summaryrefslogtreecommitdiffstats
path: root/pki
Commit message (Collapse)AuthorAgeFilesLines
...
* Enhance file template utility: process_file_template()jdennis2010-11-191-295/+190
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | The following changes were made: 1) Add a template name. Previously I had found it difficult to correlate the output in the log file with a specific invocation of process_file_template() in the code. The file pathnames aren't much help because they never appear in the code as something you can search on. 2) Be more efficient with file operations. Previously the code would: a) read a line from the file b) strip the newline off c) add the newline back d) concatenate the munged line to a string variable That's an incredibly inefficient way to assign the contents of a file to a string variable. Now the code just uses the standard Perl function read_file() to assign the file contents to a string variable 3) Previously the code would claim it performed a substitution for every substitution in the substitution table even if the substitution was not performed, that's useless information. Now the code reports exactly which substitutions were made along with a count of how many times that substitution was made. 4) Optionally dump to the log the contents of the file after it was processed for debugging purposes. 5) Update all calls to process_file_template. At the same time utilize the new utilities for setting file properties (e.g. permission & ownership) Example of new logging information written to log file ------------------------------------------------------ Processing PKI templates for '/var/lib/pki-ca' ... Template (pki_cfg) "/usr/share/pki/ca/conf/CS.cfg" ==> "/etc/pki-ca/CS.cfg" ... 1 substitutions: TOMCAT_SERVER_PORT ==> "9701" 1 substitutions: PKI_RANDOM_NUMBER ==> "YLmLqrJOD10jrIdUwefc" 8 substitutions: PKI_MACHINE_NAME ==> "vm-117.idm.lab.bos.redhat.com" 7 substitutions: PKI_FLAVOR ==> "pki" 2 substitutions: PKI_EE_SECURE_PORT ==> "9444" 3 substitutions: PKI_INSTANCE_ROOT ==> "/var/lib" 68 substitutions: PKI_INSTANCE_PATH ==> "/var/lib/pki-ca" 18 substitutions: PKI_INSTANCE_ID ==> "pki-ca" 2 substitutions: PKI_EE_SECURE_CLIENT_AUTH_PORT ==> "9446" 1 substitutions: PKI_SECURE_PORT ==> "9443" 1 substitutions: PKI_SUBSYSTEM_TYPE ==> "ca" 3 substitutions: PKI_AGENT_SECURE_PORT ==> "9443" 1 substitutions: PKI_GROUP ==> "pkiuser" 1 substitutions: INSTALL_TIME ==> "Mon Oct 11 22:11:14 2010" 2 substitutions: PKI_ADMIN_SECURE_PORT ==> "9445" 1 substitutions: PKI_USER ==> "pkiuser" 2 substitutions: PKI_UNSECURE_PORT ==> "9180" 122 substitutions were made in '/etc/pki-ca/CS.cfg' git-svn-id: svn+ssh://svn.fedorahosted.org/svn/pki/trunk@1546 c9f7a03b-bd48-0410-a16d-cbbf54688b0b
* Utilities cleanupjdennis2010-11-191-416/+410
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | This is the final patch in a series mostly devoted to clean up of the common library. After application of this patch pkicommon will be in it's proposed form. A large proportion of this patch is devoted to replacing the use of UNIX shell commands to perform basic file system operations with built in Perl functions. The other items in this patch are things which didn't logically fit into any of the other patches. The rationale for eschewing the use of shell commands where possible is: 1) shell commands are OS specific, not all UN*X variants have the same behavior. 2) shell commands are available only on UN*X variants. 3) the built in Perl functions are portable across most OS's 4) the built in Perl functions have better error handling and reporting 5) the built in Perl functions are more efficient since they don't need to spawn a shell to do one simple operation, instead they call into the native OS library in the same process/thread. 6) the built in Perl functions are not subject to shell interpretation thus making their use more robust. It's not unusual to have to properly quote arguments when using a shell to protect against unintended interpretation by the shell. Or worse to expose the application to injection attacks where expanding a shell command results in an untended operation performed with root privileges. Also, many of the commands which used the Perl backtick operator to perform a shell operation were not properly detecting if the command failed. The backtick operator returns the stdout of the executed shell command and discards stderr. The old code would capture the result of the backtick operator (stdout), test to see if it was the empty string and if so concluded the command succeeded. This is not correct, one needs to check the exit status to determine success/failure. If an error did occur the command probably wrote to stderr, but stderr is discarded by the backtick operator. All this is documented in the patch which added the run_command() utility. For those routines for which there wasn't a Perl built-in equivalent the code was changed to call run_command() instead of using the backtick operator. Each of the utility routines which creates/copies files/directories had their parameter list expanded to accept optional specification of the permission and ownership to be applied to the file system object. This allows one call to replace multiple calls to utility routines which ultimately makes the code in pkicreate smaller, less verbose, easier to read and more robust. The code used to parse an initscript was removed (extract_chkconfig_parameters_from_start_stop_script()), it wasn't called and I'm at a loss for why this would have been needed in the first place. Also the parametrization of the start/stop positions is changing as we move closer to LSB. The global variable chkconfig_fields was also removed. It was only used in the routine extract_chkconfig_parameters_from_start_stop_script(). What's up with these global variables which should be private to the subroutine utilizing them? Many routines had logging added to them for tracing purposes. A call to emit() with the subroutine name and parameters. Many routines had the dry run check added to them. If $dry_run is true they emit their tracing information and then return success. Many routines had calls to add_install_info() added to them. This is used to record the installation actions being performed. Code that formerly had used shell commands to operate recursively on directories now instead iterate over the contents of the directories invoking our utilities, this allows us to use our primitives which record the installation action. For example rather than copy_directory() doing a "cp -r src dst" we walk the tree and invoke our own create_directory() and copy_file() routines which are responsible for recording the operation and doing such things as setting permissions and ownership. Comments referencing arg0, arg1, etc. were removed or edited (see previous patch for parameter list clean up for an explanation). Some functions were renamed to better reflect their actual operation as would be understood by a system administrator. e.g. give_file_to() became set_owner_group(), give_directory_to() became set_owner_group_on_directory_contents(). A utility called set_permissions() was added as well as a utility called set_file_props() which sets permissions and ownership with a single call. The routines move_file() and move_directory() were removed. They were using the deprecated shell methodology but were never called by any code. Rather than re-implement them I just removed them, if we need these again in the future we can add them back with the preferred Perl methodology. A potential bug was fixed in copy_directory(). The logic used to enumerate the set of destination directories which needed to be created had a logic flaw. If a source directory was empty it wouldn't get created in the destination. This occurred because the previous logic was to enumerate all the source files to be copied and generate a set of directories from those, but if a directory was empty it wouldn't show up in the file list. The new logic is to independently enumerate both directories and files in the src tree, this makes the directory list complete. Add utility to return the initscript name, get_registry_initscript_name(). git-svn-id: svn+ssh://svn.fedorahosted.org/svn/pki/trunk@1545 c9f7a03b-bd48-0410-a16d-cbbf54688b0b
* Fix utilities related to UNIX group operationsjdennis2010-11-191-79/+32
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | The Perl functions getgrnam, getpwnam, etc. in a scalar context return the undef value if the name wasn't found and an empty list in an array context. Therefore the test for equality to the empty string is not correct, the test should be if the value is defined. Replace use of backtick shell invocation with run_command() (see earlier patch) The function user_is_a_member_of_group() was not implemented correctly. There were two fundamental problems: 1) It failed to take the primary group into account, see comments in the code for an explanation. 2) It tested the username against group members using a regular expression which incorrectly identified substrings as matches. The test was: $members =~ m/$username/; where $members was a space separated list of user names. However the regular expression did not match on word boundaries, therefore any substring would produce a false positive. For example if the username was "foo" and the $members string was "barfl foobar blatz" the test would succeed because it found "foo" as a substring of "foobar" but "foo" != "foobar". The test was rewritten to split the string into individual names and test for equality on each name, it's a more robust test and more obvious to the reader. The member regular expression test had to also be fixed in the add_user_as_a_member_of_group() function as well. git-svn-id: svn+ssh://svn.fedorahosted.org/svn/pki/trunk@1544 c9f7a03b-bd48-0410-a16d-cbbf54688b0b
* Clean up Perl interpreter warningsjdennis2010-11-193-54/+44
| | | | | | | | | | | | | | | | | | | | | | | | | true is not keyword, use 1 instead use defined() when testing for hash membership add some variables to the $suppress which are defined in pkicommon, but only used once in pkicreate/pkiremove remove duplicate definition of $webapps_subsystem_instance_path remove @pki_static_directories, it's never referenced. $result = GetOptions() needs lexical scope for $result fix misspelling of $PKI_FLAVOR, should be $PKI_FLAVOR_SLOT fix misspelling of $SELINUX_PORT_WONGLY_DEFINED, should be $SELINUX_PORT_WRONGLY_DEFINED change print (...) to print(...), space between function name and list changes interpretation of list context vs. function call. git-svn-id: svn+ssh://svn.fedorahosted.org/svn/pki/trunk@1543 c9f7a03b-bd48-0410-a16d-cbbf54688b0b
* Remove pointless no-op string interpolationsjdennis2010-11-193-86/+86
| | | | | | | | | | | | | | | | | | | | | | | | | | Constructs such as "$variable" when $variable is already a string are no-op waste of processor cycles and confusing to read. Just use the variable. Explanation: Perl performs variable substitutions on all double quoted strings, this is called string interpolation. To do this Perl scans the string looking for anything that looks like a variable and substitutes it's current value. But when the string consists of nothing other than a variable (e.g. "$variable") the result is the same as the variable, effectively it's just a no-op. I'm not sure if the interpreter is smart enough to recognize this as a no-op and skip the interpolation, irregardless there is no point in coding it this way. It eludes me as to what the programmer thought they were accomplishing when they wrote "$variable". git-svn-id: svn+ssh://svn.fedorahosted.org/svn/pki/trunk@1542 c9f7a03b-bd48-0410-a16d-cbbf54688b0b
* Parameter list style fixjdennis2010-11-192-156/+63
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | The preferred canonical style for Perl subroutine parameter lists is to write the parameter list as an actual parameter list prefixed by the "my" lexical modifier and initialized from the @_ parameter array. The parameter list should be the first line in the sub. This makes it much easier to read the code because a parameter list looks like a parameter list. This improves readability and follows widely adopted style conventions. For example: sub foo { my ($able, $baker) = @_; } Thus the signature for this subroutine is: foo($able, $baker) The patch also removes comments of the form # arg0 is able # arg1 is baker Which are silly when you write the parameter list to look like a parameter list because it's self evident what the parameters are. Comments like that clutter the code, decreases readability and does not add any information content. git-svn-id: svn+ssh://svn.fedorahosted.org/svn/pki/trunk@1541 c9f7a03b-bd48-0410-a16d-cbbf54688b0b
* Remove unnecessary global variables used only byjdennis2010-11-191-14/+3
| | | | | | | get_time_stamp() git-svn-id: svn+ssh://svn.fedorahosted.org/svn/pki/trunk@1540 c9f7a03b-bd48-0410-a16d-cbbf54688b0b
* Add run_command() utilityjdennis2010-11-191-0/+81
| | | | | | | | | | | | | | | | | | | | | Many of the existing functions were using the backtic operator to run a shell command and then tested if the length returned string was zero to determine success. This is incorrect for two reasons: 1) the backtick operator discards stderr and returns only stdout, thus if the command did generate a message because of an error it would likely do so on stderr not stdout and thus the test for output is performed on the wrong stream. 2) the presence or absense of output is not the proper way to determine if a shell command succeeded, one needs to test the exit status of the command. This patch adds the run_command() function which will be utilized in subsequent patches. git-svn-id: svn+ssh://svn.fedorahosted.org/svn/pki/trunk@1539 c9f7a03b-bd48-0410-a16d-cbbf54688b0b
* Reimplement copy_directory, remove_directoryjdennis2010-11-191-45/+87
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | The copy_directory function was losing critical information. It called out to the shell to recursively copy the contents of one directory to another. But this meant we lost track of the files and directories actually being copied, we couldn't log them nor add them to the installation manifest. Now the copy_directory function builds a list of files in the src directory and iteratively copies each file calling into our copy_file function which records the operation and checks for errors. The remove_directory function was an unapologetic sledge hammer, it simply nuked entire trees. Now the function is more sensible, by default it removed one empty directory, or optionally recursively removes all directory contents. Both functions previously had serious implementation mistakes. Both were implemented by calling out to a UNIX shell and invoking a shell command via the Perl backtick operator. The fundamental problems with this were: * UNIX shell commands only work on UNIX * Not all UNIX shell commands are identical * The error detection stragegy was completly broken. It executed the shell command via the backtick operator which returns the stdout of the command and discards stderr. The function would then test to see if the length of stdout was zero to determine if there was an error. If there was no stdout it assumed no errors occurred. This is completely wrong. To test if an error occurs with a shell command one needs to examine the exit status of the command which is impossible to do with the Perl backtick operator. If one wants to test the exit status of a shell command in Perl you must utilize the subprocess features of Perl. The reimplementation eschews the non-portable use of UNIX shell commands in favor of the portable Perl extensions for operating on filesystem directories. git-svn-id: svn+ssh://svn.fedorahosted.org/svn/pki/trunk@1538 c9f7a03b-bd48-0410-a16d-cbbf54688b0b
* Obey style guidlines and existing practicejdennis2010-11-193-1762/+1761
| | | | | | | | | | - Single space after keyword. - No space after open parens. - No space before closing parens. - No unquoted bare words git-svn-id: svn+ssh://svn.fedorahosted.org/svn/pki/trunk@1537 c9f7a03b-bd48-0410-a16d-cbbf54688b0b
* Introduce dry_run command line arg and global variablejdennis2010-11-193-9/+47
| | | | | | | | | | | | Dry run mode is used to show what the script would have done without performing any actions. Add logfile to pkiremove. Update copyright dates. git-svn-id: svn+ssh://svn.fedorahosted.org/svn/pki/trunk@1536 c9f7a03b-bd48-0410-a16d-cbbf54688b0b
* Utilities to record installation activityjdennis2010-11-191-0/+395
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Adds utilites to track installation activity and produce an "Installation Manifest". Every filesystem path name which is modified during installation is recorded along with metadata about the installation action and what should be performed during an uninstall. The metadata is extensible. The table can be formatted in a variety of ways, either as a file which can be parsed (e.g. Installation Manifest), or as human readable friendly summary information. The installation file can be read later to perform an uninstall action. Previously a less complete cleanup.dat file was produced which omitted any information about files installed as part of a directory, distinction beween symbolic links and files/directories, and what should occur during an uninstall (e.g removal vs. preservation). The utilities can detect the old file format utilize them it to preserve backward compatibility. Because the new format is extensible any future needs should be easily accommodated. Aside from a more complete and accurate manifest and user report there is an additional benefit to this tracking information in terms of developer debugging. I found this more detailed reporting invaluable after modifying the installation script because it allowed me to see if what I expected to happen was happening or if things which weren't supposed to happen occurred. Formerly this was difficult information to extract and has enhanced robustness, both during development and during user install/uninstall. This patch only adds the utilities, it does not invoke them. git-svn-id: svn+ssh://svn.fedorahosted.org/svn/pki/trunk@1535 c9f7a03b-bd48-0410-a16d-cbbf54688b0b
* Utilities to walk directoryjdennis2010-11-191-0/+272
| | | | | | | | | - add utilities to walk a directory structure and get a list of files in a tree. - also adds utility to normalize a directory path git-svn-id: svn+ssh://svn.fedorahosted.org/svn/pki/trunk@1534 c9f7a03b-bd48-0410-a16d-cbbf54688b0b
* Handle the verbose flag betterjdennis2010-11-192-5/+12
| | | | | | | | | | | - Allow it to be specified multiple times to increment the verbosity level. - Add verbose option to pkiremove. Don't indent optional arg doc, leave room for more doc text. - update usage doc git-svn-id: svn+ssh://svn.fedorahosted.org/svn/pki/trunk@1533 c9f7a03b-bd48-0410-a16d-cbbf54688b0b
* Use here doc syntax for readabilityjdennis2010-11-192-298/+275
| | | | git-svn-id: svn+ssh://svn.fedorahosted.org/svn/pki/trunk@1532 c9f7a03b-bd48-0410-a16d-cbbf54688b0b
* Adjust current files so patches merge, will adjust after merge completejdennis2010-11-196-140/+16
| | | | | | | | | pkicreate: index.jsp -> index.html server.xml: remove ocsp base/tps/doc/CS.cfg: CIMC_CERT_VERIFICATION git-svn-id: svn+ssh://svn.fedorahosted.org/svn/pki/trunk@1531 c9f7a03b-bd48-0410-a16d-cbbf54688b0b
* Fix Bugzilla Bug 649910 - Console: an auditor or agent can be added to an ↵jmagne2010-11-195-3/+23
| | | | | | administrator group. Minor config addition. git-svn-id: svn+ssh://svn.fedorahosted.org/svn/pki/trunk@1528 c9f7a03b-bd48-0410-a16d-cbbf54688b0b
* Fix Bugzilla Bug 649910 - Console: an auditor or agent can be added to an ↵jmagne2010-11-195-18/+51
| | | | | | administrator group. git-svn-id: svn+ssh://svn.fedorahosted.org/svn/pki/trunk@1526 c9f7a03b-bd48-0410-a16d-cbbf54688b0b
* Bugzilla Bug 606946 - Convert Native Tools to use ldapAPI from OpenLDAP ↵vakwetu2010-11-181-3/+6
| | | | | | instead of the Mozldap git-svn-id: svn+ssh://svn.fedorahosted.org/svn/pki/trunk@1524 c9f7a03b-bd48-0410-a16d-cbbf54688b0b
* Bugzilla Bug 606946 - Convert Native Tools to use ldapAPI from OpenLDAP ↵vakwetu2010-11-1813-6911/+3312
| | | | | | instead of the Mozldap git-svn-id: svn+ssh://svn.fedorahosted.org/svn/pki/trunk@1523 c9f7a03b-bd48-0410-a16d-cbbf54688b0b
* Bugzilla Bug 606946 - Convert Native Tools to use ldapAPI from OpenLDAP ↵vakwetu2010-11-171-847/+802
| | | | | | instead of the Mozldap - formatting changes git-svn-id: svn+ssh://svn.fedorahosted.org/svn/pki/trunk@1522 c9f7a03b-bd48-0410-a16d-cbbf54688b0b
* Back out of unintended checkin.jmagne2010-11-171-1/+1
| | | | git-svn-id: svn+ssh://svn.fedorahosted.org/svn/pki/trunk@1521 c9f7a03b-bd48-0410-a16d-cbbf54688b0b
* Fix Bug 623452 - rhcs80 pkiconsole profile policy editor limit policy ↵jmagne2010-11-1720-162/+578
| | | | | | extension to 5 only git-svn-id: svn+ssh://svn.fedorahosted.org/svn/pki/trunk@1520 c9f7a03b-bd48-0410-a16d-cbbf54688b0b
* Bugzilla Bug 651916 - kra and ocsp are using incorrect ports to talk to CA ↵vakwetu2010-11-175-23/+34
| | | | | | and complete configuration in DonePanel: correction patch git-svn-id: svn+ssh://svn.fedorahosted.org/svn/pki/trunk@1517 c9f7a03b-bd48-0410-a16d-cbbf54688b0b
* Bug 499494 - change CA defaults to SHA2 (phase 1)cfu2010-11-173-4/+4
| | | | git-svn-id: svn+ssh://svn.fedorahosted.org/svn/pki/trunk@1516 c9f7a03b-bd48-0410-a16d-cbbf54688b0b
* Bugzilla Bug #489385 - references to rhpkimharmsen2010-11-162-1/+10
| | | | git-svn-id: svn+ssh://svn.fedorahosted.org/svn/pki/trunk@1512 c9f7a03b-bd48-0410-a16d-cbbf54688b0b
* Bug 489385 - references to rhpkicfu2010-11-165-6/+6
| | | | git-svn-id: svn+ssh://svn.fedorahosted.org/svn/pki/trunk@1511 c9f7a03b-bd48-0410-a16d-cbbf54688b0b
* Bug 651977 - turn off ssl2 for java servers (server.xml)cfu2010-11-164-13/+13
| | | | git-svn-id: svn+ssh://svn.fedorahosted.org/svn/pki/trunk@1509 c9f7a03b-bd48-0410-a16d-cbbf54688b0b
* Bugzilla Bug 583754 - pki-silent needs an option to configure signing ↵vakwetu2010-11-164-24/+91
| | | | | | algorithm for CA certificates git-svn-id: svn+ssh://svn.fedorahosted.org/svn/pki/trunk@1507 c9f7a03b-bd48-0410-a16d-cbbf54688b0b
* Bug 653713 - CC: setting trust on a CIMC cert requires auditingcfu2010-11-161-1/+28
| | | | git-svn-id: svn+ssh://svn.fedorahosted.org/svn/pki/trunk@1505 c9f7a03b-bd48-0410-a16d-cbbf54688b0b
* Bug 642359 - CC Feature - need to verify certificate when it is addedcfu2010-11-163-21/+52
| | | | git-svn-id: svn+ssh://svn.fedorahosted.org/svn/pki/trunk@1503 c9f7a03b-bd48-0410-a16d-cbbf54688b0b
* Bug 511990 - rhcs 7.3, 8.0 - re-activate missing object signing support in RHCScfu2010-11-151-2/+2
| | | | git-svn-id: svn+ssh://svn.fedorahosted.org/svn/pki/trunk@1501 c9f7a03b-bd48-0410-a16d-cbbf54688b0b
* Bugzilla Bug 651916 - kra and ocsp are using incorrect ports to talk to CA ↵vakwetu2010-11-151-0/+16
| | | | | | and complete configuration in DonePanel git-svn-id: svn+ssh://svn.fedorahosted.org/svn/pki/trunk@1499 c9f7a03b-bd48-0410-a16d-cbbf54688b0b
* Bugzilla Bug 651916 - kra and ocsp are using incorrect ports to talk to CA ↵vakwetu2010-11-1523-72/+206
| | | | | | and complete configuration in DonePanel git-svn-id: svn+ssh://svn.fedorahosted.org/svn/pki/trunk@1498 c9f7a03b-bd48-0410-a16d-cbbf54688b0b
* Bug 509481 - RFE: support sMIMECapabilities extensions in certificates (RFC ↵cfu2010-11-122-1/+110
| | | | | | 4262) git-svn-id: svn+ssh://svn.fedorahosted.org/svn/pki/trunk@1495 c9f7a03b-bd48-0410-a16d-cbbf54688b0b
* Fix Bugzilla Bug 360721 - New Feature: Profile Integrity Check.jmagne2010-11-101-2/+10
| | | | git-svn-id: svn+ssh://svn.fedorahosted.org/svn/pki/trunk@1493 c9f7a03b-bd48-0410-a16d-cbbf54688b0b
* Fix Bugzilla Bug 360721 - New Feature: Profile Integrity Check . . .jmagne2010-11-103-6/+101
| | | | git-svn-id: svn+ssh://svn.fedorahosted.org/svn/pki/trunk@1491 c9f7a03b-bd48-0410-a16d-cbbf54688b0b
* Bug 542863 - RHCS8: Default cert audit nickname written to CS.cfg files ↵cfu2010-11-092-0/+28
| | | | | | imcomplete when the cert is stored on a hsm git-svn-id: svn+ssh://svn.fedorahosted.org/svn/pki/trunk@1488 c9f7a03b-bd48-0410-a16d-cbbf54688b0b
* BZ651087: TPS UI Admin tab display 'null' string in the General configurationvakwetu2010-11-091-1/+2
| | | | git-svn-id: svn+ssh://svn.fedorahosted.org/svn/pki/trunk@1485 c9f7a03b-bd48-0410-a16d-cbbf54688b0b
* BZ651040: cloning shoud not include sslservervakwetu2010-11-091-1/+1
| | | | git-svn-id: svn+ssh://svn.fedorahosted.org/svn/pki/trunk@1484 c9f7a03b-bd48-0410-a16d-cbbf54688b0b
* BZ488253, BZ551410, BZ550331 - oscp asn1 encoding fixes, including code ↵vakwetu2010-11-093-440/+512
| | | | | | provided by David Studzman git-svn-id: svn+ssh://svn.fedorahosted.org/svn/pki/trunk@1482 c9f7a03b-bd48-0410-a16d-cbbf54688b0b
* Bugzilla Bug #609641 - CC: need procedure (and possibly tools) to helpmharmsen2010-11-064-0/+39
| | | | | | | correctly set up CC environment git-svn-id: svn+ssh://svn.fedorahosted.org/svn/pki/trunk@1478 c9f7a03b-bd48-0410-a16d-cbbf54688b0b
* Bug 529945 - (Instructions and sample only) CS 8,0 GA release -- DRM and TKS ↵cfu2010-11-054-4/+128
| | | | | | do not seem to have CRL checking enabled git-svn-id: svn+ssh://svn.fedorahosted.org/svn/pki/trunk@1477 c9f7a03b-bd48-0410-a16d-cbbf54688b0b
* Bugzilla Bug 451874 - RFE - Java console - Certificate Wizard missing e.c. ↵vakwetu2010-11-041-8/+33
| | | | | | support git-svn-id: svn+ssh://svn.fedorahosted.org/svn/pki/trunk@1475 c9f7a03b-bd48-0410-a16d-cbbf54688b0b
* Bugzilla Bug 451874 - RFE - Java console - Certificate Wizard missing e.c. ↵vakwetu2010-11-041-7/+30
| | | | | | support git-svn-id: svn+ssh://svn.fedorahosted.org/svn/pki/trunk@1474 c9f7a03b-bd48-0410-a16d-cbbf54688b0b
* Bugzilla Bug 451874 - RFE - Java console - Certificate Wizard missing e.c. ↵vakwetu2010-11-0423-61/+587
| | | | | | support git-svn-id: svn+ssh://svn.fedorahosted.org/svn/pki/trunk@1473 c9f7a03b-bd48-0410-a16d-cbbf54688b0b
* Bugzilla Bug 638242 - Installation Wizard: at SizePanel, fix selection of ↵vakwetu2010-11-041-25/+316
| | | | | | signature algorithm; and for ECC curves git-svn-id: svn+ssh://svn.fedorahosted.org/svn/pki/trunk@1472 c9f7a03b-bd48-0410-a16d-cbbf54688b0b
* Bugzilla Bug 638242 - Installation Wizard: at SizePanel, fix selection of ↵vakwetu2010-11-047-98/+217
| | | | | | signature algorithm; and for ECC curves git-svn-id: svn+ssh://svn.fedorahosted.org/svn/pki/trunk@1471 c9f7a03b-bd48-0410-a16d-cbbf54688b0b
* Bug 648757 - expose and use updated cert verification function in JSScfu2010-11-044-42/+92
| | | | git-svn-id: svn+ssh://svn.fedorahosted.org/svn/pki/trunk@1470 c9f7a03b-bd48-0410-a16d-cbbf54688b0b
* Bug 645874 - rfe ecc - add ecc curve name support in JSS and CS interfacecfu2010-11-031-0/+59
| | | | git-svn-id: svn+ssh://svn.fedorahosted.org/svn/pki/trunk@1467 c9f7a03b-bd48-0410-a16d-cbbf54688b0b