/+14
| | | | git-svn-id: svn+ssh://svn.fedorahosted.org/svn/pki/trunk@2009 c9f7a03b-bd48-0410-a16d-cbbf54688b0b
* Bugzilla Bug #690950 - Update Dogtag Packages for Fedora 15 (beta)mharmsen2011-04-277-8/+76
| | | | git-svn-id: svn+ssh://svn.fedorahosted.org/svn/pki/trunk@1989 c9f7a03b-bd48-0410-a16d-cbbf54688b0b
* Bugzilla Bug #695157 - Auditverify on TPS audit log throws error.mharmsen2011-04-111-2/+5
| | | | git-svn-id: svn+ssh://svn.fedorahosted.org/svn/pki/trunk@1952 c9f7a03b-bd48-0410-a16d-cbbf54688b0b
* Bugzilla Bug #690950 - Update Dogtag Packages for Fedora 15 (beta)mharmsen2011-04-053-4/+42
| | | | git-svn-id: svn+ssh://svn.fedorahosted.org/svn/pki/trunk@1946 c9f7a03b-bd48-0410-a16d-cbbf54688b0b
* Added "Bugzilla Bug #690950 - Update Dogtag Packages for Fedora 15 (beta)" ↵mharmsen2011-04-051-0/+1
| | | | | | to changelog of this Meta package. git-svn-id: svn+ssh://svn.fedorahosted.org/svn/pki/trunk@1945 c9f7a03b-bd48-0410-a16d-cbbf54688b0b
* Bugzilla Bug #693327 - Missing requires: tomcatjssmharmsen2011-04-052-6/+12
| | | | git-svn-id: svn+ssh://svn.fedorahosted.org/svn/pki/trunk@1944 c9f7a03b-bd48-0410-a16d-cbbf54688b0b
* Bugzilla Bug #690950 - Update Dogtag Packages for Fedora 15 (beta)mharmsen2011-03-266-13/+40
| | | | git-svn-id: svn+ssh://svn.fedorahosted.org/svn/pki/trunk@1931 c9f7a03b-bd48-0410-a16d-cbbf54688b0b
* Bugzilla Bug #690950 - Update Dogtag Packages for Fedora 15 (beta)mharmsen2011-03-257-7/+77
| | | | git-svn-id: svn+ssh://svn.fedorahosted.org/svn/pki/trunk@1928 c9f7a03b-bd48-0410-a16d-cbbf54688b0b
* Initial revision.mharmsen2011-03-241-0/+139
| | | | git-svn-id: svn+ssh://svn.fedorahosted.org/svn/pki/trunk@1918 c9f7a03b-bd48-0410-a16d-cbbf54688b0b
* Bugzilla Bug #688763 - Rebase updated Dogtag Packages for Fedora 15 (alpha)mharmsen2011-03-175-6/+71
| | | | git-svn-id: svn+ssh://svn.fedorahosted.org/svn/pki/trunk@1896 c9f7a03b-bd48-0410-a16d-cbbf54688b0b
* add xml-commons-apis.jar to pkisilentjdennis2011-03-031-0/+2
| | | | | | | | add xml-commons-resolver.jar to pkicreate add both to pkicore.spec git-svn-id: svn+ssh://svn.fedorahosted.org/svn/pki/trunk@1878 c9f7a03b-bd48-0410-a16d-cbbf54688b0b
* Bugzilla Bug #676182 - IPA installation failing - Fails to create CA instancemharmsen2011-02-101-1/+16
| | | | git-svn-id: svn+ssh://svn.fedorahosted.org/svn/pki/trunk@1838 c9f7a03b-bd48-0410-a16d-cbbf54688b0b
* Bugzilla Bug #642741 - CS build uses deprecated functionsmharmsen2011-02-071-2/+0
| | | | git-svn-id: svn+ssh://svn.fedorahosted.org/svn/pki/trunk@1827 c9f7a03b-bd48-0410-a16d-cbbf54688b0b
* Fixed various 'rpmlint' errors.mharmsen2011-02-054-12/+14
| | | | git-svn-id: svn+ssh://svn.fedorahosted.org/svn/pki/trunk@1824 c9f7a03b-bd48-0410-a16d-cbbf54688b0b
* Bugzilla Bug #606943 - Convert RA to use ldap utilities frommharmsen2011-02-041-1/+2
| | | | | | | OpenLDAP instead of the Mozldap git-svn-id: svn+ssh://svn.fedorahosted.org/svn/pki/trunk@1823 c9f7a03b-bd48-0410-a16d-cbbf54688b0b