[Pkg-freeipa-devel] pki: Changes to 'debian-unstable'
Timo Aaltonen
tjaalton-guest at alioth.debian.org
Sun Mar 18 08:16:40 UTC 2012
New branch 'debian-unstable' available with the following commits:
commit de5b81229d6fa8e5202e35c3774de24d43065e1a
Author: Timo Aaltonen <tjaalton at ubuntu.com>
Date: Sun Mar 18 10:14:33 2012 +0200
update the maintainer address and repo location
commit 1f5524112e829728bb8597533d01caa89370cc3d
Author: Timo Aaltonen <tjaalton at ubuntu.com>
Date: Sat Mar 17 14:02:58 2012 +0200
add conf for git-buildpackage
commit e65f3566e524a0522b52dfa6e0d57846cd4e9494
Author: Timo Aaltonen <tjaalton at ubuntu.com>
Date: Sat Mar 17 14:00:16 2012 +0200
update the changelog
commit f812577f6ea18f7bda25a1ff2394fbb2b054745e
Author: Timo Aaltonen <tjaalton at ubuntu.com>
Date: Sat Mar 17 13:50:30 2012 +0200
update get-rid-of-osutil.diff
commit c51c03c007ee189ab08323b1d3e2264533b9d258
Author: Timo Aaltonen <tjaalton at ubuntu.com>
Date: Sat Mar 17 13:11:01 2012 +0200
update get-rid-of-osutil.diff
commit 077ec4841d76b5a726fa40f9d6e937d22bacc62f
Author: Timo Aaltonen <tjaalton at ubuntu.com>
Date: Sat Mar 17 13:07:19 2012 +0200
fold osutil patches as one
commit 4bccb94a48e6846d0ccf59d7ee84d0001bc1ac5f
Author: Timo Aaltonen <tjaalton at ubuntu.com>
Date: Sat Mar 17 13:01:49 2012 +0200
add libcommons-codec-java to depends
commit df20f79cee440435e0657da92ae4929ba304aa17
Author: Timo Aaltonen <tjaalton at ubuntu.com>
Date: Sat Mar 17 12:56:10 2012 +0200
use source format 1.0
commit 5f8638a45806efd84e2920b1edba03baad42df95
Author: Timo Aaltonen <tjaalton at ubuntu.com>
Date: Sat Mar 17 12:53:27 2012 +0200
get rid of osutil
commit ebf017f20e28378d626f2b9a7b7b59410832542a
Merge: 0b2d4b3 a99a83c
Author: Timo Aaltonen <tjaalton at ubuntu.com>
Date: Sat Mar 17 08:59:45 2012 +0200
Merge branch 'upstream-unstable' into test
commit 0b2d4b36f00ba874710ba950c5421231fb924eaf
Author: Timo Aaltonen <tjaalton at ubuntu.com>
Date: Sat Mar 17 08:55:39 2012 +0200
drop osutil
commit 79b84fce31abb75a9ff58f8acda2d3c7383feac6
Author: Timo Aaltonen <tjaalton at ubuntu.com>
Date: Fri Mar 16 23:07:01 2012 +0200
simplify copyright
commit a766aefa7b0412469c03580a563ac911f1da8469
Author: Timo Aaltonen <tjaalton at ubuntu.com>
Date: Fri Mar 16 23:06:23 2012 +0200
bump standards version, no changes
commit 3229134044da5745f263fc7773fffa8aa9c5867e
Author: Timo Aaltonen <tjaalton at ubuntu.com>
Date: Fri Mar 16 23:02:00 2012 +0200
add lintian overrides
commit 7cdf7208b41638c19c3c7b34983e19aafa584fa2
Author: Timo Aaltonen <tjaalton at ubuntu.com>
Date: Fri Mar 16 22:49:35 2012 +0200
pki-common needs to depend on adduser
commit 3a568c7e78a7c762a2857e2e072211a5b73ea5e7
Author: Timo Aaltonen <tjaalton at ubuntu.com>
Date: Fri Mar 16 22:46:55 2012 +0200
fix source lintian errors/warnings
commit f25b32a15c50c32821f49191fa31ca6f0d6ae69d
Author: Timo Aaltonen <tjaalton at ubuntu.com>
Date: Fri Mar 16 22:34:25 2012 +0200
add symlinks to tomcat policy
commit a16c3a00b1a1e2951b5e23eadf7fa6e148fd314e
Author: Timo Aaltonen <tjaalton at ubuntu.com>
Date: Fri Mar 16 22:28:31 2012 +0200
add pkiuser on pki-common.postinst
commit 6fedbcea59e138d51f06ca38960437a240ad2737
Author: Timo Aaltonen <tjaalton at ubuntu.com>
Date: Fri Mar 16 22:25:56 2012 +0200
use error handler on postinst
commit f7db806de7824f9131330f9f20afb4c253a31c37
Author: Timo Aaltonen <tjaalton at ubuntu.com>
Date: Fri Mar 16 22:15:45 2012 +0200
fixes to the debian support
commit 4175cceb52b5db335d72ca9853b0e74c1da2a6ba
Author: Timo Aaltonen <tjaalton at ubuntu.com>
Date: Fri Mar 16 16:01:29 2012 +0200
fix some paths in debian-support.diff
commit a99a83ccf6741f7361904689ed79b7dafa5f323f
Author: Matthew Harmsen <mharmsen at redhat.com>
Date: Mon Mar 12 15:29:57 2012 -0700
Get DOGTAG_9_BRANCH GIT repository in-sync with SVN namesake
Migrated the following bugs:
- Bugzilla Bug #747381 - After the migration (7.1->8.1) CA agent page
displays admin cert request with authtime attribute twice
- Bugzilla Bug #747019 - Migrated policy requests from 7.1->8.1 displays
issuedcerts and cert_Info params as base 64 blobs.
- Bugzilla Bug #757848 - DRM re-key tool: introduces a blank line in the
middle of an ldif entry.
- Resolved Bugzilla Bug #801840 - pki_silent.template missing opening brace
for ca_external variable
commit ada9213433a122e83c7d0cc0c04a4711ae003a79
Author: Ade Lee <alee at redhat.com>
Date: Wed Feb 29 23:31:15 2012 -0500
Fixes to cloning and security domain tables for client auth internaldb user
The mechanism for getting an ldap connection to the internaldb was incorrect,
both in the Security Domain Session Table and the DatabasePanel. As a result,
connections to the internaldb failed for accessing the security domain session
table and when trying to clone a master which connects to its database using
client auth.
The thread that handles reading the security domain session table is now only
instantiated when running on a configured security domain master.
Additionally, needed acls for the client auth certificate ldap user have been
moved to manager.ldif. This includes acls to allow creation and management of
replication agreements and replication users (now being created under
ou=csusers, cn=config)
Added logs to show when ldif import errors occur. Also made sure to write and
remove master ldap password for use in replication.
Ticket #5
Conflicts resolved:
pki/base/common/src/com/netscape/cms/servlet/csadmin/AdminAuthenticatePanel.java
pki/base/common/src/com/netscape/cms/servlet/csadmin/DatabasePanel.java
pki/base/common/src/com/netscape/cms/servlet/csadmin/LDAPSecurityDomainSessionTable.java
pki/base/common/src/com/netscape/cms/servlet/csadmin/RestoreKeyCertPanel.java
pki/base/common/src/com/netscape/cms/servlet/csadmin/WizardPanelBase.java
pki/base/migrate/80/MigrateSecurityDomain.java
pki/base/util/src/com/netscape/cmsutil/ldap/LDAPUtil.java
commit 8b9dc39ca6592d5c0cd6c0e6b24775de1dad161a
Author: Matthew Harmsen <mharmsen at redhat.com>
Date: Tue Mar 6 14:24:38 2012 -0800
Remove PKI desktop icons
Bugzilla Bug #767800 - Firefox Launcher on Panel being modified for all users.
commit 77a097569b3db870c7421ab1b1ba83a869ab922f
Author: Andrew Wnuk <awnuk at redhat.com>
Date: Tue Mar 6 10:34:39 2012 -0800
Option to create ECC credentials for admin
Configuration wizard should provide option to issue ECC credentials for admin during ECC CA configuration.
Bug #784387.
commit 121de2685a8b4fd08f60728f37a63152cf19a892
Author: Ade Lee <alee at redhat.com>
Date: Sun Mar 4 22:26:52 2012 -0500
BZ 769388 - pki-silent does not properly escape command-line arguments
commit dedf04d94b4db5cfcb856c615947f5ea3854f452
Author: Matthew Harmsen <mharmsen at redhat.com>
Date: Fri Mar 2 19:50:57 2012 -0800
Remove platform specific logic from patches for mock purposes.
commit 066da9452f73fbadde0b8211390ece814d92c18e
Author: Andrew Wnuk <awnuk at redhat.com>
Date: Wed Feb 29 17:54:48 2012 -0800
Option to change for default algorithms
RSA should be default selection for transport, storage, and audit keys till ECC is fully implemented.
Bug #787806.
commit 2397ded08a5b8880cc671c1167a61a455d7dcc30
Author: Matthew Harmsen <mharmsen at redhat.com>
Date: Tue Feb 28 17:48:48 2012 -0800
Enhanced compose scripts to download patches
Added platform-dependent patches for SELinux component
Bugzilla Bug #739708 - Selinux fix for ephemeral ports (F16)
Bugzilla Bug #795966 - pki-selinux policy is kind of a mess (F17)
commit ff4d47d6f176c5f7bc1d2848943c6098f8463253
Author: Ade Lee <alee at redhat.com>
Date: Thu Feb 16 14:38:40 2012 -0500
Add client auth user to default install
When a subsystem is configured, a user is created to facilitate communication
between subsystems. This user is created on the security domain ca, and is
has the subsystem certificate in its user record.
This user will be reused as a user that can talk to the database using the
subsystem certificate for client auth. To do this, this patch does the following:
1. If not the security domain master CA, adds this user to the subsystem, and
adds the subsystem cert.
2. Adds the subsystem cert subject dn to the user's record in the seeAlso attribute
3. Adds acis for this user for the $basedn and for cn=config (for VLV searches)
By default, this user and acls will be added when the system is configured.
To actually use the user and client auth, more config steps are required. They
will be doc'ed in https://fedorahosted.org/pki/ticket/5
commit 517c6f70fb15b3d0b2a9b17418ca5dbddc419520
Author: Ade Lee <alee at redhat.com>
Date: Thu Feb 23 17:49:29 2012 -0500
BZ 739708 Selinux fix for ephemeral ports
commit 6ac435844ebde7ec25937f2e6285f723851c04fa
Author: Matthew Harmsen <mharmsen at redhat.com>
Date: Wed Feb 22 21:20:12 2012 -0800
Fixed several miscellaneous build issues
(see https://fedorahosted.org/pki/ticket/104)
commit 160498a341e22315abdd3f4e9f7bbe0c73faa4a8
Author: Ade Lee <alee at redhat.com>
Date: Wed Feb 22 22:48:52 2012 -0500
Selinux changes to allow dogtag to start on f17.
Addresses java_exec_t issue in BZ 795966
commit 551a26bdb0160fef3e7c77491721bcb892ab39f8
Author: Timo Aaltonen <tjaalton at ubuntu.com>
Date: Wed Feb 22 16:44:21 2012 +0200
fix various hardcoded names in pkicreate/pkiremove/pkicommon.pm
commit f9120a961135f2f6a318bafd334b83cbd6779d5d
Author: Timo Aaltonen <tjaalton at ubuntu.com>
Date: Wed Feb 22 16:41:11 2012 +0200
modify the initscripts a bit
commit a2a59fcda925379736830a019ddd035d7a198860
Author: Timo Aaltonen <tjaalton at ubuntu.com>
Date: Wed Feb 22 16:34:26 2012 +0200
add missing dependency on libxml-libxml-perl to pki-setup
commit a9e7de112bf865d8dd55a163df3eee4763484fbf
Author: Andrew Wnuk <awnuk at redhat.com>
Date: Tue Feb 21 18:57:08 2012 -0800
Sample ECC profiles
This patch provides two sample ECC certificate profiles.
Bug: 223358.
commit 082e62ea78d4f3cf52fcc0ca40f078812f90bf89
Author: Timo Aaltonen <tjaalton at ubuntu.com>
Date: Mon Feb 20 13:55:35 2012 +0200
add missing perl:Depends
commit 56a8dddbe5f29bfbadc087a1537a1c13db8bd4a3
Author: Timo Aaltonen <tjaalton at ubuntu.com>
Date: Mon Feb 20 13:52:24 2012 +0200
fix a file conflict with libpki-util-java in libpki-common-java.install
commit 37d6a29c3f4ca549cb05b7d1412914c62b3d2fa8
Author: Timo Aaltonen <tjaalton at ubuntu.com>
Date: Mon Feb 20 10:22:28 2012 +0200
add packaging for ipa-pki-theme and pki-console
commit 5f4506b8e5be47959b78862abf40eacf6c3ef69c
Author: Timo Aaltonen <tjaalton at ubuntu.com>
Date: Mon Feb 20 09:05:27 2012 +0200
drop false deps from dogtag-pki
commit 3349da5edf26327ed7d828e5b9b5b075045d25e1
Author: Timo Aaltonen <tjaalton at ubuntu.com>
Date: Mon Feb 20 02:37:37 2012 +0200
fix a typo
commit 11706f1bd6c5124d594bda96bd6f96c34454c7d9
Author: Timo Aaltonen <tjaalton at ubuntu.com>
Date: Mon Feb 20 02:33:18 2012 +0200
add dogtag-pki metapackage
commit 332a5961258b697b40c9571bb845ebd33c013bc9
Author: Timo Aaltonen <tjaalton at ubuntu.com>
Date: Mon Feb 20 02:22:22 2012 +0200
fix lsb headers to include
commit 239cea38b646d324b7ca9e281d2a3a69e6b7e40b
Author: Timo Aaltonen <tjaalton at ubuntu.com>
Date: Mon Feb 20 02:05:21 2012 +0200
add java:Depends to dogtag-pki-console-theme
commit 9aaafc4b3e27d5703e066fee9944e1225af57902
Author: Timo Aaltonen <tjaalton at ubuntu.com>
Date: Mon Feb 20 01:58:22 2012 +0200
rules: make perl scripts executable (lintian)
commit 937fe32b49f1c9c2d58b75323520eff71171d8c1
Author: Timo Aaltonen <tjaalton at ubuntu.com>
Date: Mon Feb 20 01:55:51 2012 +0200
add fix-include-paths.diff
commit 0e8637442b19bcdb2fe3ad699c7d800af2b04555
Author: Timo Aaltonen <tjaalton at ubuntu.com>
Date: Mon Feb 20 01:55:21 2012 +0200
add lsb header to initscripts
commit b9c8bc1e31522a607642faa6b3f2046286a398f4
Author: Timo Aaltonen <tjaalton at ubuntu.com>
Date: Mon Feb 20 01:46:13 2012 +0200
fix initscript names
commit 509130b86482316461c083f7a008b689d5875225
Author: Timo Aaltonen <tjaalton at ubuntu.com>
Date: Mon Feb 20 01:23:59 2012 +0200
add packaging for pki-ra, pki-tks, pki-tps
commit de590333b86f36785c7050832fb1055bf94431f3
Author: Timo Aaltonen <tjaalton at ubuntu.com>
Date: Sat Feb 18 18:45:54 2012 +0200
add initscript for pki-ca
commit 1795713779c62771bb128b6df7cf1cae331b2b4e
Author: Timo Aaltonen <tjaalton at ubuntu.com>
Date: Sat Feb 18 18:26:58 2012 +0200
use the corrent name for pki-krad initscript
commit 612c5c7c0d56c615dfa51e073eb91ac8c695fa64
Author: Timo Aaltonen <tjaalton at ubuntu.com>
Date: Sat Feb 18 18:26:10 2012 +0200
add pki-ocsp packaging
commit 9c9bdc02c5e1c3fbc8851bd467418d3879785b04
Author: Timo Aaltonen <tjaalton at ubuntu.com>
Date: Sat Feb 18 17:59:06 2012 +0200
add pki-kra packaging
commit 4252aaa3ba81b89d8f484647f3a307acabbbb4d2
Author: Timo Aaltonen <tjaalton at ubuntu.com>
Date: Fri Feb 17 17:20:30 2012 +0200
add common config flags that have the jars from core build
commit 444198dfcce7d4018e75eb27270e6b96895ce983
Author: Timo Aaltonen <tjaalton at ubuntu.com>
Date: Fri Feb 17 17:03:43 2012 +0200
rename libpki-java-tools-java and -doc to just libpki-tools-java{,-doc}
commit 9c493de2056b8588a20eab0f8782b07c9c434616
Author: Timo Aaltonen <tjaalton at ubuntu.com>
Date: Fri Feb 17 16:45:12 2012 +0200
rules: Add placeholder configs for kra, ocsp, ra, tks and tps
commit e05744973300554fb958c7ae76a4a13f60e0266a
Author: Timo Aaltonen <tjaalton at ubuntu.com>
Date: Fri Feb 17 16:01:58 2012 +0200
install libpki-*java files via .install
commit 3e2f1edb8c837803d97a0b0c98a6703ed33f695d
Author: Timo Aaltonen <tjaalton at ubuntu.com>
Date: Fri Feb 17 15:34:39 2012 +0200
add dogtag-pki-theme packaging
commit 1a9e9ef737c034c485202d0e7fc4229ed7cff5c2
Author: Timo Aaltonen <tjaalton at ubuntu.com>
Date: Fri Feb 17 14:04:22 2012 +0200
fix rules
commit cd2c1afe4febd3796c799be722a235d70ffac290
Author: Timo Aaltonen <tjaalton at ubuntu.com>
Date: Fri Feb 17 13:54:35 2012 +0200
fix source package name
commit 1458a436db49cd11505a11d37393f74f7346e7d0
Author: Timo Aaltonen <tjaalton at ubuntu.com>
Date: Fri Feb 17 13:53:23 2012 +0200
initial packaging from pki-core
commit d372d33501250c4684be2caf452cdb63b9b8e07b
Author: Andrew Wnuk <awnuk at redhat.com>
Date: Wed Feb 15 11:11:03 2012 -0800
ECC encryption and signing profiles (part 2)
This patch provides an option for certificate profiles to allow them to automatically create enrollment pages which are used to generate new signing and encryption certificate requests.
Bug: 703608.
commit 43a2559b7512eabbfe1e4bc0faa613d94142271d
Author: Andrew Wnuk <awnuk at redhat.com>
Date: Wed Feb 15 11:03:50 2012 -0800
ECC encryption and signing profiles
This patch provides an option for certificate profiles to allow them to automatically create enrollment pages which are used to generate new signing and encryption certificate requests.
Bug: 703608.
commit a6285f70f57eee49dce0cdac8decafc2ba08ba6c
Author: Andrew Wnuk <awnuk at redhat.com>
Date: Thu Jan 19 12:33:46 2012 -0800
File signing hash fix.
This patch resolves issue of "Agent-Authenticated File Signing" enrollment altering some file hashes.
Bug: 771768.
commit 5314d049fadd54666dbdae7444b8134f8b98cba0
Merge: 8f2f52c 5bf257b
Author: Christina Fu <cfu at redhat.com>
Date: Thu Jan 19 10:21:23 2012 -0800
Merge branch 'DOGTAG_9_BRANCH' of ssh://git.fedorahosted.org/git/pki into DOGTAG_9_BRANCH
commit 5bf257b830c6a4d8c1bffc9965905d04b83b5a58
Author: Matthew Harmsen <mharmsen at redhat.com>
Date: Wed Jan 18 18:11:13 2012 -0800
Fix of broken build of pki-tps in git repo
CMakeLists.txt file was changed to account for the removal of
empty directories from the source code.
Bugzilla Bug #782953
commit 8f2f52c0caf3f78aa56400e9a3cbc7b824957846
Author: Christina Fu <cfu at redhat.com>
Date: Wed Jan 18 10:39:27 2012 -0800
Bug 769739 - CC: self test verifySystemCertByNickname: certain failure will not cause server to shutdown as expected
There are two issues being fixed: 1. The variable, r, returned by verifySystemCertByTag() gets overwritten by the next return value in a while loop. The problem affects both java subsystems and TPS. 2. In the TPS system, within a while loop that calls verifySystemCertByNickname(), one condition does a "continue" without advancing to the next token, causing an infinite loop under that condition. Adding a PL_strtok_r(NULL, ",", &lasts); call resolves the issue.
commit e28e983d022fd18b1494d74b948a86fb4cc85745
Author: Christina Fu <cfu at redhat.com>
Date: Wed Jan 18 13:51:17 2012 -0800
Bug 769060 - Self-tests fail at OCSP subsystem restart -- with null CertNickName in the audit output
The issue was that the parameter ocsp.cert.signing.certusage=StatusResponder was missing the "certusage" component in CS.cfg.in. Adding it fixed the problem. cert nickname is added automatically at installation/configuration.
commit 45f30bd90dc8f0756dfb5370284c499bd9d3f229
Author: Andrew Wnuk <awnuk at redhat.com>
Date: Tue Jan 17 08:58:08 2012 -0800
List paging on CA and DRM
This patch resolves multiple issues related to paging on request, certificate, and key lists.
It also provides consistent behavior across all lists.
Bug: 768138
commit e9304ba9c963d453d5415cbd0cefc666d6172ee9
Author: Andrew Wnuk <awnuk at redhat.com>
Date: Mon Jan 16 17:21:27 2012 -0800
Big numbers fix for CA and DRM.
This patch resolves multiple issues related to use of big numbers on CA and DRM
It also provides a fix for incomplete recovery requests causing null pointer exception.
Bugs: 756133, 758505.
commit 8ebf890b913ffbf4cb40c09ebc9e229989303095
Author: Ade Lee <alee at redhat.com>
Date: Wed Jan 4 00:08:03 2012 -0500
BZ 771357 - sslget does not work after FEDORA-2011-17400 update, breaking FreeIPA install
Modified sslget doIO() function to be able to handle small reads.
commit 4b696c10756acd971d50add6477b7309c6af600f
Author: mharmsen <mharmsen at c9f7a03b-bd48-0410-a16d-cbbf54688b0b>
Date: Fri Nov 11 01:03:21 2011 +0000
This branch was created from the 'DOGTAG_9_0_FEDORA_15_16_17_20111028' tag.
git-svn-id: svn+ssh://svn.fedorahosted.org/svn/pki/branches/DOGTAG_9_BRANCH@2293 c9f7a03b-bd48-0410-a16d-cbbf54688b0b
commit db615a895b644af038308ae71b680f1d93f78f70
Author: mharmsen <mharmsen at c9f7a03b-bd48-0410-a16d-cbbf54688b0b>
Date: Sat Oct 29 04:43:21 2011 +0000
Bugzilla Bug #737761 - Update Dogtag Packages for Fedora 16
git-svn-id: svn+ssh://svn.fedorahosted.org/svn/pki/tags/DOGTAG_9_0_FEDORA_15_16_17_20111028@2279 c9f7a03b-bd48-0410-a16d-cbbf54688b0b
commit a8a64c7f1dcaf3012fa8d3cd164c890ceb146d0d
Author: mharmsen <mharmsen at c9f7a03b-bd48-0410-a16d-cbbf54688b0b>
Date: Sat Oct 29 04:42:11 2011 +0000
Bugzilla Bug #737761 - Update Dogtag Packages for Fedora 16
git-svn-id: svn+ssh://svn.fedorahosted.org/svn/pki/tags/DOGTAG_9_0_FEDORA_15_16_17_20111028@2278 c9f7a03b-bd48-0410-a16d-cbbf54688b0b
More information about the Pkg-freeipa-devel
mailing list