summaryrefslogtreecommitdiffstats
path: root/pki/base/setup
Commit message (Collapse)AuthorAgeFilesLines
* Resolves #737192 - Need script to upgrade proxy configurationvakwetu2011-09-304-83/+596
| | | | git-svn-id: svn+ssh://svn.fedorahosted.org/svn/pki/trunk@2244 c9f7a03b-bd48-0410-a16d-cbbf54688b0b
* Bugzilla Bug #734590 - Refactor JNI libraries for Fedora 16+ . . .mharmsen2011-09-131-3/+5
| | | | git-svn-id: svn+ssh://svn.fedorahosted.org/svn/pki/trunk@2197 c9f7a03b-bd48-0410-a16d-cbbf54688b0b
* Bugzilla BZ# 699809 - Convert certificate system to use systemdvakwetu2011-09-097-18/+1543
| | | | git-svn-id: svn+ssh://svn.fedorahosted.org/svn/pki/trunk@2196 c9f7a03b-bd48-0410-a16d-cbbf54688b0b
* Remove proxy-ipa.conf changesvakwetu2011-08-261-14/+0
| | | | git-svn-id: svn+ssh://svn.fedorahosted.org/svn/pki/trunk@2187 c9f7a03b-bd48-0410-a16d-cbbf54688b0b
* Bugzilla 730146 - SSL handshake picks non-FIPS ciphers in FIPS modecfu2011-08-261-8/+12
| | | | git-svn-id: svn+ssh://svn.fedorahosted.org/svn/pki/trunk@2180 c9f7a03b-bd48-0410-a16d-cbbf54688b0b
* Resolves #712931 - CS requires too many ports to be open in the FW. added ↵vakwetu2011-08-251-0/+14
| | | | | | proxy-ipa.conf git-svn-id: svn+ssh://svn.fedorahosted.org/svn/pki/trunk@2179 c9f7a03b-bd48-0410-a16d-cbbf54688b0b
* Resolves #712931 - CS requires too many ports to be open in the FWvakwetu2011-08-232-12/+128
| | | | git-svn-id: svn+ssh://svn.fedorahosted.org/svn/pki/trunk@2160 c9f7a03b-bd48-0410-a16d-cbbf54688b0b
* Bugzilla BZ689909 - Dogtag installation under IPA takes too much time - ↵vakwetu2011-08-031-6/+13
| | | | | | remove the inefficient sleeps git-svn-id: svn+ssh://svn.fedorahosted.org/svn/pki/trunk@2096 c9f7a03b-bd48-0410-a16d-cbbf54688b0b
* Bugzilla Bug #669226 - Remove Legacy Build System (Ant + Autoconf --> CMake)mharmsen2011-07-131-313/+0
| | | | git-svn-id: svn+ssh://svn.fedorahosted.org/svn/pki/trunk@2057 c9f7a03b-bd48-0410-a16d-cbbf54688b0b
* Bugzilla BZ 694569 - parameter used by pkiremove not updatedvakwetu2011-04-151-58/+68
| | | | git-svn-id: svn+ssh://svn.fedorahosted.org/svn/pki/trunk@1964 c9f7a03b-bd48-0410-a16d-cbbf54688b0b
* Bug 693815 - /var/log/tomcat6/catalina.out owned by pkiuserjdennis2011-04-121-0/+8
| | | | | | | | | | | | Set the TOMCAT_LOG variable in the per instance tomcat config file otherwise it defaults to the generic tomcat log file. Note, we set up and configure our log file elsewhere so the only issue was the initscript was setting the TOMCAT_USER ownership on TOMCAT_LOG, a file we otherwise do not use or touch. git-svn-id: svn+ssh://svn.fedorahosted.org/svn/pki/trunk@1954 c9f7a03b-bd48-0410-a16d-cbbf54688b0b
* Bug 690626 - pkiremove removes the registry entry for all instances on a machinejdennis2011-03-281-1/+1
| | | | | | | Add 'preserve' option when creating registry directory git-svn-id: svn+ssh://svn.fedorahosted.org/svn/pki/trunk@1933 c9f7a03b-bd48-0410-a16d-cbbf54688b0b
* Bugzilla BZ#688251 - Dogtag installation under IPA takes too much time - ↵vakwetu2011-03-222-77/+98
| | | | | | SELinux policy compilation git-svn-id: svn+ssh://svn.fedorahosted.org/svn/pki/trunk@1909 c9f7a03b-bd48-0410-a16d-cbbf54688b0b
* Bugzilla Bug #688287 - Add "deprecation" notice regarding using "shared ports"mharmsen2011-03-181-0/+4
| | | | | | | in pkicreate -help . . . git-svn-id: svn+ssh://svn.fedorahosted.org/svn/pki/trunk@1900 c9f7a03b-bd48-0410-a16d-cbbf54688b0b
* Bugzilla Bug #673508 - CS8 64 bit pkicreate script uses wrong library name formharmsen2011-03-081-1/+1
| | | | | | | SafeNet LunaSA git-svn-id: svn+ssh://svn.fedorahosted.org/svn/pki/trunk@1883 c9f7a03b-bd48-0410-a16d-cbbf54688b0b
* add xml-commons-apis.jar to pkisilentjdennis2011-03-031-0/+14
| | | | | | | | add xml-commons-resolver.jar to pkicreate add both to pkicore.spec git-svn-id: svn+ssh://svn.fedorahosted.org/svn/pki/trunk@1878 c9f7a03b-bd48-0410-a16d-cbbf54688b0b
* fix bz 680420jdennis2011-03-011-0/+14
| | | | | | | add xml-commons-apis jar git-svn-id: svn+ssh://svn.fedorahosted.org/svn/pki/trunk@1874 c9f7a03b-bd48-0410-a16d-cbbf54688b0b
* Resolves bug #679574 - Velocity fails to load all dependent classesjdennis2011-02-221-0/+24
| | | | | | | | pkicreate adds jar symlink for jakarta-commons-collection or apache-commons-collection to web app lib directory git-svn-id: svn+ssh://svn.fedorahosted.org/svn/pki/trunk@1863 c9f7a03b-bd48-0410-a16d-cbbf54688b0b
* Bugzilla Bug #678157 - uninitialized variable warnings from Perl.mharmsen2011-02-213-27/+27
| | | | git-svn-id: svn+ssh://svn.fedorahosted.org/svn/pki/trunk@1859 c9f7a03b-bd48-0410-a16d-cbbf54688b0b
* Bugzilla Bug #673638 - Installation within IPA hangsmharmsen2011-02-021-4/+4
| | | | git-svn-id: svn+ssh://svn.fedorahosted.org/svn/pki/trunk@1808 c9f7a03b-bd48-0410-a16d-cbbf54688b0b
* Bugzilla Bug #656733 - Standardize jar install location and jar namesmharmsen2011-01-111-63/+65
| | | | git-svn-id: svn+ssh://svn.fedorahosted.org/svn/pki/trunk@1719 c9f7a03b-bd48-0410-a16d-cbbf54688b0b
* Bugzilla Bug 223346 - Two conflicting ACL list definitions in source repositoryvakwetu2011-01-051-12/+0
| | | | git-svn-id: svn+ssh://svn.fedorahosted.org/svn/pki/trunk@1694 c9f7a03b-bd48-0410-a16d-cbbf54688b0b
* fix for bug 665388jdennis2011-01-042-158/+247
| | | | | | | | | | | | | | | | | | | | | jakarta-* jars have been renamed to apache-*, pkicreate fails Fedora 14 and above This patch does 3 fundamental things: 1) Adds a utility to find the path to a jar (find_jar) 2) Sets up the pki instance jars by calling find_jar() instead of hard coding their expected location. 3) Conditions the commons-logging and commons-lang jar depending on whether apache-commons is found, else falls back to jakarta-commons In addition the patch organizes the jar variables, jar setup, etc. by alphabetical jar name so things are consistent and easier to find in the source code. git-svn-id: svn+ssh://svn.fedorahosted.org/svn/pki/trunk@1684 c9f7a03b-bd48-0410-a16d-cbbf54688b0b
* missing DESTDIR, see bug 643206jdennis2010-12-261-2/+2
| | | | git-svn-id: svn+ssh://svn.fedorahosted.org/svn/pki/trunk@1678 c9f7a03b-bd48-0410-a16d-cbbf54688b0b
* cmake: Fixed the setup directory creation on install.asn2010-12-171-11/+2
| | | | git-svn-id: svn+ssh://svn.fedorahosted.org/svn/pki/trunk@1645 c9f7a03b-bd48-0410-a16d-cbbf54688b0b
* Bugzilla Bug #643206 - New CMake based build system for Dogtagmharmsen2010-12-072-55/+31
| | | | git-svn-id: svn+ssh://svn.fedorahosted.org/svn/pki/trunk@1607 c9f7a03b-bd48-0410-a16d-cbbf54688b0b
* Bug #658926jdennis2010-12-031-10/+11
| | | | | | | | | | | | | | jakarta-commons-lang.jar is needed by velocity, add that link in WEB-INF/lib. This dependency first appeared in F13. We had been providing a link to jakarta-commons-collections.jar in $pki_instance/common/lib but that link is not necessary since tomcat6 already provide jakarta-commons-collections.jar. So remove the superfluous link creation, it isn't needed. git-svn-id: svn+ssh://svn.fedorahosted.org/svn/pki/trunk@1602 c9f7a03b-bd48-0410-a16d-cbbf54688b0b
* Bugzilla Bug #643206 - New CMake based build system for Dogtagmharmsen2010-12-021-135/+0
| | | | | | | (Legacy build system changes for compliance) git-svn-id: svn+ssh://svn.fedorahosted.org/svn/pki/trunk@1597 c9f7a03b-bd48-0410-a16d-cbbf54688b0b
* Bugzilla BZ 606946 - Convert Native Tools to use ldapAPI from OpenLDAP ↵vakwetu2010-11-191-2/+1
| | | | | | instead of the Mozldap git-svn-id: svn+ssh://svn.fedorahosted.org/svn/pki/trunk@1580 c9f7a03b-bd48-0410-a16d-cbbf54688b0b
* Rename pkicommon to pkicommon.pmjdennis2010-11-194-31/+9
| | | | git-svn-id: svn+ssh://svn.fedorahosted.org/svn/pki/trunk@1578 c9f7a03b-bd48-0410-a16d-cbbf54688b0b
* Fix issues discovered during testingjdennis2010-11-193-61/+203
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | During testing with Ade several issues were discovered which needed fixing, these included: Remove connectionTimeout on JSS connectors in the server.xml files due to JSS bug. We will reenable the timeouts when JSS is fixed. pki_apache_initscript had chmod & chown wrapped in an echo command which prevented them from executing, an artifact inadverantly left in the file during a debug session. The role parameter to runcon which had been added to facilitate test/debug was removed. The logfile variables shared between pkicommon, pkicreate and pkiremove were awkward and resulted in warnings about the use of uninitialized variables in some circumstances. Some functions were tweaked and some variables removed to enforce better data hiding and eliminate the warnings with respect to the logfile. If the pkicreate script aborted before it completed it would fail to write the installation manifest which made it impossible to remove the partial installation via pkiremove. A hander was added so it would run if Perl executed a "die" (e.g. aborted). The handler writes the manifest before final exit. The subroutine used to write the manifest was bullet proofed to avoid referencing uninitialized variables in the case of non-normal exit. The copy_directory() subroutine failed to preserve symbolic links in the source, instead it traversed the source link and copied the target of the link. copy_directory() and it's support routines were enhanced to preserve symbolic links. A new subrotine copy_symlink() was added. pkicreate failed to create a symbolic link to the symkey.jar file, it now creates the link to symkey.jar. The passwords written into the two password files were not terminated with a newline character, now they are. pkiremove would enter an infinate loop if the -force option was specified, this is now fixed. The tomcat6.conf file had been inadvertantly omitted from the tks subsystem. References to the deprecated apachectl file were expunged. git-svn-id: svn+ssh://svn.fedorahosted.org/svn/pki/trunk@1577 c9f7a03b-bd48-0410-a16d-cbbf54688b0b
* Undo the pre_merge_adjustmentjdennis2010-11-191-11/+11
| | | | git-svn-id: svn+ssh://svn.fedorahosted.org/svn/pki/trunk@1576 c9f7a03b-bd48-0410-a16d-cbbf54688b0b
* Merge CA changes into KRA,OCSP & TKSjdennis2010-11-193-113/+205
| | | | git-svn-id: svn+ssh://svn.fedorahosted.org/svn/pki/trunk@1575 c9f7a03b-bd48-0410-a16d-cbbf54688b0b
* Make the instance initscript local to the instancejdennis2010-11-193-89/+37
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Earlier in the patch series a change was introduced with respect to the initscripts. A per instance initscript was created in /etc/init.d for each instance. This was simply a symlink to the tomcat6 initscript (using the instance name). The uber initscript, pki-cad, would iterate over the installed instances and invoke the per instance initscript. However during the review process it was pointed out that when removing (erasing) an rpm the per instance initscripts would not be removed because they are not in the rpm file manifest. This would leave dangling initscripts. Also it was felt the per instance initscript in /etc/init.d was confusing when combined with the uber initscript. This patch moves the per instance initscript from /etc/init.d to the instance directory. It retains the same name (i.e. the instance name). Now instead of the the uber initscript invoking the per instance initscript in /etc/init.d via the service command it instead directly invokes initscript in the instance directory. This patch also fixes a bug discovered from reading the shell code invoked by the uber initscript (in the pki "functions" library). The test to determine if a supplied instance name was vaid was incorrect. The code did this: if [ "${PKI_REGISTRY}/${pki_instance}" != "${PKI_REGISTRY_ENTRIES}" ] however $PKI_REGISTRY_ENTRIES is a space separated list of all registry instance files, thus the test only succeeds if there is a single instance. The test was modified to iterate over the all the entries in $PKI_REGISTRY_ENTRIES. This patch also fixed the list_intances() function to list only the instance name, not the full path the to instance configuration file. We also replaced the use of /bin/ls with a shell glob. This patch also moves some variables which had been identically defined in both pkicreate and pkiremove into the pkicommon library for consistency and maintenance sake. git-svn-id: svn+ssh://svn.fedorahosted.org/svn/pki/trunk@1572 c9f7a03b-bd48-0410-a16d-cbbf54688b0b
* Use strict language rulesjdennis2010-11-193-513/+528
| | | | | | | | | | | | | | | | | | | | | | | | | Add the strict and warning pragmas informing the Python interpreter we want to obey the language rules and catch as many errors for us as it can. Clean up all the errors that strict reported. Properly define the scope of all identifiers and use correct import semantics. Initialize most global variables to undef so that we can catch the use of those variables prior to their initialization with defined values. Previously most had been initialized to the empty string, which is a perfectly valid value, thus no warnings will be emitted if they are used before being assigned a value of our choosing. At this point all variables and functions will have been declared and assigned reasonable values. We're now protected against things like misspelled identifier names, silently using undefined values, referencing things which don't exist, etc. git-svn-id: svn+ssh://svn.fedorahosted.org/svn/pki/trunk@1571 c9f7a03b-bd48-0410-a16d-cbbf54688b0b
* Set the owner and group on the instance's NSS databasejdennis2010-11-191-0/+3
| | | | git-svn-id: svn+ssh://svn.fedorahosted.org/svn/pki/trunk@1570 c9f7a03b-bd48-0410-a16d-cbbf54688b0b
* fix use of default instance namesjdennis2010-11-192-9/+9
| | | | | | | | It wasn't initialized in some places. Use the same naming convention in all places. git-svn-id: svn+ssh://svn.fedorahosted.org/svn/pki/trunk@1568 c9f7a03b-bd48-0410-a16d-cbbf54688b0b
* Fix the initialization of the pid filejdennis2010-11-191-1/+2
| | | | git-svn-id: svn+ssh://svn.fedorahosted.org/svn/pki/trunk@1567 c9f7a03b-bd48-0410-a16d-cbbf54688b0b
* Fix initialization of $uninstall_actionjdennis2010-11-191-5/+10
| | | | | | | | In some places $uninstall_action was being referenced before it was initialized and thus generated warnings. git-svn-id: svn+ssh://svn.fedorahosted.org/svn/pki/trunk@1566 c9f7a03b-bd48-0410-a16d-cbbf54688b0b
* Fix use of dry_runjdennis2010-11-192-25/+27
| | | | | | | | Fix return value when dry_run is enabled. Also simplify dry run conditional syntax by removing unnecessary list parenthesis. git-svn-id: svn+ssh://svn.fedorahosted.org/svn/pki/trunk@1565 c9f7a03b-bd48-0410-a16d-cbbf54688b0b
* Unify the message streamjdennis2010-11-193-150/+62
| | | | | | | | | | | | Some messages were being directly written to stdout or stderr bypassing the message mechanism, the emit() function. That meant those messages were not recorded in the log and hence were lost. This patch uses the emit() function for more messages. The patch also adds a "warning" level to the message category. git-svn-id: svn+ssh://svn.fedorahosted.org/svn/pki/trunk@1564 c9f7a03b-bd48-0410-a16d-cbbf54688b0b
* Fix ampersand function callsjdennis2010-11-193-64/+61
| | | | | | | | | | | | | | | | | | | | | | | Some functions were being called with the deprecated ampersand syntax. In Perl the & prefix operator indicates the expression is to be interpreted as a function, e.g. &foo means foo is a function and if foo was followed by a list then it means call the function foo. The list can be parenthesized or not, it could just be comma separated expressions. Calling functions with this syntax is a hold over from earlier versions of Perl, but modern Perl has much cleaner syntax where function calls look like they do in other languages, an identifier followed by parenthesis. This is the calling style used in most of the rest of the code. This patch just unifies the calling syntax so it's consistent and more readable. Also the patch cleans up the function definition, some of the functions had been defined with an empty formal parameter list, but that conflicts with function prototyping introduced in modern Perl, an empty formal parameter list states the function takes no arguments. It only worked previously because when the (deprecated) ampersand operator was applied to the identifier it defeated prototype checking. git-svn-id: svn+ssh://svn.fedorahosted.org/svn/pki/trunk@1563 c9f7a03b-bd48-0410-a16d-cbbf54688b0b
* Fix set/get library pathjdennis2010-11-191-51/+56
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | set_library_path() and get_library_path() were both producing warnings from Perl about the use of uninitialized variables. This occurred because get_library_path() returned the value of the LD_LIBRARY_PATH environment variable, which if it is not set in the envronment is the undef value. Then the caller of get_library_path() would use the result to build a new string to use as a new library path. But the use of undef in the string concatentation was producing warnings. Finally the caller would reset the library path to what had been orginally returned by get_library_path(), which set LD_LIBRARY_PATH in %ENV to the undef value, which is probaly not the best idea, although legal. To fix this every routine which called get_library_path() would need to check for undef value as it builds a new replacement path, that's a lot of code to add in a lot of places. Instead set_library_path() was modified, instead of accepting a string containing a new path, it now accepts an array of path values. It iterates over the array discarding any undef values in the array and builds a path string from the defined values. This simplifed the callers of get_library_path() and set_library_path(). It also had the nice property that if get_library_path() initially returned undef then subsequently calling set_library_path() with that value produces an empty string for storing into %ENV which preferable to storing undef. git-svn-id: svn+ssh://svn.fedorahosted.org/svn/pki/trunk@1562 c9f7a03b-bd48-0410-a16d-cbbf54688b0b
* Check the status of all invoked subroutinesjdennis2010-11-191-42/+8
| | | | | | | Also, use more succinct Perl syntax for improved readability. git-svn-id: svn+ssh://svn.fedorahosted.org/svn/pki/trunk@1557 c9f7a03b-bd48-0410-a16d-cbbf54688b0b
* Use run_command() utility when invoking SELinux shell commands.jdennis2010-11-191-16/+23
| | | | | | | | | | Also some minor tweaks for checking result status and protecting variables in string interpolation for the SELinux shell commands. No change in functionality, just robustness enhancements. git-svn-id: svn+ssh://svn.fedorahosted.org/svn/pki/trunk@1556 c9f7a03b-bd48-0410-a16d-cbbf54688b0b
* Add more template substitutionsjdennis2010-11-191-1/+31
| | | | git-svn-id: svn+ssh://svn.fedorahosted.org/svn/pki/trunk@1555 c9f7a03b-bd48-0410-a16d-cbbf54688b0b
* Update jar class loadingjdennis2010-11-191-0/+127
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Tomcat's class loading follows the model for J2EE Application Containers and Servlet's. Each release of Tomcat has modified it's class loading in some respect. Usually the class loading modifications have been in the service of encouraging best practice. Typically this means keeping web applications which may be running in the same tomcat instance completely isolated from each other such that they can't interfere with one other. In essence this means classes which are loaded by a specific web application should only be visible to that web application. Sharing classes/jars between web applications is to avoided to the greatest extent possible. Best practice suggests only "framework" classes (e.g. tomcat's servlet API's) should be shared. Class visibility and sharing is controlled by a hierarchy of class loaders. The topic of class loading, and specifically in the context of servlet containers, has been extensively written about. For those interested in the topic a search of the web will produce a wealth of material. I found the following documents useful: "Understanding The Tomcat Classpath Common Problems And How To Fix Them" http://www.mulesoft.com/tomcat-classpath "Class Loaders" http://datadisk.co.uk/html_docs/java_app/tomcat6/tomcat6_classloaders.htm "Apache Tomcat 6.0 Class Loader HOW-TO" http://tomcat.apache.org/tomcat-6.0-doc/class-loader-howto.html "Java programming dynamics, Part 1: Java classes and class loading" http://www.ibm.com/developerworks/java/library/j-dyn0429/ "Taxonomy of class loader problems encountered when using Jakarta Commons Logging" http://articles.qos.ch/classloader.html In particular one needs to have a firm understanding of the class loading delegation model, parent-first vs. child-first, as this differs between standard Java and Servlet Containers. We attempt to follow best practice to the greatest extent possible so that the jars we need are visible only the to appropriate class loader. We do have one significant exception which requires violating the isolation principle. tomcatjss and jss are both required by the tomcat framework and by our web application. This occurs because we specify the catalina connector (Coyote) we wish to use for our server SSL/TLS connections are jss instead of the default SSL/TLS connectors in tomcat, thus tomcat needs to load tomcatjss and jss. Our web application also utilizes tomcatjss and jss, the most obvious example being the CrypoManager which must be a singleton instance. There is an additional issue, jss is a JNI native library written in C. JVM's have a restriction which prevents loading a JNI library by more than one class loader. The fact the CryptoManager is a signleton and that jss is JNI means jss (and tomcatjss) must only be loaded by exactly one class loader in the JVM. Thus tomcatjss and jss must be loaded by the tomcat common class loader which is shared between the tomcat servlet framework and loaded web applications. Normally tomcat ships with a catalina.properties configuration file which enforces the best practice class loading separation. However, in recognition that is sometimes too restrictive the catalina.properties file can be edited to support other class loading configurations. We take advantage of this by establishing a "common" class loading location specific to the tomcat instance (e.g. $CATALINA_BASE/common/lib). The tomcat common class loader via the catalina.properties file is directed to also search this directory. We install tomcatjss, jss and jakarta-commons-logging in this common location. All other jars follow best practice and are isolated in the web applications library (e.g. $CATALINA_BASE/webapps/<webapp_name>/WEB-INF/lib). The reason why jakarta-commons-logging is also installed in common along with tomcatjss and jss is because it is a dependency of tomcatjss and is not otherwise available because tomcat uses another logging package. When we install the tomcat instance we don't actually copy jar files into the library directories under $CATALINA_BASE because we want to use the system supplied jar files and if they are updated because of bug fixes, security fixes, etc. we want to immediately take advantage of the updated version of the jar file. Thus we "install" symbolic links in the library directories which point to the system supplied jar files. This also reduces disk usage by avoiding multiple copies of the same file. This patch implements the above by doing the following: Makes catalina.properties a "template file" which is processed by our templating facility. The only substitution at the moment is the common class loader location. Establishes the paths to each of our required jar files as supplied by the system package manager. Creates symbolic links the to jar files in the instance library directories. The following diagram illustrates the class loading described above: +--------------------+ | Bootstrap | | Class Loader | +--------------------+ | V +--------------------+ | Extension | | Class Loader | +--------------------+ | V +--------------------+ | System | | Class Loader | +--------------------+ | V +---------------------------+ | Common | | Class Loader | | $CATALINA_BASE/common/lib | | (see note 1) | +---------------------------+ | +---------------+--------------------+ | | V V +---------------------------------------+ +-------------------------+ | CA Web App | | Web App 2 | | Class Loader | | Class Loader | | $CATALINA_BASE/webapps/ca/WEB-INF/lib | | (for illustration only) | | (see note 2) | | | +---------------------------------------+ +-------------------------+ [1] Common loader loads these jars: jakarta-commons-logging jss tomcatjss [2] CA Web App loader loads these jars: certsrv cms cmsbundle cmscore cmsutil jakarta-commons-collections kra ldapjdk nsutil osutil velocity xerces-j2 git-svn-id: svn+ssh://svn.fedorahosted.org/svn/pki/trunk@1554 c9f7a03b-bd48-0410-a16d-cbbf54688b0b
* Remove support for other OS'sjdennis2010-11-192-109/+22
| | | | | | | | | | | | | | | | | | | | | | The modifications to the install scripts have been Linux specific. So much has changed it's reasonable to assume the special case code for other OS's (e.g. Solaris and Windows) is not likely to be correct any more. As a consequence there isn't much sense in keeping this OS specific code. To support other OS's the scripts would really need to be ported to the target OS and it probably would be best to do this cleanly by starting fresh and incrementally adding back in OS specific exceptions. Note: Only OS specific code which obviously needed porting after the update to the scripts was removed. The OS specific code which was "generic" has been preserved. Plus, management has stated the other OS's are no longer supported. git-svn-id: svn+ssh://svn.fedorahosted.org/svn/pki/trunk@1553 c9f7a03b-bd48-0410-a16d-cbbf54688b0b
* Use new the new versions of the file utilitiesjdennis2010-11-191-543/+123
| | | | | | | | | | The utilities in pkicommon were enhanced in a previous patch. This patch calls the new utilites with the new parameter lists. The bulk of the changes are simplifying the specification of file permissions, file ownership, and checking the result of the operation. git-svn-id: svn+ssh://svn.fedorahosted.org/svn/pki/trunk@1552 c9f7a03b-bd48-0410-a16d-cbbf54688b0b
* Remove pkicomplete scriptjdennis2010-11-191-12/+0
| | | | | | | | The pkicomplete script is no longer needed, remove all vestiges of it's existence. git-svn-id: svn+ssh://svn.fedorahosted.org/svn/pki/trunk@1551 c9f7a03b-bd48-0410-a16d-cbbf54688b0b
generated by cgit (git 2.34.1) at 2024-10-06 19:14:26 +0000