From release-engineering at redhat.com Mon Apr 2 16:00:21 2012 From: release-engineering at redhat.com (Kevin Wright via RT) Date: Mon, 2 Apr 2012 12:00:21 -0400 Subject: [Pki-devel] [engineering.redhat.com #148088] Request to build 'JSS 4.2.6-23.99.el5idm' on RHEL 5.9 . . . In-Reply-To: <4F765DF8.1040204@redhat.com> References: <4F765DF8.1040204@redhat.com> Message-ID: Ticket done Task Info: https://brewweb.devel.redhat.com//taskinfo?taskID=4246671 Build Info: https://brewweb.devel.redhat.com//buildinfo?buildID=207844 --Kevin From ayoung at redhat.com Tue Apr 3 02:13:58 2012 From: ayoung at redhat.com (Adam Young) Date: Mon, 02 Apr 2012 22:13:58 -0400 Subject: [Pki-devel] Repo with the F18 dependencies needed to build Dogtag Message-ID: <4F7A5CE6.3020708@redhat.com> Please make a single directory with the set of RPMs needed for BUilding Dogtag. We've been doing that for IPA for a while, and it is necessary for continuing development. I am not at a point where I can install F17 for my primary development machine, but I still try to keep up with PKI development from time to time. You guys have done a great job in geting the RPMS into Rawhide, but they should still install on F16 provided all of the dependencies are provided. I am willing to generate the Repo the same way that John Dennis does for IPA, but I need the RPMS themselves. From kchamart at redhat.com Tue Apr 3 09:44:50 2012 From: kchamart at redhat.com (Kashyap Chamarthy) Date: Tue, 03 Apr 2012 15:14:50 +0530 Subject: [Pki-devel] /tmp on tmpfs (from F-18 onwards) Message-ID: <4F7AC692.8040003@redhat.com> If you haven't noticed the on-going discussion on fedora-devel, and also more info here by Lennart -- http://0pointer.de/blog/projects/tmp.html - /tmp would be mounted as tmpfs by default (this can be over-ridden though) + To disable this: issuing "systemctl mask tmp.mount" would do I brought this up because, I see a directory like 'hsperfdata_pkiuser' (which has a data file inside it) for a local CA instance I have. And, seems like every application that stores info on /tmp may needs fixing. -- /kashyap From ayoung at redhat.com Tue Apr 3 14:54:29 2012 From: ayoung at redhat.com (Adam Young) Date: Tue, 03 Apr 2012 10:54:29 -0400 Subject: [Pki-devel] [PATCH] 49-Remove-unneeded-Supression-messages. Message-ID: <4F7B0F25.5020605@redhat.com> Removes 120 warnings. These should have no effect on the generated code. Untested. -------------- next part -------------- A non-text attachment was scrubbed... Name: dogtag-admiyo-0049-Remove-unneeded-Supression-messages.patch Type: text/x-patch Size: 63234 bytes Desc: not available URL: From edewata at redhat.com Tue Apr 3 15:50:04 2012 From: edewata at redhat.com (Endi Sukma Dewata) Date: Tue, 03 Apr 2012 10:50:04 -0500 Subject: [Pki-devel] [PATCH] 49-Remove-unneeded-Supression-messages. In-Reply-To: <4F7B0F25.5020605@redhat.com> References: <4F7B0F25.5020605@redhat.com> Message-ID: <4F7B1C2C.1040207@redhat.com> On 4/3/2012 9:54 AM, Adam Young wrote: > Removes 120 warnings. These should have no effect on the generated code. > > Untested. NACK. As discussed over IRC, the suppressions are needed to remove the remaining unused vars warnings. Some unused vars are kept in the code for clarity. There are also suppressions for unchecked generics. -- Endi S. Dewata From rcritten at redhat.com Wed Apr 4 12:51:32 2012 From: rcritten at redhat.com (Rob Crittenden) Date: Wed, 04 Apr 2012 08:51:32 -0400 Subject: [Pki-devel] question on subject patterns Message-ID: <4F7C43D4.6070304@redhat.com> In IPA we use a profile that automatically issues server certificates. It uses a pattern to pluck the hostname out of the CSR and sticks that into a user-configurable subject template. The pattern is policyset.serverCertSet.1.constraint.params.pattern=CN=[^,]+,.+ The template by default looks like policyset.serverCertSet.1.default.params.name=CN=$request.req_subject_name.cn$, OU=pki-ipa, O=IPA We discovered that if CN is an RDN in the subject template then certificates get the wrong subject. For example, if we use CN=Test then the issued subject ends up being CN=Test, CN=Test. If we use CN=Test, CN=Coyote, O=Acme the issued subject is CN=Coyote,CN=Test,CN=Coyote,O=Acme We are creating the CSR with: /usr/bin/certutil -d /etc/httpd/alias -R -s CN=pinto.example.com,OU=Test,CN=Coyote,O=Acme -o /var/lib/ipa/ipa-iem5hd/tmpcertreq -k rsa -g 2048 -z /etc/httpd/alias/noise.txt -f /etc/httpd/alias/pwdfile.txt -a So my questions are: 1. Do we just need to tweak the pattern? 2. Do I need to ban CN as an element of subjects? If it exists anywhere in the subject template it messes up the replacemnt. thanks rob From jdennis at redhat.com Wed Apr 4 14:44:11 2012 From: jdennis at redhat.com (John Dennis) Date: Wed, 04 Apr 2012 10:44:11 -0400 Subject: [Pki-devel] question on subject patterns In-Reply-To: <4F7C43D4.6070304@redhat.com> References: <4F7C43D4.6070304@redhat.com> Message-ID: <4F7C5E3B.7080701@redhat.com> On 04/04/2012 08:51 AM, Rob Crittenden wrote: > In IPA we use a profile that automatically issues server certificates. > It uses a pattern to pluck the hostname out of the CSR and sticks that > into a user-configurable subject template. > > The pattern is > > policyset.serverCertSet.1.constraint.params.pattern=CN=[^,]+,.+ > > The template by default looks like > > policyset.serverCertSet.1.default.params.name=CN=$request.req_subject_name.cn$, > OU=pki-ipa, O=IPA > > We discovered that if CN is an RDN in the subject template then > certificates get the wrong subject. > > For example, if we use CN=Test then the issued subject ends up being > CN=Test, CN=Test. > > If we use CN=Test, CN=Coyote, O=Acme the issued subject is > CN=Coyote,CN=Test,CN=Coyote,O=Acme > > We are creating the CSR with: > > /usr/bin/certutil -d /etc/httpd/alias -R -s > CN=pinto.example.com,OU=Test,CN=Coyote,O=Acme -o > /var/lib/ipa/ipa-iem5hd/tmpcertreq -k rsa -g 2048 -z > /etc/httpd/alias/noise.txt -f /etc/httpd/alias/pwdfile.txt -a > > So my questions are: > > 1. Do we just need to tweak the pattern? > 2. Do I need to ban CN as an element of subjects? If it exists anywhere > in the subject template it messes up the replacemnt. The regexp is not doing what you expect, or so I believe (I have not researched the regexp parser being used but I suspect it follows PCRE rules, i.e. Perl Regexp's). Your pattern of CN=[^,]+,.+ Is going to require there be at least two RDN's of which the first one has CN as it's type. It will then return that first RDN with CN as it's type and every RDN which follows it. Here's why, the first part of the regexp will match CN=xxx where xxx is anything not containing a comma, then it must be followed by a comma, and then it matches the entire rest of the string. Is that what you want? I suspect not. Are you just looking for the first RDN with CN as it's type? If so drop the ,.+ from the above regexp. FWIW, regexps are not a robust way to parse DN's, they don't handle escaped characters, multi-valued RDN's etc. But for the above case a regexp is probably OK, I don't think you'll run afoul of those problems in this simple scenario. -- John Dennis Looking to carve out IT costs? www.redhat.com/carveoutcosts/ From mharmsen at redhat.com Wed Apr 4 22:35:06 2012 From: mharmsen at redhat.com (Matthew Harmsen) Date: Wed, 04 Apr 2012 15:35:06 -0700 Subject: [Pki-devel] Repo with the F18 dependencies needed to build Dogtag In-Reply-To: <4F7A5CE6.3020708@redhat.com> References: <4F7A5CE6.3020708@redhat.com> Message-ID: <4F7CCC9A.8060204@redhat.com> Adam, Was there a typo in your subject line --- Did you actually mean /*Fedora 16*/ instead of /*Fedora 18 (rawhide)*/? If you did mean Fedora 16, Endi and Adi made some recent changes which remove the need for the "candlepin-deps", but require the following: On 3/27/2012 8:57 PM, Endi Sukma Dewata wrote: > On 3/27/2012 5:20 PM, Endi Sukma Dewata wrote: >> Previously the code depends on the old RESTEasy libraries >> provided by >> Candlepin package. Now the Eclipse classpath, build/setup >> scripts, and >> the spec file have been updated to use the libraries provided by the >> new RESTEasy package. >> >> Ticket #29 >> >> Note: The new RESTEasy package is only available in F17. > > Rebased. I revised the patch such that in older Fedora it will not require the new RESTEasy package. Instead, you can download RESTEasy 2.3.2 (must be this version) zip file, install it somewhere, and create the following symlinks to mimic F17: /usr/share/java/glassfish-jaxb/jaxb-impl.jar /usr/share/java/resteasy/jaxrs-api.jar /usr/share/java/resteasy/resteasy-jaxb-provider.jar /usr/share/java/resteasy/resteasy-jaxrs.jar /usr/share/java/resteasy/resteasy-jettison-provider.jar /usr/share/java/scannotation.jar This way we can continue the development on F16 without having to officially support it. I believe that you can download this from the following link (wait for the download link to appear): * http://sourceforge.net/projects/resteasy/files/Resteasy%20JAX-RS/2.3.2.Final/resteasy-jaxrs-2.3.2.Final-all.zip/download?use_mirror=iweb I believe that Kevin may be able to point you to an existing Repo for the other components? Hope this helps, -- Matt On 04/02/12 19:13, Adam Young wrote: > Please make a single directory with the set of RPMs needed for > BUilding Dogtag. We've been doing that for IPA for a while, and it is > necessary for continuing development. I am not at a point where I can > install F17 for my primary development machine, but I still try to > keep up with PKI development from time to time. You guys have done a > great job in geting the RPMS into Rawhide, but they should still > install on F16 provided all of the dependencies are provided. I am > willing to generate the Repo the same way that John Dennis does for > IPA, but I need the RPMS themselves. > > > _______________________________________________ > Pki-devel mailing list > Pki-devel at redhat.com > https://www.redhat.com/mailman/listinfo/pki-devel -------------- next part -------------- An HTML attachment was scrubbed... URL: From kwright at redhat.com Thu Apr 5 02:10:39 2012 From: kwright at redhat.com (Kevin Wright) Date: Wed, 4 Apr 2012 19:10:39 -0700 Subject: [Pki-devel] Repo with the F18 dependencies needed to build Dogtag In-Reply-To: <4F7CCC9A.8060204@redhat.com> References: <4F7A5CE6.3020708@redhat.com> <4F7CCC9A.8060204@redhat.com> Message-ID: <5D6617F9-EE32-4565-8A6A-4E093F82322C@redhat.com> On Apr 4, 2012, at 3:35 PM, Matthew Harmsen wrote: > Adam, > > Was there a typo in your subject line --- Did you actually mean Fedora 16 instead of Fedora 18 (rawhide)? > > If you did mean Fedora 16, Endi and Adi made some recent changes which remove the need for the "candlepin-deps", but require the following: > On 3/27/2012 8:57 PM, Endi Sukma Dewata wrote: >> On 3/27/2012 5:20 PM, Endi Sukma Dewata wrote: >>> Previously the code depends on the old RESTEasy libraries provided by >>> Candlepin package. Now the Eclipse classpath, build/setup scripts, and >>> the spec file have been updated to use the libraries provided by the >>> new RESTEasy package. >>> >>> Ticket #29 >>> >>> Note: The new RESTEasy package is only available in F17. >> >> Rebased. > > I revised the patch such that in older Fedora it will not require the new RESTEasy package. Instead, you can download RESTEasy 2.3.2 (must be this version) zip file, install it somewhere, and create the following symlinks to mimic F17: > > /usr/share/java/glassfish-jaxb/jaxb-impl.jar > /usr/share/java/resteasy/jaxrs-api.jar > /usr/share/java/resteasy/resteasy-jaxb-provider.jar > /usr/share/java/resteasy/resteasy-jaxrs.jar > /usr/share/java/resteasy/resteasy-jettison-provider.jar > /usr/share/java/scannotation.jar > > This way we can continue the development on F16 without having to officially support it. > I believe that you can download this from the following link (wait for the download link to appear): > http://sourceforge.net/projects/resteasy/files/Resteasy%20JAX-RS/2.3.2.Final/resteasy-jaxrs-2.3.2.Final-all.zip/download?use_mirror=iweb > I believe that Kevin may be able to point you to an existing Repo for the other components? > > Hope this helps, > -- Matt Matt, The only problem with this is that the nightly builds are using mock (as are the builds done in Westford, AFAIK). Mock builds just pull from a mock repo and don't allow you to do this type of manipulation--at least not in any type of automated fashion. If someone can provide me with an rpm that includes these hacks, I can put them in a extras repo and pull from that. This hack would allow me to continue with the daily F16 builds otherwise I think we should discontinue them since Dogtag 10 will never be released on F16. --Kevin > > On 04/02/12 19:13, Adam Young wrote: >> >> Please make a single directory with the set of RPMs needed for BUilding Dogtag. We've been doing that for IPA for a while, and it is necessary for continuing development. I am not at a point where I can install F17 for my primary development machine, but I still try to keep up with PKI development from time to time. You guys have done a great job in geting the RPMS into Rawhide, but they should still install on F16 provided all of the dependencies are provided. I am willing to generate the Repo the same way that John Dennis does for IPA, but I need the RPMS themselves. >> >> >> _______________________________________________ >> Pki-devel mailing list >> Pki-devel at redhat.com >> https://www.redhat.com/mailman/listinfo/pki-devel > -------------- next part -------------- An HTML attachment was scrubbed... URL: From edewata at redhat.com Thu Apr 5 19:13:58 2012 From: edewata at redhat.com (Endi Sukma Dewata) Date: Thu, 05 Apr 2012 14:13:58 -0500 Subject: [Pki-devel] [PATCH] 49 Undeprecated IRequest.asIAttrSet(). Message-ID: <4F7DEEF6.9050400@redhat.com> The IRequest.asIAttrSet() is necessary and there is no replacement so it has been undeprecated. Ticket #3 -- Endi S. Dewata -------------- next part -------------- A non-text attachment was scrubbed... Name: pki-edewata-0049-Undeprecated-IRequest.asIAttrSet.patch Type: text/x-patch Size: 1412 bytes Desc: not available URL: From edewata at redhat.com Thu Apr 5 19:14:07 2012 From: edewata at redhat.com (Endi Sukma Dewata) Date: Thu, 05 Apr 2012 14:14:07 -0500 Subject: [Pki-devel] [PATCH] 50 Ignored VelocityServlet deprecation warnings. Message-ID: <4F7DEEFF.30908@redhat.com> The VelocityServlet is deprecated but the replacement is not available in Fedora, so the warnings are ignored for now. Ticket #133 -- Endi S. Dewata -------------- next part -------------- A non-text attachment was scrubbed... Name: pki-edewata-0050-Ignored-VelocityServlet-deprecation-warnings.patch Type: text/x-patch Size: 2562 bytes Desc: not available URL: From edewata at redhat.com Thu Apr 5 19:14:18 2012 From: edewata at redhat.com (Endi Sukma Dewata) Date: Thu, 05 Apr 2012 14:14:18 -0500 Subject: [Pki-devel] [PATCH] 51 Removed deprecated Signer. Message-ID: <4F7DEF0A.90000@redhat.com> The X500Signer has been modified to become an independent class. It's no longer a subclass of the deprecated Signer class. Ticket #3 -- Endi S. Dewata -------------- next part -------------- A non-text attachment was scrubbed... Name: pki-edewata-0051-Removed-deprecated-Signer.patch Type: text/x-patch Size: 2223 bytes Desc: not available URL: From mharmsen at redhat.com Thu Apr 5 21:06:10 2012 From: mharmsen at redhat.com (Matthew Harmsen) Date: Thu, 05 Apr 2012 14:06:10 -0700 Subject: [Pki-devel] Repo with the F18 dependencies needed to build Dogtag In-Reply-To: <5D6617F9-EE32-4565-8A6A-4E093F82322C@redhat.com> References: <4F7A5CE6.3020708@redhat.com> <4F7CCC9A.8060204@redhat.com> <5D6617F9-EE32-4565-8A6A-4E093F82322C@redhat.com> Message-ID: <4F7E0942.5070608@redhat.com> On 04/04/12 19:10, Kevin Wright wrote: > > On Apr 4, 2012, at 3:35 PM, Matthew Harmsen wrote: > >> Adam, >> >> Was there a typo in your subject line --- Did you actually mean >> /*Fedora 16*/ instead of /*Fedora 18 (rawhide)*/? >> >> If you did mean Fedora 16, Endi and Adi made some recent changes >> which remove the need for the "candlepin-deps", but require the >> following: >> >> On 3/27/2012 8:57 PM, Endi Sukma Dewata wrote: >>> On 3/27/2012 5:20 PM, Endi Sukma Dewata wrote: >>>> Previously the code depends on the old RESTEasy libraries >>>> provided by >>>> Candlepin package. Now the Eclipse classpath, build/setup >>>> scripts, and >>>> the spec file have been updated to use the libraries provided >>>> by the >>>> new RESTEasy package. >>>> >>>> Ticket #29 >>>> >>>> Note: The new RESTEasy package is only available in F17. >>> >>> Rebased. >> >> I revised the patch such that in older Fedora it will not require >> the new RESTEasy package. Instead, you can download RESTEasy >> 2.3.2 (must be this version) zip file, install it somewhere, and >> create the following symlinks to mimic F17: >> >> /usr/share/java/glassfish-jaxb/jaxb-impl.jar >> /usr/share/java/resteasy/jaxrs-api.jar >> /usr/share/java/resteasy/resteasy-jaxb-provider.jar >> /usr/share/java/resteasy/resteasy-jaxrs.jar >> /usr/share/java/resteasy/resteasy-jettison-provider.jar >> /usr/share/java/scannotation.jar >> >> This way we can continue the development on F16 without having to >> officially support it. >> >> I believe that you can download this from the following link (wait >> for the download link to appear): >> >> * http://sourceforge.net/projects/resteasy/files/Resteasy%20JAX-RS/2.3.2.Final/resteasy-jaxrs-2.3.2.Final-all.zip/download?use_mirror=iweb >> >> I believe that Kevin may be able to point you to an existing Repo for >> the other components? >> >> Hope this helps, >> -- Matt > > Matt, > > The only problem with this is that the nightly builds are using mock > (as are the builds done in Westford, AFAIK). Mock builds just pull > from a mock repo and don't allow you to do this type of > manipulation--at least not in any type of automated fashion. If > someone can provide me with an rpm that includes these hacks, I can > put them in a extras repo and pull from that. This hack would allow me > to continue with the daily F16 builds otherwise I think we should > discontinue them since Dogtag 10 will never be released on F16. > > --Kevin > Kevin, Ade spoke with Adam regarding this, and I now believe that this will no longer be necessary, as Adam can simply manually apply Endi's changes to his Fedora 16 development machine (and build from source). Thanks, -- Matt >> >> On 04/02/12 19:13, Adam Young wrote: >>> Please make a single directory with the set of RPMs needed for >>> BUilding Dogtag. We've been doing that for IPA for a while, and it >>> is necessary for continuing development. I am not at a point where >>> I can install F17 for my primary development machine, but I still >>> try to keep up with PKI development from time to time. You guys >>> have done a great job in geting the RPMS into Rawhide, but they >>> should still install on F16 provided all of the dependencies are >>> provided. I am willing to generate the Repo the same way that John >>> Dennis does for IPA, but I need the RPMS themselves. >>> >>> >>> _______________________________________________ >>> Pki-devel mailing list >>> Pki-devel at redhat.com >>> https://www.redhat.com/mailman/listinfo/pki-devel >> > -------------- next part -------------- An HTML attachment was scrubbed... URL: From edewata at redhat.com Thu Apr 5 22:18:26 2012 From: edewata at redhat.com (Endi Sukma Dewata) Date: Thu, 05 Apr 2012 17:18:26 -0500 Subject: [Pki-devel] [PATCH] 52 Removed whitespaces from Java code. Message-ID: <4F7E1A32.8080209@redhat.com> Whitespaces in Java code have been removed with the following command: find . -not -path .git -name *.java -exec sed -i 's/[[:blank:]]\+$//' {} \; Ticket #134 Due to the size, the patch is posted here: http://fedorapeople.org/gitweb?p=edewata/public_git/pki.git;a=commitdiff;h=4497cb9a0253353511b7e4a25708731d6711d16f -- Endi S. Dewata From edewata at redhat.com Thu Apr 5 22:18:32 2012 From: edewata at redhat.com (Endi Sukma Dewata) Date: Thu, 05 Apr 2012 17:18:32 -0500 Subject: [Pki-devel] [PATCH] 53 Removed unnecessary type casts. Message-ID: <4F7E1A38.9060903@redhat.com> Unnecessary type casts have been removed using Eclipse Quick Fix. Ticket #134 Due to the size, the patch is posted here: http://fedorapeople.org/gitweb?p=edewata/public_git/pki.git;a=commitdiff;h=26f6c920a40c3b4e61a608cfc1d51953da2d2263 -- Endi S. Dewata From edewata at redhat.com Thu Apr 5 22:18:37 2012 From: edewata at redhat.com (Endi Sukma Dewata) Date: Thu, 05 Apr 2012 17:18:37 -0500 Subject: [Pki-devel] [PATCH] 54 Configured Eclipse to clean up on save. Message-ID: <4F7E1A3D.8010907@redhat.com> Eclipse has been configured to do the followings on save: - organize imports - remove unused imports - remove unnecessary casts - remove trailing white spaces on all lines These settings can be configured in PKI Project -> Properties -> Java Editor -> Save Actions. Ticket #134 -- Endi S. Dewata -------------- next part -------------- A non-text attachment was scrubbed... Name: pki-edewata-0054-Configured-Eclipse-to-clean-up-on-save.patch Type: text/x-patch Size: 3773 bytes Desc: not available URL: From jmagne at redhat.com Fri Apr 6 00:09:45 2012 From: jmagne at redhat.com (John Magne) Date: Thu, 05 Apr 2012 20:09:45 -0400 (EDT) Subject: [Pki-devel] [PATCH] 45 Replaced key status update thread with executor service. In-Reply-To: <4F73668D.60004@redhat.com> Message-ID: Applied patch and configured the KRA to actually run the task. Observed the the task waking up at the proper intervals in the debugger. Looks good. ACK ----- Original Message ----- From: "Endi Sukma Dewata" To: pki-devel at redhat.com Sent: Wednesday, March 28, 2012 12:29:17 PM Subject: [Pki-devel] [PATCH] 45 Replaced key status update thread with executor service. The Thread.stop() is deprecated, so the key status update thread is now implemented with executor service to allow stopping the task gracefully. Ticket #3 -- Endi S. Dewata _______________________________________________ Pki-devel mailing list Pki-devel at redhat.com https://www.redhat.com/mailman/listinfo/pki-devel From cfu at redhat.com Fri Apr 6 00:57:22 2012 From: cfu at redhat.com (Christina Fu) Date: Thu, 05 Apr 2012 17:57:22 -0700 Subject: [Pki-devel] pushed - ECC key archival / recovery feature implementation - Bug 745278 - [RFE] ECC encryption keys cannot be archived Message-ID: <4F7E3F72.8020304@redhat.com> pushed to master. From alee at redhat.com Mon Apr 9 12:36:02 2012 From: alee at redhat.com (Ade Lee) Date: Mon, 09 Apr 2012 08:36:02 -0400 Subject: [Pki-devel] [PATCH] 49 Undeprecated IRequest.asIAttrSet(). In-Reply-To: <4F7DEEF6.9050400@redhat.com> References: <4F7DEEF6.9050400@redhat.com> Message-ID: <1333974962.31937.0.camel@alee-workpc.redhat.com> ack On Thu, 2012-04-05 at 14:13 -0500, Endi Sukma Dewata wrote: > The IRequest.asIAttrSet() is necessary and there is no replacement > so it has been undeprecated. > > Ticket #3 > > _______________________________________________ > Pki-devel mailing list > Pki-devel at redhat.com > https://www.redhat.com/mailman/listinfo/pki-devel From alee at redhat.com Mon Apr 9 12:37:16 2012 From: alee at redhat.com (Ade Lee) Date: Mon, 09 Apr 2012 08:37:16 -0400 Subject: [Pki-devel] [PATCH] 50 Ignored VelocityServlet deprecation warnings. In-Reply-To: <4F7DEEFF.30908@redhat.com> References: <4F7DEEFF.30908@redhat.com> Message-ID: <1333975036.31937.1.camel@alee-workpc.redhat.com> ACK On Thu, 2012-04-05 at 14:14 -0500, Endi Sukma Dewata wrote: > The VelocityServlet is deprecated but the replacement is not available > in Fedora, so the warnings are ignored for now. > > Ticket #133 > > _______________________________________________ > Pki-devel mailing list > Pki-devel at redhat.com > https://www.redhat.com/mailman/listinfo/pki-devel From alee at redhat.com Mon Apr 9 12:38:32 2012 From: alee at redhat.com (Ade Lee) Date: Mon, 09 Apr 2012 08:38:32 -0400 Subject: [Pki-devel] [PATCH] 51 Removed deprecated Signer. In-Reply-To: <4F7DEF0A.90000@redhat.com> References: <4F7DEF0A.90000@redhat.com> Message-ID: <1333975112.31937.2.camel@alee-workpc.redhat.com> ACK On Thu, 2012-04-05 at 14:14 -0500, Endi Sukma Dewata wrote: > The X500Signer has been modified to become an independent class. > It's no longer a subclass of the deprecated Signer class. > > Ticket #3 > > _______________________________________________ > Pki-devel mailing list > Pki-devel at redhat.com > https://www.redhat.com/mailman/listinfo/pki-devel From alee at redhat.com Mon Apr 9 13:22:23 2012 From: alee at redhat.com (Ade Lee) Date: Mon, 09 Apr 2012 09:22:23 -0400 Subject: [Pki-devel] [PATCH] 46 Replaced deprecated LDAPVirtualListResponse.parseResponse(). In-Reply-To: <4F748BE4.9020207@redhat.com> References: <4F748BE4.9020207@redhat.com> Message-ID: <1333977743.31937.6.camel@alee-workpc.redhat.com> ACK On Thu, 2012-03-29 at 11:20 -0500, Endi Sukma Dewata wrote: > The VLV control can be obtained directly from the list of response > controls by checking its type. > > Ticket #3 > > _______________________________________________ > Pki-devel mailing list > Pki-devel at redhat.com > https://www.redhat.com/mailman/listinfo/pki-devel From alee at redhat.com Mon Apr 9 13:27:21 2012 From: alee at redhat.com (Ade Lee) Date: Mon, 09 Apr 2012 09:27:21 -0400 Subject: [Pki-devel] [PATCH] 52 Removed whitespaces from Java code. In-Reply-To: <4F7E1A32.8080209@redhat.com> References: <4F7E1A32.8080209@redhat.com> Message-ID: <1333978041.31937.7.camel@alee-workpc.redhat.com> ack On Thu, 2012-04-05 at 17:18 -0500, Endi Sukma Dewata wrote: > Whitespaces in Java code have been removed with the following command: > > find . -not -path .git -name *.java -exec sed -i 's/[[:blank:]]\+$//' > {} \; > > Ticket #134 > > Due to the size, the patch is posted here: > http://fedorapeople.org/gitweb?p=edewata/public_git/pki.git;a=commitdiff;h=4497cb9a0253353511b7e4a25708731d6711d16f > From alee at redhat.com Mon Apr 9 13:27:42 2012 From: alee at redhat.com (Ade Lee) Date: Mon, 09 Apr 2012 09:27:42 -0400 Subject: [Pki-devel] [PATCH] 53 Removed unnecessary type casts. In-Reply-To: <4F7E1A38.9060903@redhat.com> References: <4F7E1A38.9060903@redhat.com> Message-ID: <1333978062.31937.8.camel@alee-workpc.redhat.com> ack On Thu, 2012-04-05 at 17:18 -0500, Endi Sukma Dewata wrote: > Unnecessary type casts have been removed using Eclipse Quick Fix. > > Ticket #134 > > Due to the size, the patch is posted here: > http://fedorapeople.org/gitweb?p=edewata/public_git/pki.git;a=commitdiff;h=26f6c920a40c3b4e61a608cfc1d51953da2d2263 > From edewata at redhat.com Mon Apr 9 15:23:58 2012 From: edewata at redhat.com (Endi Sukma Dewata) Date: Mon, 09 Apr 2012 10:23:58 -0500 Subject: [Pki-devel] [PATCH] 46 Replaced deprecated LDAPVirtualListResponse.parseResponse(). In-Reply-To: <1333977743.31937.6.camel@alee-workpc.redhat.com> References: <4F748BE4.9020207@redhat.com> <1333977743.31937.6.camel@alee-workpc.redhat.com> Message-ID: <4F82FF0E.9040600@redhat.com> On 4/9/2012 8:22 AM, Ade Lee wrote: > ACK Pushed to master. -- Endi S. Dewata From edewata at redhat.com Mon Apr 9 15:24:11 2012 From: edewata at redhat.com (Endi Sukma Dewata) Date: Mon, 09 Apr 2012 10:24:11 -0500 Subject: [Pki-devel] [PATCH] 49 Undeprecated IRequest.asIAttrSet(). In-Reply-To: <1333974962.31937.0.camel@alee-workpc.redhat.com> References: <4F7DEEF6.9050400@redhat.com> <1333974962.31937.0.camel@alee-workpc.redhat.com> Message-ID: <4F82FF1B.8070002@redhat.com> On 4/9/2012 7:36 AM, Ade Lee wrote: > ack Pushed to master. -- Endi S. Dewata From edewata at redhat.com Mon Apr 9 15:24:22 2012 From: edewata at redhat.com (Endi Sukma Dewata) Date: Mon, 09 Apr 2012 10:24:22 -0500 Subject: [Pki-devel] [PATCH] 50 Ignored VelocityServlet deprecation warnings. In-Reply-To: <1333975036.31937.1.camel@alee-workpc.redhat.com> References: <4F7DEEFF.30908@redhat.com> <1333975036.31937.1.camel@alee-workpc.redhat.com> Message-ID: <4F82FF26.5000004@redhat.com> On 4/9/2012 7:37 AM, Ade Lee wrote: > ACK Pushed to master. -- Endi S. Dewata From edewata at redhat.com Mon Apr 9 15:24:39 2012 From: edewata at redhat.com (Endi Sukma Dewata) Date: Mon, 09 Apr 2012 10:24:39 -0500 Subject: [Pki-devel] [PATCH] 51 Removed deprecated Signer. In-Reply-To: <1333975112.31937.2.camel@alee-workpc.redhat.com> References: <4F7DEF0A.90000@redhat.com> <1333975112.31937.2.camel@alee-workpc.redhat.com> Message-ID: <4F82FF37.1080105@redhat.com> On 4/9/2012 7:38 AM, Ade Lee wrote: > ACK Pushed to master. -- Endi S. Dewata From edewata at redhat.com Mon Apr 9 15:24:50 2012 From: edewata at redhat.com (Endi Sukma Dewata) Date: Mon, 09 Apr 2012 10:24:50 -0500 Subject: [Pki-devel] [PATCH] 52 Removed whitespaces from Java code. In-Reply-To: <1333978041.31937.7.camel@alee-workpc.redhat.com> References: <4F7E1A32.8080209@redhat.com> <1333978041.31937.7.camel@alee-workpc.redhat.com> Message-ID: <4F82FF42.3000904@redhat.com> On 4/9/2012 8:27 AM, Ade Lee wrote: > ack Pushed to master. -- Endi S. Dewata From edewata at redhat.com Mon Apr 9 15:25:14 2012 From: edewata at redhat.com (Endi Sukma Dewata) Date: Mon, 09 Apr 2012 10:25:14 -0500 Subject: [Pki-devel] [PATCH] 53 Removed unnecessary type casts. In-Reply-To: <1333978062.31937.8.camel@alee-workpc.redhat.com> References: <4F7E1A38.9060903@redhat.com> <1333978062.31937.8.camel@alee-workpc.redhat.com> Message-ID: <4F82FF5A.10400@redhat.com> On 4/9/2012 8:27 AM, Ade Lee wrote: > ack Pushed to master. Thanks! -- Endi S. Dewata From edewata at redhat.com Mon Apr 9 19:14:54 2012 From: edewata at redhat.com (Endi Sukma Dewata) Date: Mon, 09 Apr 2012 14:14:54 -0500 Subject: [Pki-devel] [PATCH] 55 Removed unused private fields. Message-ID: <4F83352E.1040809@redhat.com> Most of unused private fields have been removed because they generate warnings in Eclipse. Some are kept because it might be useful later. Ticket #139 -- Endi S. Dewata -------------- next part -------------- A non-text attachment was scrubbed... Name: pki-edewata-0055-Removed-unused-private-fields.patch Type: text/x-patch Size: 213708 bytes Desc: not available URL: From ayoung at redhat.com Tue Apr 10 01:46:06 2012 From: ayoung at redhat.com (Adam Young) Date: Mon, 09 Apr 2012 21:46:06 -0400 Subject: [Pki-devel] Failing unit test? Message-ID: <4F8390DE.1020908@redhat.com> I ran the unit tests last night on my F16 box and got a failure: package com.netscape.security.extensions.GenericASN1ExtensionTest.testConstructorDER java.lang.NullPointerException at netscape.security.util.ObjectIdentifier.encode(ObjectIdentifier.java:221) at netscape.security.util.DerOutputStream.putOID(DerOutputStream.java:371) at netscape.security.x509.Extension.encode(Extension.java:134) at netscape.security.extensions.GenericASN1Extension.encode(GenericASN1Extension.java:306) at com.netscape.security.extensions.GenericASN1ExtensionTest.testConstructorDER(GenericASN1ExtensionTest.java:69) at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method) at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:57) at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43) at java.lang.reflect.Method.invoke(Method.java:601) at org.junit.runners.model.FrameworkMethod$1.runReflectiveCall(FrameworkMethod.java:44) at org.junit.internal.runners.model.ReflectiveCallable.run(ReflectiveCallable.java:15) at org.junit.runners.model.FrameworkMethod.invokeExplosively(FrameworkMethod.java:41) at org.junit.internal.runners.statements.InvokeMethod.evaluate(InvokeMethod.java:20) at org.junit.runners.BlockJUnit4ClassRunner.runNotIgnored(BlockJUnit4ClassRunner.java:79) at org.junit.runners.BlockJUnit4ClassRunner.runChild(BlockJUnit4ClassRunner.java:71) at org.junit.runners.BlockJUnit4ClassRunner.runChild(BlockJUnit4ClassRunner.java:49) at org.junit.runners.ParentRunner$3.run(ParentRunner.java:193) at org.junit.runners.ParentRunner$1.schedule(ParentRunner.java:52) at org.junit.runners.ParentRunner.runChildren(ParentRunner.java:191) at org.junit.runners.ParentRunner.access$000(ParentRunner.java:42) at org.junit.runners.ParentRunner$2.evaluate(ParentRunner.java:184) at org.junit.runners.ParentRunner.run(ParentRunner.java:236) at org.eclipse.jdt.internal.junit4.runner.JUnit4TestReference.run(JUnit4TestReference.java:50) at org.eclipse.jdt.internal.junit.runner.TestExecution.run(TestExecution.java:38) at org.eclipse.jdt.internal.junit.runner.RemoteTestRunner.runTests(RemoteTestRunner.java:467) at org.eclipse.jdt.internal.junit.runner.RemoteTestRunner.runTests(RemoteTestRunner.java:683) at org.eclipse.jdt.internal.junit.runner.RemoteTestRunner.run(RemoteTestRunner.java:390) at org.eclipse.jdt.internal.junit.runner.RemoteTestRunner.main(RemoteTestRunner.java:197) From edewata at redhat.com Wed Apr 11 16:07:19 2012 From: edewata at redhat.com (Endi Sukma Dewata) Date: Wed, 11 Apr 2012 11:07:19 -0500 Subject: [Pki-devel] [PATCH] 56 Removed deprecated resources. Message-ID: <4F85AC37.10807@redhat.com> Some exceptions used deprecated resource class names as the bundle name, they have been replaced with string constants. The deprecated resource classes are no longer used, so they have been removed. Ticket #3 -- Endi S. Dewata -------------- next part -------------- A non-text attachment was scrubbed... Name: pki-edewata-0056-Removed-deprecated-resources.patch Type: text/x-patch Size: 16677 bytes Desc: not available URL: From mharmsen at redhat.com Thu Apr 12 02:45:44 2012 From: mharmsen at redhat.com (Matthew Harmsen) Date: Wed, 11 Apr 2012 19:45:44 -0700 Subject: [Pki-devel] [PATCH] PKI Deployment Framework Message-ID: <4F8641D8.2040908@redhat.com> Please review and provide an ACK for the attached patch. This patch attempts to continue implementation of the PKI Deployment Framework based upon the revised filesystem layout documented here: * http://pki.fedoraproject.org/wiki/PKI_Instance_Deployment#CA_.2F_KRA_.2F_OCSP_.2F_RA_.2F_TKS_.2F_TPS The following patch adds/corrects functionality of the existing PKI Deployment Framework including (but not limited to): * Created first three 'scriptlets': o Dogtag 10: Python 'instance_layout.py' Installation Scriptlet (https://fedorahosted.org/pki/ticket/75) o Dogtag 10: Python 'webserver_layout.py' Installation Scriptlet (https://fedorahosted.org/pki/ticket/140) o Dogtag 10: Python 'subsystem_layout.py' Installation Scriptlet (https://fedorahosted.org/pki/ticket/141) * Created numerous PKI deployment helper utilities. * Augmented logging to provide indentation. * Generated logic for installation 'manifest'. * Tested logic using '--dry_run' option and '-p' prefix options. After being installed, this code can be tested by running the following command-line examples (as 'root' or 'sudo'): * mkdir /tmp/pki * sudo pkispawn -s CA -p /tmp/pki -v --dry_run * sudo pkispawn -s CA -p /tmp/pki -v * sudo pkispawn -s CA -p /tmp/pki -u -v --dry_run * sudo pkispawn -s CA -p /tmp/pki -u -v * sudo pkidestroy -s CA -p /tmp/pki -v --dry_run * sudo pkidestroy -s CA -p /tmp/pki -v This code ONLY affects the un-released 'pki-deploy' package, so check-in of these changes should not harm the existing source in any way. NOTE: After receiving an ACK for these changes, I will update my horribly out-of-date working repo located at: * http://fedorapeople.org/gitweb/mharmsen/public_git/pki.git Thanks in advance, -- Matt -------------- next part -------------- An HTML attachment was scrubbed... URL: -------------- next part -------------- A non-text attachment was scrubbed... Name: 0001-Created-first-three-scriptlets.patch Type: text/x-patch Size: 100152 bytes Desc: not available URL: From alee at redhat.com Thu Apr 12 13:51:19 2012 From: alee at redhat.com (Ade Lee) Date: Thu, 12 Apr 2012 09:51:19 -0400 Subject: [Pki-devel] [PATCH] 55 Removed unused private fields. In-Reply-To: <4F83352E.1040809@redhat.com> References: <4F83352E.1040809@redhat.com> Message-ID: <1334238679.21208.0.camel@aleeredhat.laptop> ACK On Mon, 2012-04-09 at 14:14 -0500, Endi Sukma Dewata wrote: > Most of unused private fields have been removed because they generate > warnings in Eclipse. Some are kept because it might be useful later. > > Ticket #139 > > _______________________________________________ > Pki-devel mailing list > Pki-devel at redhat.com > https://www.redhat.com/mailman/listinfo/pki-devel From alee at redhat.com Thu Apr 12 14:01:56 2012 From: alee at redhat.com (Ade Lee) Date: Thu, 12 Apr 2012 10:01:56 -0400 Subject: [Pki-devel] [PATCH] 56 Removed deprecated resources. In-Reply-To: <4F85AC37.10807@redhat.com> References: <4F85AC37.10807@redhat.com> Message-ID: <1334239317.19866.0.camel@aleeredhat.laptop> ack On Wed, 2012-04-11 at 11:07 -0500, Endi Sukma Dewata wrote: > Some exceptions used deprecated resource class names as the bundle name, > they have been replaced with string constants. The deprecated resource > classes are no longer used, so they have been removed. > > Ticket #3 > > _______________________________________________ > Pki-devel mailing list > Pki-devel at redhat.com > https://www.redhat.com/mailman/listinfo/pki-devel From edewata at redhat.com Thu Apr 12 16:40:00 2012 From: edewata at redhat.com (Endi Sukma Dewata) Date: Thu, 12 Apr 2012 11:40:00 -0500 Subject: [Pki-devel] [PATCH] 55 Removed unused private fields. In-Reply-To: <1334238679.21208.0.camel@aleeredhat.laptop> References: <4F83352E.1040809@redhat.com> <1334238679.21208.0.camel@aleeredhat.laptop> Message-ID: <4F870560.6050406@redhat.com> On 4/12/2012 8:51 AM, Ade Lee wrote: > ACK Pushed to master. -- Endi S. Dewata From edewata at redhat.com Thu Apr 12 16:40:16 2012 From: edewata at redhat.com (Endi Sukma Dewata) Date: Thu, 12 Apr 2012 11:40:16 -0500 Subject: [Pki-devel] [PATCH] 56 Removed deprecated resources. In-Reply-To: <1334239317.19866.0.camel@aleeredhat.laptop> References: <4F85AC37.10807@redhat.com> <1334239317.19866.0.camel@aleeredhat.laptop> Message-ID: <4F870570.4070202@redhat.com> On 4/12/2012 9:01 AM, Ade Lee wrote: > ack Pushed to master. Thanks. -- Endi S. Dewata From alee at redhat.com Mon Apr 16 16:45:06 2012 From: alee at redhat.com (Ade Lee) Date: Mon, 16 Apr 2012 12:45:06 -0400 Subject: [Pki-devel] [PATCH] 54 Configured Eclipse to clean up on save. In-Reply-To: <4F7E1A3D.8010907@redhat.com> References: <4F7E1A3D.8010907@redhat.com> Message-ID: <1334594707.19866.10.camel@aleeredhat.laptop> ACK On Thu, 2012-04-05 at 17:18 -0500, Endi Sukma Dewata wrote: > Eclipse has been configured to do the followings on save: > - organize imports > - remove unused imports > - remove unnecessary casts > - remove trailing white spaces on all lines > > These settings can be configured in PKI Project -> Properties -> > Java Editor -> Save Actions. > > Ticket #134 > > _______________________________________________ > Pki-devel mailing list > Pki-devel at redhat.com > https://www.redhat.com/mailman/listinfo/pki-devel From edewata at redhat.com Mon Apr 16 18:49:17 2012 From: edewata at redhat.com (Endi Sukma Dewata) Date: Mon, 16 Apr 2012 13:49:17 -0500 Subject: [Pki-devel] [PATCH] 54 Configured Eclipse to clean up on save. In-Reply-To: <1334594707.19866.10.camel@aleeredhat.laptop> References: <4F7E1A3D.8010907@redhat.com> <1334594707.19866.10.camel@aleeredhat.laptop> Message-ID: <4F8C69AD.9080304@redhat.com> On 4/16/2012 11:45 AM, Ade Lee wrote: > ACK Pushed to master. Thanks. -- Endi S. Dewata From edewata at redhat.com Thu Apr 19 17:50:11 2012 From: edewata at redhat.com (Endi Sukma Dewata) Date: Thu, 19 Apr 2012 12:50:11 -0500 Subject: [Pki-devel] [PATCH] 45 Replaced key status update thread with executor service. In-Reply-To: References: Message-ID: <4F905053.8000706@redhat.com> On 4/5/2012 7:09 PM, John Magne wrote: > > Applied patch and configured the KRA to actually run the task. > > Observed the the task waking up at the proper intervals in the debugger. > > Looks good. > > ACK Sorry I missed this. Pushed to master. Thanks! -- Endi S. Dewata From mharmsen at redhat.com Mon Apr 23 20:53:42 2012 From: mharmsen at redhat.com (Matthew Harmsen) Date: Mon, 23 Apr 2012 13:53:42 -0700 Subject: [Pki-devel] [PATCH] PKI Deployment Framework Message-ID: <4F95C156.1020708@redhat.com> Please review and provide an ACK for the attached patch. This patch attempts to continue implementation of the PKI Deployment Framework based upon the revised filesystem layout documented here: * http://pki.fedoraproject.org/wiki/PKI_Instance_Deployment#CA_.2F_KRA_.2F_OCSP_.2F_RA_.2F_TKS_.2F_TPS The following patch adds/corrects functionality of the existing PKI Deployment Framework including (but not limited to): * Completed the following six 'scriptlets': Dogtag 10: Python 'initialization.py' Installation Scriptlet (https://fedorahosted.org/pki/ticket/147) Dogtag 10: Python 'instance_layout.py' Installation Scriptlet (https://fedorahosted.org/pki/ticket/75) Dogtag 10: Python 'webserver_layout.py' Installation Scriptlet (https://fedorahosted.org/pki/ticket/140) Dogtag 10: Python 'subsystem_layout.py' Installation Scriptlet (https://fedorahosted.org/pki/ticket/141) Dogtag 10: Python 'war_explosion.py' Installation Scriptlet (https://fedorahosted.org/pki/ticket/76) Dogtag 10: Python 'finalization.py' Installation Scriptlet (https://fedorahosted.org/pki/ticket/148) * Created numerous PKI deployment helper utilities. * Augmented logging to provide indentation. * Generated logic for installation 'manifest'. * Tested logic using '--dry_run' option and '-p' prefix options. * Per initial review, removed numerous "constants" and consolidated logic into "master" dictionary. * Corrected the following ticket: Dogtag 10: Fix 'build_dogtag_pki' script to account for 'pki-deploy' RPM (https://fedorahosted.org/pki/ticket/138) Resolves Bugzilla Bug #810047 - build_dogtag_pki fails with requirements for pki-deploy (https://bugzilla.redhat.com/show_bug.cgi?id=810047) * Created the following three 'scriptlets' as 'NOT YET IMPLEMENTED' place-holders: Dogtag 10: Python 'security_databases.py' Installation Scriptlet (https://fedorahosted.org/pki/ticket/136) Dogtag 10: Python 'slot_assignment.py' Installation Scriptlet (https://fedorahosted.org/pki/ticket/146) Dogtag 10: Python 'configuration.py' Configuration Scriptlet (https://fedorahosted.org/pki/ticket/137) After being installed, this code can be tested by running the following command-line examples (as 'root' or 'sudo'): * mkdir /tmp/pki * sudo pkispawn -s CA -p /tmp/pki -v --dry_run * sudo pkispawn -s CA -p /tmp/pki -v * sudo pkispawn -s CA -p /tmp/pki -u -v --dry_run * sudo pkispawn -s CA -p /tmp/pki -u -v * sudo pkidestroy -s CA -p /tmp/pki -v --dry_run * sudo pkidestroy -s CA -p /tmp/pki -v This code ONLY affects the un-released 'pki-deploy' package, so check-in of these changes should not harm the existing source in any way. NOTE: After receiving an ACK for these changes, I will update my horribly out-of-date working repo located at: * http://fedorapeople.org/gitweb/mharmsen/public_git/pki.git Thanks in advance, -- Matt -------------- next part -------------- An HTML attachment was scrubbed... URL: -------------- next part -------------- A non-text attachment was scrubbed... Name: 0001-Completed-the-following-six-scriptlets.patch Type: text/x-patch Size: 175422 bytes Desc: not available URL: From jmagne at redhat.com Wed Apr 25 02:11:42 2012 From: jmagne at redhat.com (John Magne) Date: Tue, 24 Apr 2012 22:11:42 -0400 (EDT) Subject: [Pki-devel] [pki-devel][Patch] 0001-Fix-DRMRestClient-SSL-connection-implementation.patch In-Reply-To: <65682f36-988c-4b71-9f11-32995f625f54@zmail15.collab.prod.int.phx2.redhat.com> Message-ID: <962711f4-1e5a-4d65-acc4-968a0f7614a8@zmail15.collab.prod.int.phx2.redhat.com> Simple fix to get SSL working again in the DRMRestClient program. Ticket #163 -------------- next part -------------- A non-text attachment was scrubbed... Name: 0001-Fix-DRMRestClient-SSL-connection-implementation.patch Type: text/x-patch Size: 8996 bytes Desc: not available URL: From alee at redhat.com Wed Apr 25 15:43:55 2012 From: alee at redhat.com (Ade Lee) Date: Wed, 25 Apr 2012 11:43:55 -0400 Subject: [Pki-devel] [pki-devel][Patch] 0001-Fix-DRMRestClient-SSL-connection-implementation.patch In-Reply-To: <962711f4-1e5a-4d65-acc4-968a0f7614a8@zmail15.collab.prod.int.phx2.redhat.com> References: <962711f4-1e5a-4d65-acc4-968a0f7614a8@zmail15.collab.prod.int.phx2.redhat.com> Message-ID: <1335368636.1178.93.camel@aleeredhat.laptop> ACK On Tue, 2012-04-24 at 22:11 -0400, John Magne wrote: > Simple fix to get SSL working again in the DRMRestClient program. > > Ticket #163 > _______________________________________________ Pki-devel mailing list Pki-devel at redhat.com https://www.redhat.com/mailman/listinfo/pki-devel From jmagne at redhat.com Thu Apr 26 01:48:16 2012 From: jmagne at redhat.com (John Magne) Date: Wed, 25 Apr 2012 21:48:16 -0400 (EDT) Subject: [Pki-devel] [pki-devel][Patch] 0001-Fix-DRMRestClient-SSL-connection-implementation.patch In-Reply-To: <1335368636.1178.93.camel@aleeredhat.laptop> Message-ID: Thanks: Pushed to Master. ----- Original Message ----- From: "Ade Lee" To: "John Magne" Cc: pki-devel at redhat.com Sent: Wednesday, April 25, 2012 8:43:55 AM Subject: Re: [Pki-devel] [pki-devel][Patch] 0001-Fix-DRMRestClient-SSL-connection-implementation.patch ACK On Tue, 2012-04-24 at 22:11 -0400, John Magne wrote: > Simple fix to get SSL working again in the DRMRestClient program. > > Ticket #163 > _______________________________________________ Pki-devel mailing list Pki-devel at redhat.com https://www.redhat.com/mailman/listinfo/pki-devel From jmagne at redhat.com Thu Apr 26 01:50:38 2012 From: jmagne at redhat.com (John Magne) Date: Wed, 25 Apr 2012 21:50:38 -0400 (EDT) Subject: [Pki-devel] [pki-devel][Patch] 0001-JNDI-realm-enhancement-to-handle-multiple-entry-ACLs.patch In-Reply-To: <55a1ff13-9b0b-4682-905d-cae930150fb8@zmail15.collab.prod.int.phx2.redhat.com> Message-ID: <0ec61e3a-9d61-4b85-82f3-c3e1d24882db@zmail15.collab.prod.int.phx2.redhat.com> Simple patch to allow the PKIJNDI realm to handle multi-entry ACLs. Ticket #123 From alee at redhat.com Thu Apr 26 19:49:56 2012 From: alee at redhat.com (Ade Lee) Date: Thu, 26 Apr 2012 15:49:56 -0400 Subject: [Pki-devel] PATCH 0029 - RESTful servlet to configure system in a single servlet Message-ID: <1335469796.24014.3.camel@alee-workpc> Please review: New RESTful servlet that does system configuration in a single servlet. Installation code common to the panels and the installation servlet are extracted to a ConfigurationUtils file. The panel code will be cleaned up to use the code in this class in a later commit. Contains restful client and test driver code. The test driver code should be modified and placed in a junit/system test framework. Installation has been tested to work with the following installations: master CA, clone CA, KRA, OCSP, TKS, subordinate CA, CA signed by external CA (parts 1 and 2). Ticket #155 Thanks, Ade -------------- next part -------------- A non-text attachment was scrubbed... Name: pki-vakwetu-0029-RESTful-servlet-to-configure-system-in-a-single-serv.patch Type: text/x-patch Size: 321549 bytes Desc: not available URL: From jmagne at redhat.com Mon Apr 30 18:53:06 2012 From: jmagne at redhat.com (John Magne) Date: Mon, 30 Apr 2012 14:53:06 -0400 (EDT) Subject: [Pki-devel] 0001-Provide-CA-EE-Restful-interface-and-test-client.patch In-Reply-To: <18091351-ec14-4f78-ba54-0305be5f145a@zmail15.collab.prod.int.phx2.redhat.com> Message-ID: <889ec163-51d7-4f3a-b351-243f8d8546eb@zmail15.collab.prod.int.phx2.redhat.com> Provide CA EE Restful interface and test client. Tickets #144 and #145 Providing the following: 1. Simple EE restful interface for certificates, printing, listing and searching. 2. Simple EE restful interface for certificate enrollment requests. 3. Simple EE restful interface for profiles and profile properties. 4. Simple Test client to exercise the functionality. 5. Created restful client base class inherited by CARestClient and DRMRestClient. 6. Provide simple restful implementations of new interfaces added. ToDO: Need some more refactoring to base classes for some of the new classes which are similar to classes in the DRM restful area. ToDO: Actual certificate enrollment code that will be refactored from existing ProfileSubmitServlet. -------------- next part -------------- A non-text attachment was scrubbed... Name: 0001-Provide-CA-EE-Restful-interface-and-test-client.patch Type: text/x-patch Size: 172551 bytes Desc: not available URL: