<html> <head> <meta http-equiv="content-type" content="text/html; charset=ISO-8859-1"> </head> <body bgcolor="#FFFFFF" text="#000000"> <tt>Please review the attached patch for the following RHCS 8.1 bug:</tt><tt> </tt><tt> </tt><tt> </tt> <ul> <li><tt><a moz-do-not-send="true" href="https://bugzilla.redhat.com/show_bug.cgi?id=979559">Bugzilla Bug #979559</a></tt><tt> -</tt><tt> Parameter --ca_domain_url should be optional</tt></li> </ul> <tt> </tt><tt>This bug addresses the problem of attempting to configure an instance using a version of pki-silent which contains the new code with expanded parameters while using an old template from a previous version of pki-silent which did not contain these parameters. </tt><tt> </tt><tt> </tt><tt>Tested by installing and successfully configuring a CA</tt><tt>, KRA, </tt><tt>TKS, and TPS using </tt><tt>legacy templates as well as successfu</tt><tt>lly configu</tt><tt>ring a CA, KRA, TKS, and TPS using the new templates.</tt><tt> </tt><tt> </tt><tt>The attached code was revised to exclude the DRM/TKS agent hostname:port and provide more verbose help messages regarding the optional new URL parameter</tt><tt>s.</tt><tt> </tt><tt> </tt><tt>For readability sake, the new URL help messages fol</tt><tt>low:</tt><tt> </tt> <blockquote><tt># pkisilent ConfigureCA -help | grep _url</tt><tt> </tt><tt>-ca_domain_url <string> CA Subject Names Panel - '<a class="moz-txt-link-freetext" href="https://">https://</a><ca_ee_hostname>:<ca_ee_port>' URL to EE CA used to Issue Certificates for Creation of this CA Instance (optional but recommended for IP Port Separation)</tt><tt> </tt><tt> </tt><tt># pkisilent ConfigureDRM -help | grep _url</tt><tt> </tt><tt>-ca_domain_url <string> DRM Subject Names Panel - '<a class="moz-txt-link-freetext" href="https://">https://</a><ca_ee_hostname>:<ca_ee_port>' URL to EE CA used to Issue Certificates for Creation of this DRM Instance (optional but recommended for IP Port Separation)</tt><tt> </tt><tt> </tt><tt># pkisilent ConfigureOCSP -help | grep _url</tt><tt> </tt><tt>-ca_domain_url <string> OCSP Subject Names Panel - '<a class="moz-txt-link-freetext" href="https://">https://</a><ca_ee_hostname>:<ca_ee_port>' URL to EE CA used to Issue Certificates for Creation of this OCSP Instance (optional but recommended for IP Port Separation)</tt><tt> </tt><tt> </tt><tt># pkisilent ConfigureTKS -help | grep _url</tt><tt> </tt><tt>-ca_domain_url <string> TKS Subject Names Panel - '<a class="moz-txt-link-freetext" href="https://">https://</a><ca_ee_hostname>:<ca_ee_port>' URL to EE CA used to Issue Certificates for Creation of this TKS Instance (optional but recommended for IP Port Separation)</tt><tt> </tt><tt> </tt><tt># pkisilent ConfigureRA -help | grep _url</tt><tt> </tt><tt>-ca_issuance_url <string> CA Choice Panel - '<a class="moz-txt-link-freetext" href="https://">https://</a><ca_ee_hostname>:<ca_ee_port>' URL to EE CA used to Issue Certificates (optional but recommended if used with IP Port Separated CA)</tt><tt> </tt><tt>-ca_domain_url <string> RA Subject Names Panel - '<a class="moz-txt-link-freetext" href="https://">https://</a><ca_ee_hostname>:<ca_ee_port>' URL to EE CA used to Issue Certificates for Creation of this RA Instance (optional but recommended if used with IP Port Separated CA)</tt><tt> </tt><tt> </tt><tt># pkisilent ConfigureTPS -help | grep _url</tt><tt> </tt><tt>-ca_issuance_url <string> CA Choice Panel - '<a class="moz-txt-link-freetext" href="https://">https://</a><ca_ee_hostname>:<ca_ee_port>' URL to EE CA registered in this security domain used to Issue Certificates for use by an ESC (optional but recommended if used with IP Port Separated CA)</tt><tt> </tt><tt>-tks_key_management_url <string> TKS Choice Panel - '<a class="moz-txt-link-freetext" href="https://">https://</a><tks_agent_hostname>:<tks_agent_port>' URL to Agent TKS used for Key Management (optional but recommended if used with IP Port Separated TKS)</tt><tt> </tt><tt>-drm_server_side_keygen_url <string> DRM Choice Panel - '<a class="moz-txt-link-freetext" href="https://">https://</a><drm_agent_hostname>:<drm_agent_port>' URL to Agent DRM used for Server-Side Keygen (optional but recommended if used with IP Port Separated DRM)</tt><tt> </tt><tt>-ca_domain_url <string> TPS Subject Names Panel - '<a class="moz-txt-link-freetext" href="https://">https://</a><ca_ee_hostname>:<ca_ee_port>' URL to EE CA used to Issue Certificates for Creation of this TPS Instance (optional but recommended if used with IP Port Separated CA)</tt><tt> </tt><tt> </tt><tt># pkisilent ConfigureSubCA -help | grep _url</tt><tt> </tt><tt>-ca_domain_url <string> SubCA Subject Names Panel - '<a class="moz-txt-link-freetext" href="https://">https://</a><ca_ee_hostname>:<ca_ee_port>' URL to EE CA used to Issue Certificates for Creation of this SubCA Instance (optional but recommended for IP Port Separation)</tt><tt> </tt></blockquote> <tt> </tt> </body> </html>