summaryrefslogtreecommitdiffstats
path: root/specs
Commit message (Collapse)AuthorAgeFilesLines
* Move default location for client certificate databaseMatthew Harmsen2012-11-091-1/+7
| | | | | | * TRAC Ticket #395 - Dogtag 10: Add a Tomcat 7 runtime requirement to 'pki-server' * TRAC Ticket #398 - Move default location for client certificate database
* Update to b2 releaseAde Lee2012-10-308-16/+40
|
* Removal of version numbers from jar file namesMatthew Harmsen2012-10-293-31/+12
| | | | * TRAC Ticket #350 - Dogtag 10: Remove version numbers from PKI jar files . . .
* Added obsoletes for pki-selinuxAde Lee2012-10-231-1/+5
|
* changes to remove pki-selinux from f18 buildAde Lee2012-10-234-18/+35
|
* Added net-tools dependencyAde Lee2012-10-121-0/+2
|
* Update tomcatjss dependencyAde Lee2012-10-122-7/+13
|
* Update selinux-policy version to fix error from latest policy changesAde Lee2012-10-081-3/+6
|
* fix spec typoAde Lee2012-10-081-3/+6
|
* Added build requires for version of selinux-policy-develAde Lee2012-10-081-2/+9
|
* Update release to b1Ade Lee2012-10-088-8/+32
|
* Merged pki-silent into pki-server.Endi Sukma Dewata2012-10-074-52/+23
| | | | | | The pki-silent package has been merged into pki-server package. Ticket #354
* Renamed "shared" folder to "server".Endi Sukma Dewata2012-10-071-4/+7
| | | | | | | The "shared" folder in /usr/share/pki has been renamed to "server" since it contains only server files. Ticket #353
* Changes to start pki_ra and pki_tps in correct contextAde Lee2012-10-051-1/+9
| | | | | Added required selinux versions to spec file. Also added additional rule needed for F17
* Added Provides to packages replacing obsolete packages.Endi Sukma Dewata2012-10-021-1/+17
| | | | | | | Packages that replaced old packages have been modified to specify "Provides" to satisfy dependency on the old packages. Ticket #336
* Updated release to a2Ade Lee2012-10-018-8/+32
|
* Using RPM version number in CMake.Endi Sukma Dewata2012-10-017-16/+54
| | | | | | | | | | | | The RPM spec files have been modified to pass the full RPM version number to CMake. The version number contains the product version number, release number, milestone, and platform. The CMake scritps will parse and use this version number to generate Java manifest files. The product version number will be used as the specification version and full version number will be used as the implementation version. Ticket #339
* Added VERSION file.Endi Sukma Dewata2012-09-281-4/+6
| | | | | | | | | | | The CMake scripts have been modified to store the version number in /usr/share/pki/VERSION and in JAR manifest files. These files can be read by PKI applications to obtain the version number without having to query the RPM database. Fixed warnings in Java.cmake file. Ticket #339
* Merged pki-setup into pki-server.Endi Sukma Dewata2012-09-254-52/+41
| | | | | | | The scripts to create and remove PKI instances have been moved from pki-setup into pki-server package. Ticket #336
* Added Conflicts for IPA 2.x and Build Requires for zip for mock problemAde Lee2012-09-131-1/+7
|
* Restart existing instances upon package updateMatthew Harmsen2012-09-123-5/+37
| | | | | | | * TRAC Ticket #312 - Dogtag 10: Automatically restart any running instances upon RPM "update" . . . * TRAC Ticket #317 - Dogtag 10: Move "pkispawn"/"pkidestroy" from /usr/bin to /usr/sbin . . .
* Added common ROOT webapp.Endi Sukma Dewata2012-09-121-2/+5
| | | | | | | | | | | The current ROOT webapp will redirect users coming to the root URL path to the proper path of the subsystem's webapp. Since now a single Tomcat instance may have multiple subsystems, a new ROOT webapp has been added to present the user with a menu of all available webapps from all subsystems in the instance. Ticket #89
* Added dependency on redhat-rpm-config.Endi Sukma Dewata2012-09-111-1/+5
| | | | | | | | | To avoid multilib conflicts the spec file has been modified to depend on redhat-rpm-config. This way the brp-java-repack-jars will run to repack the JAR files to generate identical files across architectures. Ticket: #296
* Merged Javadoc packages.Endi Sukma Dewata2012-09-051-73/+32
| | | | | | | The Javadocs for pki-util, pki-java-tools and pki-common have been merged and packaged into pki-javadoc RPM. Ticket #295
* Added proxy realm.Endi Sukma Dewata2012-09-051-1/+6
| | | | | | | | | | | | | | | | | CMS engine is a singleton and it's used by PKI realm to authenticate users accessing the subsystem. Since a Tomcat instance may contain multiple subsystems, each having separate realm, the PKI JAR links need to be moved into WEB-INF/lib so that they will run inside separate class loaders. Tomcat also requires that the authenticator and realm classes be available in common/lib. To address this a new package pki-tomcat.jar has been added. The package contains the authenticator and a proxy realm. When the subsystems start running, they will register their own realms into the proxy realms such that the authentications will be forwarded to the appropriate subsystems. Ticket #89
* Moved webapp deployment code into pkispawn.Endi Sukma Dewata2012-09-051-26/+4
| | | | | | | | | | | | Previously the WAR files were generated at build time, so it would include theme files that were installed on the build machine. The code has been changed such that instead of generating WAR files pkispawn will copy the webapp files from the theme folders and combine them with subsystem webapp files at deployment time. This way it will use the actual theme files installed on the deployment machine. Ticket #89
* Removed duplicate common classes in pki-console.jar.Endi Sukma Dewata2012-09-041-2/+6
| | | | | | | | The pki-console has been modified to depend on pki-base. This way it's no longer necessary to include duplicate common classes in pki-console. Ticket #113
* Moved REST CLI into pki-tools.Endi Sukma Dewata2012-08-291-4/+5
| | | | | | | | | | The pki-client.jar has been split and merged into pki-certsrv.jar and pki-tools.jar. The REST client classes are now packaged in com.netscape.certsrv.<component> packages. The REST CLI classes are now packaged in com.netscape.cmstools.<component> packages. The "pki" script has been moved into pki-tools RPM package. Ticket #215
* Merged pki-native-tools and pki-java-tools.Endi Sukma Dewata2012-08-294-94/+86
| | | | | | | | | The pki-native-tools and pki-java-tools have been merged into pki-tools and pki-server will depend on it. Since pki-ra and pki-tps depends on pki-server they automatically depends on pki-tools as well. Ticket #295
* Added pki-base and pki-server RPM packages.Endi Sukma Dewata2012-08-295-176/+151
| | | | | | | | | The pki-common package has been split such that the common and client binaries are packaged in pki-base and server binaries are packaged in pki-server. The pki-util has been merged into pki-base and the pki-deploy package has been merged into pki-server. Ticket #295
* PKI Deployment ScriptletsMatthew Harmsen2012-08-174-77/+100
| | | | | | | | | | | * TRAC Ticket #266 - for non-master CA subsystems, pkidestroy needs to contact the security domain to update the domain * Made Fedora 17 rely upon tomcatjss 7.0.0 or later * Changed Dogtag 10 build-time and runtime requirements for 'pki-deploy' * Altered PKI Package Dependency Chain (top-to-bottom): pki-ca, pki-kra, pki-ocsp, pki-tks --> pki-deploy --> pki-common * Changed TPS to require a build-time dependency of 'httpd-devel >= 2.4.2' * Clarified RPM build script's usage message
* Changes to get TPS and RA running on dogtag 10Ade Lee2012-08-152-16/+137
| | | | | | Added systemd scripts for RA and TPS. Modified init scripts and configuration files to use correct directives for httpd 2.4. TPS and RA subsystems are now installable using pkicreate
* Added pki-client.jar.Endi Sukma Dewata2012-08-151-1/+6
| | | | | | | A new pki-client.jar has been created to package the REST client and CLI classes. Ticket #215
* Merged pki-jndi-realm.jar into pki-cmscore.jar.Endi Sukma Dewata2012-07-311-11/+4
| | | | | | | | On Tomcat 7 it's no longer necessary to have a separate package for the authenticator and realm classes. They are now packaged in pki-cmscore.jar which is deployed in Tomcat's common/lib. Ticket #126
* PKI Deployment ScriptletsMatthew Harmsen2012-07-251-1/+8
| | | | | | | | | | | | | | | | | * PKI TRAC Ticket #244 - Non-user-friendly message when deleting non-existent subsystem with pkidestroy * PKI TRAC Ticket #246 - Incorrect parameter names in pkispawn configuration * PKI TRAC Ticket #248 - pki_ds_database should not be a DN * PKI TRAC Ticket #249 - pki_ds_base_dn causing pkispawn failure * PKI TRAC Ticket #250 - Creating/removing custom instances should not require http/ajp ports * PKI TRAC Ticket #251 - Instance name may conflict with other files * PKI TRAC Ticket #253 - Fix pki-destroy removal of '/var/log/pki/{pki_instance_id}' directory . . . * PKI TRAC Ticket #254 - Dogtag 10: Fix spec file to build successfully via mock on Fedora 17 . . . * PKI TRAC Ticket #255 - Missing resteasy-atom-provider.jar * PKI TRAC Ticket #260 - Dogtag 10: Change the layout of 'pki_instance_id' . . .
* Selinux policy for new configuration.Ade Lee2012-07-251-1/+1
| | | | | | Added tomcat_t for java processes. Added aliases for old types to allow compatibility of existng subsystems. Added install scripts for pkispawn and pkidestroy
* Updated console build script.Endi Sukma Dewata2012-07-231-2/+9
| | | | | | | The console build script has been modified such that it uses the com.netscape.certsrv.common source code from the common package. Ticket #113, #62
* PKI Deployment ScriptletsMatthew Harmsen2012-07-192-5/+46
| | | | | | | | | | | | | | | | | | | | * Integration of Tomcat 7 * Introduction of dependency upon tomcatjss 7.0 * Removal of http filtering configuration mechanisms * Introduction of additional slot substitution to support revised filesystem layout * Addition of 'pkiuser' uid:gid creation methods * Inclusion of per instance '*.profile' files * Introduction of configurable 'configurationRoot' parameter * Introduction of default configuration of 'log4j' mechanism (alee) * Modify web.xml to use new Application classes to bootstrap servers (alee) * Introduction of "Wrapper" logic to support Tomcat 6 --> Tomcat 7 API change (jmagne) * Added jython helper function to allow attaching a remote java debugger (e. g. - eclipse)
* Added user CLI.Endi Sukma Dewata2012-05-311-1/+5
| | | | | | The user CLI provides a tool to manage users and user certificates. Ticket #160
* PKI Deployment ScriptletsMatthew Harmsen2012-05-251-6/+75
| | | | | | | * Integration of Tomcat 7 * Addition of centralized 'pki-tomcatd' systemd functionality to the PKI Deployment strategy * Removal of 'pki_flavor' attribute
* PKI Deployment ScriptletsMatthew Harmsen2012-04-261-3/+28
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | * Completed the following six 'scriptlets': * Dogtag 10: Python 'initialization.py' Installation Scriptlet (https://fedorahosted.org/pki/ticket/147) * Dogtag 10: Python 'instance_layout.py' Installation Scriptlet (https://fedorahosted.org/pki/ticket/75) * Dogtag 10: Python 'webserver_layout.py' Installation Scriptlet (https://fedorahosted.org/pki/ticket/140) * Dogtag 10: Python 'subsystem_layout.py' Installation Scriptlet (https://fedorahosted.org/pki/ticket/141) * Dogtag 10: Python 'war_explosion.py' Installation Scriptlet (https://fedorahosted.org/pki/ticket/76) * Dogtag 10: Python 'finalization.py' Installation Scriptlet (https://fedorahosted.org/pki/ticket/148) * Created numerous PKI deployment helper utilities. * Augmented logging to provide indentation. * Generated logic for installation 'manifest'. * Tested logic using '--dry_run' option and '-p' prefix options. * Per initial review, removed numerous "constants" and consolidated logic into "master" dictionary. * Corrected the following ticket: * Dogtag 10: Fix 'build_dogtag_pki' script to account for 'pki-deploy' RPM (https://fedorahosted.org/pki/ticket/138) Resolves Bugzilla Bug #810047 - build_dogtag_pki fails with requirements for pki-deploy (https://bugzilla.redhat.com/show_bug.cgi?id=810047) * Created the following three 'scriptlets' as 'NOT YET IMPLEMENTED' place-holders: * Dogtag 10: Python 'security_databases.py' Installation Scriptlet (https://fedorahosted.org/pki/ticket/136) * Dogtag 10: Python 'slot_assignment.py' Installation Scriptlet (https://fedorahosted.org/pki/ticket/146) * Dogtag 10: Python 'configuration.py' Configuration Scriptlet (https://fedorahosted.org/pki/ticket/137)
* BZ 813075 - added selinux rule for file size accessAde Lee2012-04-161-2/+5
|
* spec files for Bug 745278 - [RFE] ECC encryption keys cannot be archivedChristina Fu2012-04-053-18/+27
|
* Replaced Candlepin with RESTEasy.Endi Sukma Dewata2012-03-291-5/+8
| | | | | | | | | Previously the code depends on the old RESTEasy libraries provided by Candlepin package. Now the Eclipse classpath, build/setup scripts, and the spec file have been updated to use the libraries provided by the new RESTEasy package. Ticket #29
* Added option to build without Javadoc.Endi Sukma Dewata2012-03-261-4/+16
| | | | | | | | | | The build scripts have been modified to provide an option to build without Javadoc to speed up development builds. The option can be used as follows: compose_pki_core_packages --without-javadoc hybrid_rpms Ticket #111
* Removed unnecessary pki folder.Endi Sukma Dewata2012-03-268-0/+4248
Previously the source code was located inside a pki folder. This folder was created during svn migration and is no longer needed. This folder has now been removed and the contents have been moved up one level. Ticket #131