<html> <head> <meta content="text/html; charset=utf-8" http-equiv="Content-Type"> </head> <body bgcolor="#FFFFFF" text="#000000"> <div class="moz-cite-prefix">Per discussions via email and IRC, the attached patch restores and modifies the two OCSP URL links. Additionally, this patch alters the pkidaemon man page to reflect these changes. -- Matt On 08/04/15 16:43, Matthew Harmsen wrote: </div> <blockquote cite="mid:55C14007.4000306@redhat.com" type="cite"> <meta http-equiv="content-type" content="text/html; charset=utf-8"> Please review the attached patch which addresses the following two tickets: <ul> <li><a moz-do-not-send="true" href="https://fedorahosted.org/pki/ticket/1443">PKI TRAC Ticket #1443 - pkidaemon status tomcat list URLs under PKI subsystems which are not accessible</a></li> <li><a moz-do-not-send="true" href="https://fedorahosted.org/pki/ticket/1518">PKI TRAC Ticket #1518 - OCSP ee url returned by pkidaemon status tomcat shows an error page</a></li> </ul> These were tested by installing four new instances and running 'pkidaemon status tomcat pki-tomcat'. The following four inaccessible URLs no longer showed up: <ul> <li>Unsecure URL = <a moz-do-not-send="true" class="moz-txt-link-freetext" href="http://pki.example.com:8080/kra/ee/kra">http://pki.example.com:8080/kra/ee/kra</a> (1443) </li> <li>Unsecure URL = <a moz-do-not-send="true" class="moz-txt-link-freetext" href="http://pki.example.com:8080/ocsp/ee/ocsp">http://pki.example.com:8080/ocsp/ee/ocsp</a> (1518) </li> <li>Secure EE URL = <a moz-do-not-send="true" class="moz-txt-link-freetext" href="https://pki.example.com:8443/ocsp/ee/ocsp">https://pki.example.com:8443/ocsp/ee/ocsp</a> (1518) </li> <li>Unsecure URL = <a moz-do-not-send="true" class="moz-txt-link-freetext" href="http://pki.example.com:8080/tks/ee/tks">http://pki.example.com:8080/tks/ee/tks</a> (1443)</li> </ul> Additionally, a test was run which showed that the upgrade code worked successfully: <blockquote># pkidaemon status tomcat pki-tomcat Status for pki-tomcat: pki-tomcat is running .. [CA Status Definitions] Unsecure URL = <a moz-do-not-send="true" class="moz-txt-link-freetext" href="http://pki.example.com:8080/ca/ee/ca">http://pki.example.com:8080/ca/ee/ca</a> Secure Agent URL = <a moz-do-not-send="true" class="moz-txt-link-freetext" href="https://pki.example.com:8443/ca/agent/ca">https://pki.example.com:8443/ca/agent/ca</a> Secure EE URL = <a moz-do-not-send="true" class="moz-txt-link-freetext" href="https://pki.example.com:8443/ca/ee/ca">https://pki.example.com:8443/ca/ee/ca</a> Secure Admin URL = <a moz-do-not-send="true" class="moz-txt-link-freetext" href="https://pki.example.com:8443/ca/services">https://pki.example.com:8443/ca/services</a> PKI Console Command = pkiconsole <a moz-do-not-send="true" class="moz-txt-link-freetext" href="https://pki.example.com:8443/ca">https://pki.example.com:8443/ca</a> Tomcat Port = 8005 (for shutdown) [DRM Status Definitions] Unsecure URL = <a moz-do-not-send="true" class="moz-txt-link-freetext" href="http://pki.example.com:8080/kra/ee/kra">http://pki.example.com:8080/kra/ee/kra</a> Secure Agent URL = <a moz-do-not-send="true" class="moz-txt-link-freetext" href="https://pki.example.com:8443/kra/agent/kra">https://pki.example.com:8443/kra/agent/kra</a> Secure Admin URL = <a moz-do-not-send="true" class="moz-txt-link-freetext" href="https://pki.example.com:8443/kra/services">https://pki.example.com:8443/kra/services</a> PKI Console Command = pkiconsole <a moz-do-not-send="true" class="moz-txt-link-freetext" href="https://pki.example.com:8443/kra">https://pki.example.com:8443/kra</a> Tomcat Port = 8005 (for shutdown) [OCSP Status Definitions] Unsecure URL = <a moz-do-not-send="true" class="moz-txt-link-freetext" href="http://pki.example.com:8080/ocsp/ee/ocsp">http://pki.example.com:8080/ocsp/ee/ocsp</a> Secure Agent URL = <a moz-do-not-send="true" class="moz-txt-link-freetext" href="https://pki.example.com:8443/ocsp/agent/ocsp">https://pki.example.com:8443/ocsp/agent/ocsp</a> Secure EE URL = <a moz-do-not-send="true" class="moz-txt-link-freetext" href="https://pki.example.com:8443/ocsp/ee/ocsp">https://pki.example.com:8443/ocsp/ee/ocsp</a> Secure Admin URL = <a moz-do-not-send="true" class="moz-txt-link-freetext" href="https://pki.example.com:8443/ocsp/services">https://pki.example.com:8443/ocsp/services</a> PKI Console Command = pkiconsole <a moz-do-not-send="true" class="moz-txt-link-freetext" href="https://pki.example.com:8443/ocsp">https://pki.example.com:8443/ocsp</a> Tomcat Port = 8005 (for shutdown) [TKS Status Definitions] Unsecure URL = <a moz-do-not-send="true" class="moz-txt-link-freetext" href="http://pki.example.com:8080/tks/ee/tks">http://pki.example.com:8080/tks/ee/tks</a> Secure Agent URL = <a moz-do-not-send="true" class="moz-txt-link-freetext" href="https://pki.example.com:8443/tks/agent/tks">https://pki.example.com:8443/tks/agent/tks</a> Secure Admin URL = <a moz-do-not-send="true" class="moz-txt-link-freetext" href="https://pki.example.com:8443/tks/services">https://pki.example.com:8443/tks/services</a> PKI Console Command = pkiconsole <a moz-do-not-send="true" class="moz-txt-link-freetext" href="https://pki.example.com:8443/tks">https://pki.example.com:8443/tks</a> Tomcat Port = 8005 (for shutdown) [CA Configuration Definitions] PKI Instance Name: pki-tomcat PKI Subsystem Type: Root CA (Security Domain) Registered PKI Security Domain Information: ========================================================================== Name: example.com Security Domain URL: <a moz-do-not-send="true" class="moz-txt-link-freetext" href="https://pki.example.com:8443">https://pki.example.com:8443</a> ========================================================================== [DRM Configuration Definitions] PKI Instance Name: pki-tomcat PKI Subsystem Type: DRM Registered PKI Security Domain Information: ========================================================================== Name: example.com Security Domain URL: <a moz-do-not-send="true" class="moz-txt-link-freetext" href="https://pki.example.com:8443">https://pki.example.com:8443</a> ========================================================================== [OCSP Configuration Definitions] PKI Instance Name: pki-tomcat PKI Subsystem Type: OCSP Registered PKI Security Domain Information: ========================================================================== Name: example.com Security Domain URL: <a moz-do-not-send="true" class="moz-txt-link-freetext" href="https://pki.example.com:8443">https://pki.example.com:8443</a> ========================================================================== [TKS Configuration Definitions] PKI Instance Name: pki-tomcat PKI Subsystem Type: TKS Registered PKI Security Domain Information: ========================================================================== Name: example.com Security Domain URL: <a moz-do-not-send="true" class="moz-txt-link-freetext" href="https://pki.example.com:8443">https://pki.example.com:8443</a> ========================================================================== </blockquote> After running the upgrade script, the inaccessible URLs were removed: <blockquote># pkidaemon status tomcat pki-tomcat Status for pki-tomcat: pki-tomcat is running .. [CA Status Definitions] Unsecure URL = <a moz-do-not-send="true" class="moz-txt-link-freetext" href="http://pki.example.com:8080/ca/ee/ca">http://pki.example.com:8080/ca/ee/ca</a> Secure Agent URL = <a moz-do-not-send="true" class="moz-txt-link-freetext" href="https://pki.example.com:8443/ca/agent/ca">https://pki.example.com:8443/ca/agent/ca</a> Secure EE URL = <a moz-do-not-send="true" class="moz-txt-link-freetext" href="https://pki.example.com:8443/ca/ee/ca">https://pki.example.com:8443/ca/ee/ca</a> Secure Admin URL = <a moz-do-not-send="true" class="moz-txt-link-freetext" href="https://pki.example.com:8443/ca/services">https://pki.example.com:8443/ca/services</a> PKI Console Command = pkiconsole <a moz-do-not-send="true" class="moz-txt-link-freetext" href="https://pki.example.com:8443/ca">https://pki.example.com:8443/ca</a> Tomcat Port = 8005 (for shutdown) [DRM Status Definitions] Secure Agent URL = <a moz-do-not-send="true" class="moz-txt-link-freetext" href="https://pki.example.com:8443/kra/agent/kra">https://pki.example.com:8443/kra/agent/kra</a> Secure Admin URL = <a moz-do-not-send="true" class="moz-txt-link-freetext" href="https://pki.example.com:8443/kra/services">https://pki.example.com:8443/kra/services</a> PKI Console Command = pkiconsole <a moz-do-not-send="true" class="moz-txt-link-freetext" href="https://pki.example.com:8443/kra">https://pki.example.com:8443/kra</a> Tomcat Port = 8005 (for shutdown) [OCSP Status Definitions] </blockquote> </blockquote> Unsecure URL = <a moz-do-not-send="true" class="moz-txt-link-freetext" href="http://pki.example.com:8080/ocsp/ee/ocsp">http://pki.example.com:8080/ocsp/ee/ocsp</a>/<ocsp request blob> <blockquote cite="mid:55C14007.4000306@redhat.com" type="cite"> <blockquote> Secure Agent URL = <a moz-do-not-send="true" class="moz-txt-link-freetext" href="https://pki.example.com:8443/ocsp/agent/ocsp">https://pki.example.com:8443/ocsp/agent/ocsp</a> </blockquote> </blockquote> Secure EE URL = <a moz-do-not-send="true" class="moz-txt-link-freetext" href="https://pki.example.com:8443/ocsp/ee/ocsp">https://pki.example.com:8443/ocsp/ee/ocsp</a>/<ocsp request blob> <blockquote cite="mid:55C14007.4000306@redhat.com" type="cite"> <blockquote> Secure Admin URL = <a moz-do-not-send="true" class="moz-txt-link-freetext" href="https://pki.example.com:8443/ocsp/services">https://pki.example.com:8443/ocsp/services</a> PKI Console Command = pkiconsole <a moz-do-not-send="true" class="moz-txt-link-freetext" href="https://pki.example.com:8443/ocsp">https://pki.example.com:8443/ocsp</a> Tomcat Port = 8005 (for shutdown) [TKS Status Definitions] Secure Agent URL = <a moz-do-not-send="true" class="moz-txt-link-freetext" href="https://pki.example.com:8443/tks/agent/tks">https://pki.example.com:8443/tks/agent/tks</a> Secure Admin URL = <a moz-do-not-send="true" class="moz-txt-link-freetext" href="https://pki.example.com:8443/tks/services">https://pki.example.com:8443/tks/services</a> PKI Console Command = pkiconsole <a moz-do-not-send="true" class="moz-txt-link-freetext" href="https://pki.example.com:8443/tks">https://pki.example.com:8443/tks</a> Tomcat Port = 8005 (for shutdown) [CA Configuration Definitions] PKI Instance Name: pki-tomcat PKI Subsystem Type: Root CA (Security Domain) Registered PKI Security Domain Information: ========================================================================== Name: example.com Security Domain URL: <a moz-do-not-send="true" class="moz-txt-link-freetext" href="https://pki.example.com:8443">https://pki.example.com:8443</a> ========================================================================== [DRM Configuration Definitions] PKI Instance Name: pki-tomcat PKI Subsystem Type: DRM Registered PKI Security Domain Information: ========================================================================== Name: example.com Security Domain URL: <a moz-do-not-send="true" class="moz-txt-link-freetext" href="https://pki.example.com:8443">https://pki.example.com:8443</a> ========================================================================== [OCSP Configuration Definitions] PKI Instance Name: pki-tomcat PKI Subsystem Type: OCSP Registered PKI Security Domain Information: ========================================================================== Name: example.com Security Domain URL: <a moz-do-not-send="true" class="moz-txt-link-freetext" href="https://pki.example.com:8443">https://pki.example.com:8443</a> ========================================================================== [TKS Configuration Definitions] PKI Instance Name: pki-tomcat PKI Subsystem Type: TKS Registered PKI Security Domain Information: ========================================================================== Name: example.com Security Domain URL: <a moz-do-not-send="true" class="moz-txt-link-freetext" href="https://pki.example.com:8443">https://pki.example.com:8443</a> ========================================================================== </blockquote> </blockquote> </body> </html>