| Commit message (Collapse) | Author | Age | Files | Lines |
... | |
|
|
|
|
|
|
| |
The RPM spec for Fedora 24 has been updated to use RESTEasy 3.0.17
as in Fedora 25.
https://fedorahosted.org/pki/ticket/2403
|
|
|
|
| |
https://fedorahosted.org/pki/ticket/2403
|
|
|
|
| |
https://fedorahosted.org/pki/ticket/2403
|
|
|
|
| |
* PKI TRAC Ticket #2402 - Conflict in file ownership in pki-base and pki-server
|
|
|
|
|
| |
* PKI TRAC Ticket #2401 - pkispawn calls dnsdomainname even if it does not
rpm-require hostname
|
| |
|
|
|
|
| |
- PKI TRAC Ticket #2228 - RHEL 7.2: Could NOT find Threads
|
| |
|
| |
|
| |
|
| |
|
| |
|
|
|
|
|
|
|
|
|
|
| |
The code has been modified to use the JAVA_HOME path specified in
the pki.conf.
The spec file has been modified to depend specifically on OpenJDK
1.8.0 and to provide the default JAVA_HOME path for the pki.conf.
https://fedorahosted.org/pki/ticket/2363
|
| |
|
| |
|
| |
|
| |
|
|
|
|
| |
Added temporary build dependency on tomcat (override tomcatjss dependency)
|
| |
|
| |
|
| |
|
| |
|
| |
|
|
|
|
|
|
|
|
|
| |
For the benefit of code locality and subsequent to the
generalisation of IPACustodiaKeyRetriever to
ExternalProcessKeyRetriever, the pki-ipa-retrieve-key script is
being moved to the FreeIPA codebase.
Part of: https://fedorahosted.org/pki/ticket/1625
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
Ticket #801 : Merge pki-symkey into jss
What is supported:
1. Everything that is needed to support Secure Channel Protocol 01.
2. Supports the nist sp800 kdf and the original kdf.
3. Supports key unwrapping used by TPS which was formerly in the symkey JNI.
Requires:
1. A new JSS that supports more advanced symkey operations such as key derivation, more advanced key
unwrapping , and a way to list and identify a given symmetric key by name. Version of new Jss will be forthcoming.
Still to do:
1. Port over the 2 or 3 SCP02 routines from Symkey to use this code.
2. The original symkey will remain in place until we can port over everything.
3. SCP03 support can be added later.
|
| |
|
| |
|
|
|
|
|
| |
- python-flake8 2.5.4 package should require pyflakes >= 1.2.3
- python3-flake8 2.5.4 package should require python3-pyflakes >= 1.2.3
|
| |
|
|
|
|
|
|
|
|
|
|
|
|
| |
Add 'IPACustodiaKeyRetriever', a 'KeyRetriever' implementation for
use when Dogtag is deployed as a FreeIPA CA. The Java class invokes
'pki-ipa-retrieve-key', a Python script that retrieves lightweight
CA keys from the Custodia server on a replica that possesses the
keys. 'pki-ipa-retrieve-key' depends on FreeIPA libraries, FreeIPA
server configuration, and Kerberos and Custodia keys owned by
'pkiuser'.
Part of: https://fedorahosted.org/pki/ticket/1625
|
| |
|
| |
|
| |
|
| |
|
|
|
|
|
| |
- PKI TRAC Ticket #1701 - Removed javadocs from 'meta' package
- PKI TRAC Ticket #1099 - Rename DRM nomenclature to KRA nomenclature
|
|
|
|
| |
PKI TRAC Ticket #1399 - Split pki-base into Java and Python client packages
|
|
|
|
| |
- PKI TRAC Ticket #1724 - Rebase pki-core to 10.3.x
|
|
|
|
|
|
| |
Fedora 23 doesn't have NSS and LDAP packages for Python 3.
RHEL 7.2 doesn't ship Python 3.
|
|
|
|
|
|
|
|
|
|
| |
Dogtag's Python code has been compatible with Python 3 for a while. A
new package pki-base-python3 provides the pki package for clients.
As of now pki.server is not packages for Python 3.
The pki-base package also provides pki-base-python2.
https://fedorahosted.org/pki/ticket/1739
|
|
|
|
|
|
|
|
|
|
|
| |
* The cmake files now copy just *.py into the installation directory.
This ensures that no stale pyc files or __pycache__ directories are
copied. rpmbuilder takes care of pyc/pyo compilation on Fedora and
RHEL.
* The pki-core.spec file uses python2 macros. In case of RHEL missing
macros are defined on the top of the file.
* A bug in the python_sitelib macros has been fixed. rpmbuilder doesn't
like lines breaks.
|
|
|
|
|
| |
The pki Python modules don't require python-ldap and python-lxml. The
dependencies are only used by the pki.server package.
|
| |
|
|
|
|
|
|
|
|
| |
Java components of pki-base have been moved to pki-base-java,
significantly reducing the expected footprint of pki-base for
python-only clients.
Ticket 1399
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
A Python wrapper module has been added for the pki pkcs12-import
command to provide a mechanism to implement a workaround for JSS
import limitation.
Additional fixes by cheimes have been merged into this patch:
setup.py:
We must track all sub-packages manually.
pylint-build-scan.py:
pylint confuses the 'pki' package with the 'pki' command. The
workaround symlinks the command and analysis the command under its
alternative name.
https://fedorahosted.org/pki/ticket/1742
|
|
|
|
| |
Fixes: https://fedorahosted.org/pki/ticket/1723
|
| |
|
|
|
|
|
| |
- PKI TRAC Ticket #1714 - mod_revocator and mod_nss dependency for tps
should be removed
|
|
|
|
|
|
|
| |
pki-core.spec now ensures that Python code stays compatible with Python
3 and is nicely formatted, too.
https://fedorahosted.org/pki/ticket/1738
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
The pki-core.spec has been modified to execute pki-server migrate
when the package is installed. This way when upgrading from F22 to
F23 all PKI instances will be migrated automatically to Tomcat 8.
The pki-server migrate command has been modified such that if there
is no specific Tomcat version specified it will use the current
Tomcat version.
The top attribute in the CLI class was not functioning properly,
so it has been replaced with get_top_module() method.
The getopt() invocations in pki-server subcommands have been
replaced with gnu_getopt() to allow intermixing options and
arguments.
https://fedorahosted.org/pki/ticket/1310
|
|
|
|
| |
- PKI TRAC Ticket #1623 - Runtime dependency on python-nss is missing
|