[Pki-devel] [PATCH] PKI Deployment Framework (20120518)

Matthew Harmsen mharmsen at redhat.com
Fri May 18 18:05:01 UTC 2012


This patch documents continued implementation of the PKI Deployment 
Framework based upon the revised filesystem layout documented here:

  * http://pki.fedoraproject.org/wiki/PKI_Instance_Deployment#CA_.2F_KRA_.2F_OCSP_.2F_RA_.2F_TKS_.2F_TPS

The following patch adds/corrects functionality of the existing PKI 
Deployment Framework including (but not limited to):

  * Introduced concept of "admin-domain" originally as a
    separate folder, and later incorporated this concept
    into an optional instance prefix
  * Revised definition of <pki_instance_id> to be identified
    as "[<pki_admin_domain_name>-]<pki_instance_name>
  * Changed NSS security database model from one shared
    database by BOTH a single Tomcat AND single Apache instance
    into one per Tomcat instance (shared by CA/KRA/OCSP/TKS) and
    one per Apache instance (shared by RA/TPS)
  * Altered Configuration 'scriptlet' to invoke Jython for
    access to new Java configuration servlet
  * Renamed various "scriptlets" to comply with this new layout
  * Re-aligned code to account for revised layout documented at
    http://pki.fedoraproject.org/wiki/PKI_Instance_Deployment

-- Matt
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://listman.redhat.com/archives/pki-devel/attachments/20120518/a25b14ec/attachment.htm>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: 0001-PKI-Deployment-Scriptlets-20120518.patch
Type: text/x-patch
Size: 118796 bytes
Desc: not available
URL: <http://listman.redhat.com/archives/pki-devel/attachments/20120518/a25b14ec/attachment.bin>


More information about the Pki-devel mailing list