[Pki-devel] Dogtag's http interface

Melton, Lawrence ljmelto at tycho.ncsc.mil
Tue Feb 3 23:45:34 UTC 2009


Since CMS 6.0 through CS 7.1, we've been using a Java application (instead
of a web browser) to access the CA's http interface, such as this:
 

    //* This is the relative URL for submitting cert requests to the CA

    public static final String caProfileSubmit = "/ca/profileSubmit";

    

    //* This is the relative URL for accessing the end entity web page at
the CA

    public static final String caEndEntity = "/ca/index.html";

    

    //* This is the relative URL for accessing the agent web page at the CA

    public static final String caAgent = "/ca/index.html";

    

    //* This is a relative URL for POSTing a request for certificate
requests; only an agent should be able to get to this page

    public static final String caAgentAccess = "/ca/queryReq";

    

    //* This is the relative URL for accessing the agent web page at the DRM
for searching for archived keys

    public static final String drmSearchForKey = "/kra/srchKeyForRecovery";

    

    //* This is the relative URL for accessing the agent web page at the DRM
for diplaying archived keys by certificate serial number

    public static final String drmDisplayBySerialNumber =
"/kra/displayBySerialForRecovery";

 

    //* This is the relative URL for accessing the agent web page at the DRM
for requesting recovery of archived private keys by certificate serial
number

    public static final String drmRecoverBySerialNumber =
"/kra/recoverBySerial";

    

    //* This is the relative URL for accessing the agent web page at the DRM
for granting key recovery requests

    public static final String drmGrantRecovery = "/kra/grantRecovery";

    

    //* This is the relative URL for retrieving a key in a PKCS#12 message
from the DRM

    public static final String drmGetPKCS12Message = "/kra/getPk12";

    

    //* This is the relative URL for accessing the agent web page at the DRM

    public static final String drmAgent = "/kra/index.html";

    

    //* This is the relative URL for retrieving the DRM's transport
certificate

    public static final String drmDisplayTransportCert =
"/kra/displayTransportCert";

 

Now with CS 7.3 and Dogtag, the interface is different.  I think the end
entity page is found at "/ca/ee/ca/index.html" and the agent page is found
at "/ca/agent/ca/index.html".  I'm still trying to figure out the rest.

 

Is there an http interface document for Dogtag?  Is there an intuitive
formula or a web.xml document that shows the new interface?

 

Thanks,

Larry

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://listman.redhat.com/archives/pki-devel/attachments/20090203/eaf8f110/attachment.htm>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: smime.p7s
Type: application/x-pkcs7-signature
Size: 4899 bytes
Desc: not available
URL: <http://listman.redhat.com/archives/pki-devel/attachments/20090203/eaf8f110/attachment.bin>


More information about the Pki-devel mailing list