<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN" "http://www.w3.org/TR/REC-html40/loose.dtd">
<html lang="en">
<head>
<meta content="text/html; charset=US-ASCII" http-equiv="Content-Type">
<title>
GitLab
</title>



<style>img {
max-width: 100%; height: auto;
}
</style>
</head>
<body>
<div class="content">

<h3>
Timo Aaltonen pushed to branch master
at <a href="https://salsa.debian.org/freeipa-team/dogtag-pki">FreeIPA packaging / dogtag-pki</a>
</h3>
<h4>
Commits:
</h4>
<ul>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/300fbb536b21b36ba7dc6e8e1788aadaec676e23">300fbb53</a></strong>
<div>
<span>by Dinesh Prasanth M K</span>
<i>at 2020-08-04T16:53:55-04:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Fix Secure connection issue when server is down

When the PKI server is down, the server is temporarily
brought up using a temporary SSL server cert. This cert
needs to be trusted to enable secure connection.

This patch:

* allows passes instance's nssdb as the client nssdb to
  trust the SSL server created during cert-fix (offline
  cert renewal process).
* Gets the hostname using socket instead of from env
  variable

Signed-off-by: Dinesh Prasanth M K <dmoluguw@redhat.com>
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/858d6a0586c67719d2a4491e2e3d2dc375e959ac">858d6a05</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2020-08-04T15:55:38-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Updated version number to 10.10.0-alpha1
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/b62d6960bbe9a610daaf066dd52390abbe96857a">b62d6960</a></strong>
<div>
<span>by Stanislav Levin</span>
<i>at 2020-08-04T15:56:02-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Fix Version.__getnewargs__

According to the docs [0]:
>  object.__getnewargs__()
This method serves a similar purpose as __getnewargs_ex__(), but
supports only positional arguments. It must return a tuple of
arguments args which will be passed to the __new__() method upon
unpickling.

[0]: https://docs.python.org/3/library/pickle.html#object.__getnewargs__

Fixes: https://pagure.io/dogtagpki/issue/3200
Signed-off-by: Stanislav Levin <slev@altlinux.org>
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/b14b0268ab4cc69c72cd3b28145cd022693104a0">b14b0268</a></strong>
<div>
<span>by Stanislav Levin</span>
<i>at 2020-08-04T15:58:12-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Fix unittest DeprecationWarning

`assertEquals` is deprecated in favor of `assertEqual` since Python3.2:
https://docs.python.org/3/whatsnew/3.2.html

Fixes: https://pagure.io/dogtagpki/issue/3201
Signed-off-by: Stanislav Levin <slev@altlinux.org>
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/1baa5763b6272cbe8cb4a1b6bba4e73b39ff246f">1baa5763</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2020-08-05T14:01:09-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Fixed exception message in ConfigClient
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/ff77811b49250602bd66b53d9e6c1c2f15a692fa">ff77811b</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2020-08-05T14:01:09-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Updated ACME container to Fedora 31
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/49585867207922479644a03078c29548de02cd03">49585867</a></strong>
<div>
<span>by Dinesh Prasanth M K</span>
<i>at 2020-08-05T16:35:58-04:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Move from sudo to runuser

This patch migrates usage of sudo to runuser. In containers
sudo is not installed by default. Whereas, `runuser` is part of
'util-linux' pacakge, whcih is installed by default

Fixes: https://pagure.io/dogtagpki/issue/3171

Signed-off-by: Dinesh Prasanth M K <dmoluguw@redhat.com>
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/a2665b9f09705943a0bb4f29432a2998512a8140">a2665b9f</a></strong>
<div>
<span>by jmagne</span>
<i>at 2020-08-06T09:44:27-07:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Address RHCS-1347 dd healthcheck to test the health of clone. (#496)

Simple test of clones associated with a pki instance.

Testing is predicated on locating within the given instance a CA security domain subsystem.

>From there the security domain is consulted for a list of cloned subsystems.
Each clone found is checked in a simple fashion for a connectivity and for simple data,
when appropriate. For now the OCSP , TKS, and TPS clones are checked for connectivity.

Another caveat: Originally I wanted to pair up each discoverd clone with it's master and compare data
within the CA and KRA to match them up. This round I was nota able to easily figure out this mapping, so for
now the actual clones are tested.

Simple command line to run the test directly:

pki-healthcheck --debug  --source pki.server.healthcheck.clones.connectivity_and_data --check ClonesConnectivyAndDataCheck

The test reaches out provides a result for each group of ca, kra, ocsp, tps, and tks clones.

Note that we have issues with tps and ocsp clones at this point.

Co-authored-by: Jack Magne <jmagne@localhost.localdomain></pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/33623f6bb7e5e4640f62d50c1e4547d609a9ee31">33623f6b</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2020-08-07T12:37:59-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Added ACMEDatabase.getAccountOrders()

The ACMEDatabase.getAccountOrders() has been added to return
all order records created by an account.
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/f6c2f759ead1859c63cd478e8b7df1c545534027">f6c2f759</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2020-08-07T12:37:59-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Added ACMEAccountOrdersService

The ACMEAccountOrdersService has been added to return
non-invalid orders created by an account.
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/64e76602138eec12f5e8c7ae73747484265900bc">64e76602</a></strong>
<div>
<span>by Alexander Scheel</span>
<i>at 2020-08-07T14:03:42-04:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Fix runuser to use absolute path

When pki-server is called as root, the following message is displayed
when trying to use runuser:

    DEBUG: Command: runuser -u pkiuser -- /usr/sbin/pki-server upgrade --debug pki-tomcat
    ERROR: [Errno 2] No such file or directory: 'runuser'
    Traceback (most recent call last):
      File "/usr/lib/python3.9/site-packages/pki/server/pkiserver.py", line 40, in <module>
        cli.execute(sys.argv)
      File "/usr/lib/python3.9/site-packages/pki/server/cli/__init__.py", line 143, in execute
        super(PKIServerCLI, self).execute(args)
      File "/usr/lib/python3.9/site-packages/pki/cli/__init__.py", line 197, in execute
        module.execute(module_args)
      File "/usr/lib/python3.9/site-packages/pki/server/cli/__init__.py", line 770, in execute
        instance.run(
      File "/usr/lib/python3.9/site-packages/pki/server/__init__.py", line 290, in run
        p = self.execute(
      File "/usr/lib/python3.9/site-packages/pki/server/instance.py", line 214, in execute
        subprocess.run(cmd, env=self.config, check=True)
      File "/usr/lib64/python3.9/subprocess.py", line 501, in run
        with Popen(*popenargs, **kwargs) as process:
      File "/usr/lib64/python3.9/subprocess.py", line 947, in __init__
        self._execute_child(args, executable, preexec_fn, close_fds,
      File "/usr/lib64/python3.9/subprocess.py", line 1819, in _execute_child
        raise child_exception_type(errno_num, err_msg, err_filename)
    FileNotFoundError: [Errno 2] No such file or directory: 'runuser'

This is because sudo lives under /usr/bin, which exists on PATH by
default, but because runuser lives under /usr/sbin (which is admin-only)
it doesn't live on PATH by default. Thus, an absolute path to the
executable needs to be provided.

This change was merged in 49585867207922479644a03078c29548de02cd03.

Signed-off-by: Alexander Scheel <ascheel@redhat.com>
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/26bb71efa2efa2c9b8595df0dedf5506e93e34a6">26bb71ef</a></strong>
<div>
<span>by Alexander Scheel</span>
<i>at 2020-08-07T14:03:52-04:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Add server dependency on jaxb-api

Signed-off-by: Alexander Scheel <ascheel@redhat.com>
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/acac6d87c3b784879cc293a6a950495b448bf145">acac6d87</a></strong>
<div>
<span>by Dinesh Prasanth M K</span>
<i>at 2020-08-10T18:22:25-04:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Add nuxwdog status to pki-server status

Display whether nuxwdog is enabled on the system when executing
pki-server status

Signed-off-by: Dinesh Prasanth M K <dmoluguw@redhat.com>
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/a53957ec6cfd2e2f2488f03dadb4b6673ee10334">a53957ec</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2020-08-10T19:10:18-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Added pki-acme RPM package

The ACME-related files have been moved from pki-server to a new
pki-acme package. The pki-javadoc has been modified to include
ACME classes.
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/ce730f7f6ef198651e2a30af91f7a2bf6cad09a9">ce730f7f</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2020-08-12T08:33:14-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Disabled AIA and cert policy extensions in ACME examples

The ACME NSS issuer has been modified to disable the AIA and
certificate policy extensions by default since they contain
non-functional URLs that might cause certbot to generate
error messages.
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/d7858a3b3082dcebc7652a7b10193e47d3f95bd5">d7858a3b</a></strong>
<div>
<span>by Alexander Scheel</span>
<i>at 2020-08-12T11:13:34-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Start NSSCertExportCLI

Can be tested with pki nss-cert-export

Signed-off-by: Alexander Scheel <ascheel@redhat.com>
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/c5e1541fe044e147d442400368ac55debc16dfd9">c5e1541f</a></strong>
<div>
<span>by Alexander Scheel</span>
<i>at 2020-08-12T11:13:34-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Fix export on FIPS-enabled HSMs

Signed-off-by: Alexander Scheel <ascheel@redhat.com>
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/04c78d6227cd5c8cb497dbc3bf1b57d1de8e70dc">04c78d62</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2020-08-12T11:13:34-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Fixed cert nickname in NSSDatabase.export_cert_from_db()

The NSSDatabase.export_cert_from_db() has been modified to
no longer prepend the token name to the cert nickname since
the cert nickname obtained from serverCertNick.conf already
contains the token name.</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/2de8e580b860675f0d37005ace082c21b95ee213">2de8e580</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2020-08-12T11:13:34-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Removed blank lines in pki nss-cert-export output

The pki nss-cert-export has been modified to remove the extra
blank lines between certs and at the end of the output.</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/06ec7e93a4609a1fe9feb97af7aafa847e4f455e">06ec7e93</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2020-08-12T15:58:52-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Added creation timestamps in ACME database

The ACME database has been modified to store the creation
timestamps of ACME records for further analysis.
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/06c9066440c0eeb590c7357e18b118b576f44063">06c90664</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2020-08-13T09:10:00-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Cleaned up log messages in FIPS.is_enabled()
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/dba659180578759346df3445748beba21d44b0cf">dba65918</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2020-08-13T09:10:00-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Cleaned up log messages in NSSDatabase
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/78520ccf227add9aa7e1858ae420832280350593">78520ccf</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2020-08-13T09:13:46-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Removed Configurator.importAndSetCertPermissionsFromHSM()

The Configurator.importAndSetCertPermissionsFromHSM()
is redundant since the import has been done and the
trust flags have been set earlier in configuration.py.
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/4976eef95b78677e1cbc8240556cb762af8b7be9">4976eef9</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2020-08-13T09:17:51-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Removed Configurator.verifySystemCertificates()

The Configurator.verifySystemCertificates() is redundant
since the certificates will be validated by the code that
actually uses the certificate.
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/dbe55769af529236293e3ff47e48d942e9e6c794">dbe55769</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2020-08-13T10:36:23-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Removed CloneSetupRequest.setupReplication

The CloneSetupRequest.setupReplication is no longer needed
since the pki_clone_setup_replication will be checked before
calling SystemConfigService.setupClone().
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/d58a4d8ea8d80c186f11247a70f25e92ff4d566e">d58a4d8e</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2020-08-13T12:35:23-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Removed duplicate extension attributes

The X509CertImplMapper.mapObjectToLDAPAttributeSet() has been
modified to add the extensions as a single attribute with
multiple values instead of multiple attributes with single
values.
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/6642a31b35ce0519ed88cd098150412e7e065225">6642a31b</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2020-08-13T20:15:09-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Moved ExtAttrDynMapper into a separate file
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/073ca9b9a2c29a4248560438f2e2d832a5046f04">073ca9b9</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2020-08-13T20:17:22-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Moved RequestAttrsMapper into a separate file
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/8633de0484909045948554aa6d745cd6fc1a8b11">8633de04</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2020-08-13T20:18:38-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Moved RequestIdMapper into a separate file
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/117dee93528236e35a11ded059705655e26706f8">117dee93</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2020-08-13T20:19:50-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Moved RequestStateMapper into a separate file
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/4b7e3d9fecd5c06d0cbd03b10c15458e265b7e29">4b7e3d9f</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2020-08-13T20:19:50-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Updated log messages in DBSSession
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/35bd2159beaafb5d05c489fa70e15025d90239fc">35bd2159</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2020-08-13T20:19:50-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Updated log messages in UGSubsystem.addUser()
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/134063962f027abe823f41a44cec5ac631545f18">13406396</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2020-08-13T20:19:50-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Updated log messages in Configurator.createSecurityDomain()
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/c6f91404b2d9f122abbbe281e420e7b8e4c286cd">c6f91404</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2020-08-17T12:32:32-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Moved ValidityConstraint to pki-ca
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/9d4d1496389e2bad2a99c4c44f50321da749a1ad">9d4d1496</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2020-08-17T12:32:41-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Moved CAValidityConstraint to pki-ca
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/dcd4af06cd924a24b4e361c304ac220e4cbb371a">dcd4af06</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2020-08-17T12:32:43-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Moved ValidityDefault to pki-ca
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/e1a09d37334c17d37dda12b2c3e84555af740f9e">e1a09d37</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2020-08-17T12:32:45-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Moved CAValidityDefault to pki-ca
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/e3e8bb4311374cd9672d4c622dc98a50f8858a5a">e3e8bb43</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2020-08-17T12:32:47-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Moved AuthorityKeyIdentifierExtDefault to pki-ca
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/8034c425d88f2abb0bde442f191ddf596e13c117">8034c425</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2020-08-17T12:32:49-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Moved CAEnrollDefault to pki-ca
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/f62127f1f51320f4d13456cd73a1c05d55dcc56d">f62127f1</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2020-08-17T12:32:51-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Moved CAAdminServlet to pki-ca
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/fa66cef494b36b929b145ea86f45bf3345dd0a5a">fa66cef4</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2020-08-17T12:32:53-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Moved SearchReqs to pki-ca
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/b984169f936ed07b2b8163dbf36e14e3b95647ce">b984169f</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2020-08-17T12:32:56-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Moved ProcessCertReq to pki-ca
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/d414e4c480b07eda885efd7c192b9ab983e09967">d414e4c4</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2020-08-17T12:32:59-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Moved CheckRequest to pki-ca
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/4ef8639d233fc33a384886efad5012b481c17c3b">4ef8639d</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2020-08-17T12:33:04-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Moved CertificateIssuedListener to pki-ca
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/deda4fc3d072aa680745eac298339e4b646242e1">deda4fc3</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2020-08-17T12:33:07-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Moved CertificateRevokedListener to pki-ca
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/b346f168fa675335f037f7422144f7254de6c013">b346f168</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2020-08-17T12:36:02-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Removed unused CloneSetupRequest.domainInfo
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/cfc48c721f1f272259faf28e9e2901d0abc0df99">cfc48c72</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2020-08-17T12:36:08-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Removed unused CloneSetupRequest.installToken
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/087861ff1c0d8bc4d037c0af8c90cd27f76dccba">087861ff</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2020-08-17T12:36:10-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Removed unused CloneSetupRequest.cloneUri
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/b5971bdb3caaf4a1898879415c9ffe389c244243">b5971bdb</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2020-08-17T12:36:12-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Removed unused CloneSetupRequest.systemCertsImported
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/cceb185111e067f9d7c9bc041ec68c96c313849d">cceb1851</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2020-08-17T13:27:11-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Updated log messages in UGSubsystem
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/75014d318ca483ea9a9fe438efd4d5ca4235601d">75014d31</a></strong>
<div>
<span>by Christina Fu</span>
<i>at 2020-08-17T14:10:23-07:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Bug1629025-DEV doc for: Server-Side Keygen for EE

This patch provides document: ServerSideKeygen.adoc

https://bugzilla.redhat.com/show_bug.cgi?id=1629025
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/09eaa014bc768252f4b2fba10e509877bccadce1">09eaa014</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2020-08-17T17:10:02-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Replaced ICertificateAuthority in CAService
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/3d7afcfee5fa2e99ddbd1cbfb0734c14f8d2e35f">3d7afcfe</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2020-08-17T17:10:02-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Replaced ICertificateAuthority in CTEngine.process()
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/2945a5b7e6f25a2ff8b4506abf3033c0f9790203">2945a5b7</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2020-08-17T17:10:02-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Replaced ISubsystem in CAPolicy.init()
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/df81fc3cca617a089705aaae435dedb6c02a77dd">df81fc3c</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2020-08-17T17:10:02-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Replaced ISubsystem in KRAPolicy.init()
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/bfc42c2e73c292328fc9b73f5cda3c49b65c249d">bfc42c2e</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2020-08-17T17:10:02-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Replaced ISubsystem in GenericPolicyProcessor.init()
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/f713480486f1d79385c408a8d12983439551334c">f7134804</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2020-08-17T17:11:41-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Replaced ICertificateAuthority in CertificateAuthority.createSubCA()
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/f7e1591fd94075312b2408aa41f11fad750d1196">f7e1591f</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2020-08-17T17:11:59-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Replaced ICertificateAuthority in CertificateAuthority.createCA()
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/cb1e6f9ef7d15c8c72e7b9b8acb9e4edb6cc0f16">cb1e6f9e</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2020-08-17T17:12:02-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Replaced ICertificateAuthority in CertificateAuthority.getCAs()
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/c2853e463d8d77dfe98b98b5b91f68172fb7b508">c2853e46</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2020-08-17T17:12:05-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Replaced ICertificateAuthority in CertificateAuthority.getCA(X500Name)
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/76d1e1a3f7ae8db868976e73c57ed11656925a23">76d1e1a3</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2020-08-17T17:12:08-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Replaced ICertificateAuthority in CertificateAuthority.getCA(AuthorityID)
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/14c5298b6515554fb5cc5cb4612d887f8c1cc189">14c5298b</a></strong>
<div>
<span>by 06shalini</span>
<i>at 2020-08-18T11:50:00+05:30</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Added changes in ansible playbooks and role ymls to make tests run for following installations: (#509)

1. Fips enabled machine
2. Shared tomcat installation
3. Discrete tomcat installation
4. ecc discrete tomcat installation

Signed-off-by: Shalini Khandelwal <skhandel@redhat.com>

Co-authored-by: Shalini Khandelwal <skhandel@redhat.com></pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/ebf730d5184c136e9460448054284b20402ae320">ebf730d5</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2020-08-18T11:58:34-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Moved PublisherAdminServlet to pki-ca
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/e4b0b7f5b9d3f22073ebeb0131fef903b8038d8d">e4b0b7f5</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2020-08-18T11:58:42-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Moved ChallengeRevocationServlet1 to pki-ca
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/d3814050022090aaabb889eb0cc7295d64169e62">d3814050</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2020-08-18T11:58:44-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Moved CMCRevReqServlet to pki-ca
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/61feb73c06f3706ec56c2307d368b38066c5eeaa">61feb73c</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2020-08-18T11:58:45-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Moved DisplayBySerial to pki-ca
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/50770ad9555c48f3481beea7cdcc1df051f77c2e">50770ad9</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2020-08-18T11:58:47-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Moved GetCAChain to pki-ca
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/7379515c743aabb8c21af9743589a4ef4364d941">7379515c</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2020-08-18T11:58:49-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Moved EnrollServlet to pki-ca
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/863f4e25d0d2dddb95a8e258117f7fd6e0debba3">863f4e25</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2020-08-18T11:58:51-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Moved GetCertChain to pki-ca
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/06eefe1ad91eca216ed9af12795dd8c488837f37">06eefe1a</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2020-08-18T11:58:53-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Moved LdapPublishModule to pki-ca
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/1b89140a2e99ae5718513e4b8d2169064c24c0ce">1b89140a</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2020-08-18T11:58:55-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Moved PublishCertsJob to pki-ca
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/537f8ef36a1b50ca8e51a5d66d9dfcb6c7880102">537f8ef3</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2020-08-18T11:58:57-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Moved RenewalNotificationJob to pki-ca
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/7f392e8d9458aae3349c556cd7538e71ec631ad3">7f392e8d</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2020-08-18T11:59:00-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Moved UnpublishExpiredJob to pki-ca
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/576103106e1b79c799f7c9ad14c8975d646d8095">57610310</a></strong>
<div>
<span>by Alexander Scheel</span>
<i>at 2020-08-18T14:20:48-04:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Make PKI use JDK8 everywhere again

Signed-off-by: Alexander Scheel <ascheel@redhat.com>
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/7a1a41b2f06d6cf6da1f38aaada4f09b8f7497c1">7a1a41b2</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2020-08-18T13:41:46-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Removed cfgPath parameter from CMSStartServlet

The cfgPath parameter has been removed from CMSStartServlet
since it is currently not used and it can only be specified
in web.xml which is not customizable either.
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/21a29c0e37f42de4225187d7c051208760058d97">21a29c0e</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2020-08-18T13:41:46-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Added id field for CMSEngine

A new id field has been added to CMSEngine to store the
subsystem ID.
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/27680c7b3ab3b50c32242cafadee49509dd5d96c">27680c7b</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2020-08-18T18:23:58-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Updated CMSEngine.startup()

The CMSEngine.startup() has been renamed to start(). The
code in CMSStartServlet that initializes and starts the
engine has been moved into this method.
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/bd850775e1e8bd27bc5fae36f283f591901dab88">bd850775</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2020-08-18T19:50:35-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Added ServletContextListener methods into CMSEngine

The CMSEngine has been modified to implement methods defined
in ServletContextListener interface for starting up and
shutting down the engine.
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/c5e1b24ac60a13a22668f882bf32e4f68e7a0ffc">c5e1b24a</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2020-08-18T19:50:35-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Updated engine parameter in CMSStartServlet

The engine parameter in CMSStartServlet has been modified to
become optional.
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/78aa0de85c00dc913912eb734d194a76ec3c60e3">78aa0de8</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2020-08-19T17:39:47-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Fixed ACME schema installation

Previously the ACME schema was installed by default whenever
any PKI subsystem was installed. Since all ACME files have
been moved into an optional pki-acme package, the ACME schema
should no longer be installed by default. Instead, the ACME
schema should be installed separately as described in ACME
installation document.
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/526fd9a157585a9d46ec9a0b85568702c943fbd5">526fd9a1</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2020-08-19T20:34:49-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Updated CA startup

The CAEngine has been modified to implement
ServletContextListener which will start up and shut down
the subsystem.
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/760eabce0fc64ac4646e5016c2fc909f198b3021">760eabce</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2020-08-19T20:35:03-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Updated KRA startup

The KRAEngine has been modified to implement
ServletContextListener which will start up and shut down
the subsystem.
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/588fa0d5365b0bc59d0c60de9da57624274c7b9d">588fa0d5</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2020-08-19T20:35:10-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Updated OCSP startup

The OCSPEngine has been modified to implement
ServletContextListener which will start up and shut down
the subsystem.
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/66899ea9523944403b89c2e28d2e6bacaa6187a9">66899ea9</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2020-08-19T20:35:10-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Updated TKS startup

The TKSEngine has been modified to implement
ServletContextListener which will start up and shut down
the subsystem.
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/9f861c26ed13a4bd31fc9b4d1884950e85571e89">9f861c26</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2020-08-19T20:35:10-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Updated TPS startup

The TPSEngine has been modified to implement
ServletContextListener which will start up and shut down
the subsystem.
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/9bdc201a900f5e6f38dabc61639b67f2973eec21">9bdc201a</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2020-08-20T12:12:56-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Moved ReqCertSANameEmailResolver to pki-ca
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/62d4b779a14fe57c70ade63039b0ba2f82bf0aae">62d4b779</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2020-08-20T12:12:56-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Moved GetBySerial to pki-ca
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/00f01dbf1c5f3d906c7d9fa77cad7c7375f26ac0">00f01dbf</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2020-08-20T12:12:56-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Moved HashEnrollServlet to pki-ca
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/bc15cefe9e5c25cb53cf88c758201d8b07639f20">bc15cefe</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2020-08-20T12:12:56-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Moved CACertCAEnrollProfile to pki-ca
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/6ccdc79516bef1b8fc456f6e9141ae1566bc77c6">6ccdc795</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2020-08-20T12:12:56-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Moved ServerCertCAEnrollProfile to pki-ca
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/b07e3c9dd5749bb5e7b515d55dc234b8e74debac">b07e3c9d</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2020-08-20T12:12:56-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Moved UserCertCAEnrollProfile to pki-ca
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/3b964a46e59ebeb2f505cf23daddfcd554609bdf">3b964a46</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2020-08-20T12:12:56-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Moved CAEnrollProfile to pki-ca
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/acbd386f37e0276036195dc80607da6de6f89404">acbd386f</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2020-08-20T12:12:56-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Moved CMCOutputTemplate to pki-ca
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/a78fd6038b218a727236a5aaf394bf99a60bdf1d">a78fd603</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2020-08-20T12:12:56-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Moved CMCUserSignedSubjectNameConstraint to pki-ca
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/ac60586425557168700bbdd84d2ac45f405ac86b">ac605864</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2020-08-20T12:12:56-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Moved CMCUserSignedSubjectNameDefault to pki-ca
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/0485db3e1baf006cda7b126d3c7423ab5a68e1d0">0485db3e</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2020-08-20T12:21:35-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Moved CMCUserSignedAuth to pki-ca
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/f2e44afacc0f5f339b915fcb5bbdf55f23377917">f2e44afa</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2020-08-20T12:28:10-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Moved CAEnrollConstraint to pki-ca
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/5a5013ede8285b5afc17060378c5be43ba6c1ae4">5a5013ed</a></strong>
<div>
<span>by Alexander Scheel</span>
<i>at 2020-08-21T10:38:56-04:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Add JAXB Implementation dependency for JDK11+

Signed-off-by: Alexander Scheel <ascheel@redhat.com>
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/0c7f54fe96fab42336d9097261f4b850ff06db34">0c7f54fe</a></strong>
<div>
<span>by Alexander Scheel</span>
<i>at 2020-08-21T10:38:56-04:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Add Jakarta Activation dependency for JDK11+

Signed-off-by: Alexander Scheel <ascheel@redhat.com>
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/40857e61e4c1de9fd212dcb9e6417bd02027b7b1">40857e61</a></strong>
<div>
<span>by Alexander Scheel</span>
<i>at 2020-08-24T09:11:02-04:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Fix permissions when installing clone

When pkispawn runs, it executes as root. However, rarely is PKI
installed as root. The resulting permissions on ca.crt are 600,
preventing later pki-server migrate command from running, as it
runs as pkiuser, who doesn't have access to ca.crt. Fix the
permissions when we initially create ca.crt to be owned by pkiuser.

Signed-off-by: Alexander Scheel <ascheel@redhat.com>
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/87a44e923e83062f80a58f0f38c5bb8f622aba91">87a44e92</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2020-08-24T11:03:31-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Moved CrossCertPairSubsystem to pki-ca
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/539e10ff8fa1adb278329567c4e92aa48d92fa82">539e10ff</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2020-08-24T11:03:31-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Moved CertificatePair to pki-ca
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/b09df5c3fafee3c54cd7e05aa3ae10a3d1bf15c2">b09df5c3</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2020-08-24T11:03:31-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Moved LdapEncryptCertPublisher to pki-ca
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/8fabafa52681ce841d7854681c80767a908a39a3">8fabafa5</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2020-08-24T11:03:31-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Moved PKCS7Output to pki-ca
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/dfd0f525fa07689deb81ab47ef3b785a5ac3a3c2">dfd0f525</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2020-08-24T11:03:31-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Moved CMMFOutput to pki-ca
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/6a66f61e72ca256bc0c579c58833c88f49d4c0cc">6a66f61e</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2020-08-24T11:03:31-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Moved UniqueKeyConstraint to pki-ca
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/b6548a1d492f47191327a9a3ff8c41240bac0c6e">b6548a1d</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2020-08-24T11:03:31-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Moved UniqueSubjectNameConstraint to pki-ca
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/1063c6c855538b428a5373eadda27892495fddfe">1063c6c8</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2020-08-24T11:03:31-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Moved ServerKeygenUserKeyDefault to pki-ca
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/bd1f6853f1d2103b566f567ad9107f30d223e84f">bd1f6853</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2020-08-24T11:03:32-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Moved SigningAlgConstraint to pki-ca
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/69a840f7816705157a6d861c1a96792f80e94d33">69a840f7</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2020-08-24T11:03:32-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Moved SigningAlgDefault to pki-ca
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/2ef0b184de40cab8870fb70c6ab1eae11b361522">2ef0b184</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2020-08-24T11:04:54-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Updated log messages in AuthorityService
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/844268fd78deb935825fefd5593ff1b08397a476">844268fd</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2020-08-24T11:29:14-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Added CAEngine.getCA()

The CAEngine.getCA() has been added to return the main/host
CertificateAuthority instance.
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/987a4718c4b2578070cd15652b3cdbabae61afbe">987a4718</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2020-08-24T19:06:28-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Move CertificateAuthority.caMap to CAEngine
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/db000a35667af31ae6774b2a896fb928fde8895e">db000a35</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2020-08-24T19:06:34-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Move CertificateAuthority.getCAs() to CAEngine
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/d845df856dc13b1dcbe52f7074332500f124ade8">d845df85</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2020-08-24T19:06:41-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Move CertificateAuthority.getCA(AuthorityID) to CAEngine
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/3ea58b7bd9d46c3e92521ef5c46d8fa8f014bad9">3ea58b7b</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2020-08-24T19:06:43-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Move CertificateAuthority.getCA(X500Name) to CAEngine
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/e63f8b2491517865704fc3fc0caaf0cce54b4229">e63f8b24</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2020-08-24T19:10:35-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Remove unused ITimeSource
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/40bc98aebddff93ace46429cb43c5374a4280aae">40bc98ae</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2020-08-24T19:14:28-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Move CertificateAuthority.createCA() to CAEngine
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/83129466a0eadd4a9df0f7f5bcbed27d215c2038">83129466</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2020-08-24T19:14:28-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Add CAEngine.addCA()
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/9de5a14bb3e3ef7090f011a56f2a07803210ab7c">9de5a14b</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2020-08-24T19:14:28-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Add CAEngine.removeCA()
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/652eadb51523a3b9b0db98e872b47b09578f5f19">652eadb5</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2020-08-24T19:49:32-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Move CertificateAuthority.keyRetrieverThreads to CAEngine
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/bd525e0ba4a9af1e4ccb10d09ea9968ab81361db">bd525e0b</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2020-08-24T19:49:33-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Add CAEngine.hasKeyRetriever()
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/256248f90c1ab7e5b685e132886ac1a48889ddc1">256248f9</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2020-08-24T19:49:34-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Add CAEngine.addKeyRetriever()
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/8e8ac28272cec68e5cc632e6829c57c4c49fcbb3">8e8ac282</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2020-08-24T19:49:35-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Add CAEngine.removeKeyRetriever()
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/c73824cb533eda000b67a9137c270d1e7324f91e">c73824cb</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2020-08-24T19:49:36-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Clean up CertificateAuthority.initDefCaAttrs()
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/4be50f8418918671ab0c377abe177a6c610044e9">4be50f84</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2020-08-24T19:49:37-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Clean up CMSEngine.initializePasswordStore()
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/ef6bd38da74bb459f1516a0775373a093639a99f">ef6bd38d</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2020-08-24T19:49:38-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Clean up CMSEngine.configureAutoShutdown()
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/b1135ba1dde956f7a571e2d9c811612c5c64de3d">b1135ba1</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2020-08-24T20:59:12-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Add CMSEngine.initSecurityDomain()
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/8371f8137bcd0196647a6e3fedcbba1226bd4995">8371f813</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2020-08-24T20:59:59-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Add CMSEngine.configurePorts()
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/049aa69f3653df301c5bf76ae9be6d9706257667">049aa69f</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2020-08-24T21:00:00-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Add CMSEngine.initPlugins()
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/a8c1e749ae4f818c5e28aa1b032875ea914f3b4a">a8c1e749</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2020-08-24T21:10:11-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Add CMSEngine.initSecurityProvider()
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/790f90d920505b15eab38f7d8723ee418f2beed2">790f90d9</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2020-08-24T21:10:28-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Add CMSEngine.initLogging()
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/ea4b82a62a88cc3e7cd734345d2f099c10fb764c">ea4b82a6</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2020-08-26T09:29:12-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Remove unused ICertificateAuthority.PROP_CA_CHAIN_NUM
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/c2ede922d17e766caf584fc9d3663d136af68b3c">c2ede922</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2020-08-26T09:29:13-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Add CertificateAuthority.getCertChain()
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/39ed2641968730f22cea7264238bcb289c25e0ce">39ed2641</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2020-08-26T09:29:14-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Add CMSEngine.initDatabase()
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/be4512dc58d4bf79753c5cde1ae2787e3fe6d4e6">be4512dc</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2020-08-26T09:53:30-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Move CertificateAuthority.dbFactory to CAEngine
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/b23f5d2f701b2204ae73c181ac2e77dee2faa9a8">b23f5d2f</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2020-08-26T09:57:38-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Move CertificateAuthority.authorityBaseDN() to CAEngine
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/380919dc9651ab1d3e186c99567c15c104b02377">380919dc</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2020-08-26T09:57:38-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Move CertificateAuthority.entryUSNPluginEnabled() to CAEngine
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/07ad39b2536717c62f8a081c96a6d62a7c20695b">07ad39b2</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2020-08-26T11:33:12-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Move authority update tracker to CAEngine
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/d9e319853638d04ebc7c606447577ffdcdb81f86">d9e31985</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2020-08-26T11:33:16-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Move CertificateAuthority.getCommitConstraints() to CAEngine
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/a0651daae4a1ad5f95b01255430f0998337d1adc">a0651daa</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2020-08-26T11:33:16-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Move CertificateAuthority.postCommit() to CAEngine
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/2c08462cae0e1545e6fb4c494316a8a9b2864622">2c08462c</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2020-08-26T12:14:16-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Move CertificateAuthority.forgetAuthority() to CAEngine
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/287376e5b07a472efe2fe3c762c0542e88299aa1">287376e5</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2020-08-26T12:14:16-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Move authority deletion tracker to CAEngine
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/019cb15e91f54dba89029cdddb09a585e180b0ce">019cb15e</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2020-08-26T12:16:55-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Move CertificateAuthority.addAuthorityEntry() to CAEngine
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/65ff597559f4e29b5d776d1bf8afadadf94d1d71">65ff5975</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2020-08-26T12:16:56-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Move CertificateAuthority.modifyAuthorityEntry() to CAEngine
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/731cc8fca2c5f6cbdaee7476241e3731d81a7e54">731cc8fc</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2020-08-26T12:18:06-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Move CertificateAuthority.deleteAuthorityEntry() to CAEngine
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/11e88c9c7be5c561c15e06152c7060c5bae280de">11e88c9c</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2020-08-26T12:18:08-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Remove redundant CertificateAuthority.stopped
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/fd269bae8ab3276d6588820263e5bc15b67f957c">fd269bae</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2020-08-26T15:06:14-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Updated acmeIdentifier for ACME orders and authorizations

Previously the identifiers for ACME order and authorization
records were stored as "acmeIdentifier;<type>=<value>" in DS,
which doesn't seem to be supported in OpenLDAP. To support
both LDAP servers, the identifiers are now stored as
"acmeIdentifier=<type>:<value>".
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/f5ad995c5f341354d59fdb8f664f8b671f7b9f9c">f5ad995c</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2020-08-26T15:06:14-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Updated userCertificate for ACME certificates

Previously the certificate data for ACME certificates was stored
as "userCertificate=<data>" in DS, which doesn't seem to work in
OpenLDAP. To support both LDAP servers, the certificate data is
now stored as "userCertificate;binary=<data>".
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/483229ce8ed57fd38cf8282d3cee4a92867ec3f8">483229ce</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2020-08-26T15:06:14-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Added OpenLDAP database for ACME

A new OpenLDAPDatabase class has been added to provide an ACME
database in OpenLDAP. The class is currently identical to the
existing LDAPDatabase class, but it's provided for implementing
OpenLDAP- specific code in the future.

A new schema file, a sample initialization file, and a sample
configuration file for OpenLDAP have been added.

The pki-server acme-database-* commands have also been
modified to support an "openldap" type.

The ACME database documentation has been updated as well.
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/ae5e4d5c6616fc4e448952763d50f5045a850ed4">ae5e4d5c</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2020-08-26T15:06:14-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Added DS database for ACME

The LDAP database for ACME has been copied into new DS
database to distinguish it from OpenLDAP database. Once
IPA is updated to use the DS database, the LDAP database
will be dropped.
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/d30700d3655c59a7ec5daeaa6adf2d9363d52597">d30700d3</a></strong>
<div>
<span>by Dinesh Prasanth M K</span>
<i>at 2020-08-26T16:34:16-04:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Run QE tests on upstream CI pipeline on Vagrant

Provision 2 Vagrant VMs inside Macintosh (only Mac is supported in
GH actions):

controller:
  VM used to run the ansible playbook. The playbook is provisioned
  using Vagrant's inbuilt provisioners
master:
  VM acts as the PKI master node. topology-02 (discrete instance) is
  used to configure this node.

Note1: Static inventory file is used. This is because the playbook
is being executed from the guest VM (controller) and autogenerated
hostfile is unreliable.

Note2: When creating vagrant VMs, provisioning is suspended. This is
to resolve dependency b/w master and controller (ie) the latest built
packages need to be installed in master first before controller tries
to execute playbooks.

Signed-off-by: Dinesh Prasanth M K <dmoluguw@redhat.com>
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/6e9d5f9e3c76c2e51fe7464ca5f5ec40d32b8c55">6e9d5f9e</a></strong>
<div>
<span>by Shalini Khandelwal</span>
<i>at 2020-08-26T16:34:16-04:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Added changes in installation test playbooks to wait for other instances to come up.

Signed-off-by: Shalini Khandelwal <skhandel@redhat.com>
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/32c4a406847bfd1879447782fc734bbe086b6ba2">32c4a406</a></strong>
<div>
<span>by Dinesh Prasanth M K</span>
<i>at 2020-08-26T16:34:16-04:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Fix memory for the Vagrant VMs

The vagrant VM memory config was incorrect. This patch fixes the
error. The controller now gets assigned with 930MB of RAM and the
master gets around 2750MB of RAM

Signed-off-by: Dinesh Prasanth M K <dmoluguw@redhat.com>
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/0d97d0151774da7e0bf278f93d525ded64376a07">0d97d015</a></strong>
<div>
<span>by Dinesh Prasanth M K</span>
<i>at 2020-08-26T16:34:16-04:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Fix script file to grep from binary files

The tkstool outputs some binary characters. As a result, grep
thinks it is reading a binary file. This patch adds a grep
option to process the file containing binary characters as
Text file.

Ref: https://unix.stackexchange.com/q/335716/320815

Signed-off-by: Dinesh Prasanth M K <dmoluguw@redhat.com>
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/807bf6906e1742b0128a56a3d4efa7a3cba9230e">807bf690</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2020-08-26T16:57:03-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Fixed acmeServerCert profile

The acmeServerCert profile has been modified to remove
hard-coded URLs since they point to non-existent services
which might cause certificate validation issue.

An upgrade script has been added to fix the profile
configuration file if the profile has not been customized
by the admin.

https://bugzilla.redhat.com/show_bug.cgi?id=1868233
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/62d5799be73bd1c3a1b0551ce73dc78037bb5199">62d5799b</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2020-08-26T17:42:24-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Move CertificateAuthority.lwcaLoaded to CAEngine
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/8d0f12a9c6b3f379827bd3baf2eb57785bca0374">8d0f12a9</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2020-08-26T17:42:24-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Move CertificateAuthority.foundHostAuthority to CAEngine
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/b77557538fc975c4ceb3884bd1eee149c14873e8">b7755753</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2020-08-26T17:42:24-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Move CertificateAuthority.haveLightweightCAsContainer() to CAEngine
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/f23e55cb3ace3c7c05af5bdf90712e379d780aed">f23e55cb</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2020-08-26T17:42:24-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Move CertificateAuthority.readAuthority() to CAEngine
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/bed231d5a59e1399e9aef5f7bdf0dcf61107cea7">bed231d5</a></strong>
<div>
<span>by 06shalini</span>
<i>at 2020-08-27T21:26:19+05:30</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Updated pytest-ansible to latest package and added utils from pki integration-test module. (#535)

Signed-off-by: Shalini Khandelwal <skhandel@redhat.com>

Co-authored-by: Shalini Khandelwal <skhandel@redhat.com></pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/7abe19e5be79ecab51ea4b4e94fb7a7bb01dca1f">7abe19e5</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2020-08-27T14:49:25-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Fixed missing sslserver and subsystem certs

When installing an additional subsystem into an instance,
the deployment scriptlet has been modified to copy the
cert and request data for sslserver and subsystem certs
from the existing subsystem.

https://bugzilla.redhat.com/show_bug.cgi?id=1869893
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/7a5ade617d6abe45552b5f5bdcfef762e6ee94a9">7a5ade61</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2020-08-27T16:33:41-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Move CertificateAuthority.addHostAuthorityEntry() to CAEngine
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/15967493c710b6f416b3f5aa1079d686f39a115f">15967493</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2020-08-27T16:33:41-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Cleaned up CA SigningUnit.init()
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/929a3c9f68f2a5627adda73bd0a042be2bc66c8c">929a3c9f</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2020-08-27T16:33:41-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Add CertificateAuthority.initOCSPSigningUnit()
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/204e6db1464837a4ecc9164e1c6269fa6f406aab">204e6db1</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2020-08-27T16:33:41-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Add CertificateAuthority.initCRLSigningUnit()
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/bef964f830d4e39d482ad4195c7e67e173e5e64d">bef964f8</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2020-08-27T16:33:41-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Clean up CertificateAuthority.initSigUnit()
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/04b900f307903e87545d191298c2fabe6db1b6f5">04b900f3</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2020-08-31T11:39:57-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Add JAVA_VERSION for CMake

The RPM spec and CMake files have been modified to detect the
actual Java version used to build PKI and add the appropriate
libraries for that version.
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/abcfb633f06fd2e239d367aa2e789bc6dfd878a1">abcfb633</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2020-08-31T11:41:04-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Clean up CAEngine.addKeyRetriever()
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/f553c6e075c695690e04dcb534d489da3c4628ff">f553c6e0</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2020-08-31T11:41:04-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Add CertificateAuthority.generateSigningCert()
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/ab0c00cf95c226012f20961b299edb9cc0f81df1">ab0c00cf</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2020-08-31T11:41:04-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Move CertificateAuthority.createSubCA() to CAEngine
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/71b59059df21a1b0d54b9a1841a5f036a6a18cab">71b59059</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2020-08-31T11:41:04-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Add CAEngine.updateAuthoritySerialNumber()
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/2fdd665733cc4b6909ec70ea8df083db199882b0">2fdd6657</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2020-08-31T11:41:04-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Move CertificateAuthority.modifyAuthority() to CAEngine
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/331327dd13fbc7632c6a09c3cfeb76fa0e436e8f">331327dd</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2020-08-31T11:41:04-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Move CertificateAuthority.addInstanceToAuthorityKeyHosts() to CAEngine
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/9ceb9f580416a2258b39b838390f481a7f5c59b6">9ceb9f58</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2020-08-31T11:44:45-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Remove DBSubsystemDefaultStub
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/9e4833fc6278267637b81e5d83bb705f62a6a7ee">9e4833fc</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2020-08-31T11:44:45-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Remove ICryptoSubsystem
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/ce768ec26ff90235ef34d200af1cbcc472f14c62">ce768ec2</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2020-08-31T12:26:52-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Remove IDBSubsystem
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/641accda4d1e184c945b0f6824a51cefb65f54e9">641accda</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2020-08-31T12:26:52-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Move ReasonToRevoke to pki-ca
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/ce2829c3692ef033c133b3a3c9abc2365f082ec8">ce2829c3</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2020-08-31T12:26:52-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Update log messages in CertificateAuthority
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/e117f897a43b7f2ded0edbb204110357c29da2c0">e117f897</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2020-08-31T13:02:32-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Added upgrade script to fix missing cert/request data

An upgrade script has been added to fix the missing sslserver
and subsystem cert/request data by copying it from another
subsystem.

https://bugzilla.redhat.com/show_bug.cgi?id=1869893
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/9bb247e6bc296c2ea67cd7ddec6563758804876b">9bb247e6</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2020-08-31T16:18:24-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Update CMSEngine.init()
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/2c67dcfc55c97ca38666e310313cc96806b0b8bf">2c67dcfc</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2020-08-31T16:18:24-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Update CMSEngine.autoShutdown()
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/a8bceb9d25002116e9bda10efbaeda33b3233403">a8bceb9d</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2020-08-31T16:18:24-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Rename CMSEngine.initPlugins()
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/06c2d448712de1edb28eea23abf2da998219a09b">06c2d448</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2020-08-31T16:18:24-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Add CAEngine.initLogSubsystem()
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/19f4e6921613c24220be77bf85ab26bbd2606cc8">19f4e692</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2020-08-31T16:18:24-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Add CAEngine.initJssSubsystem()
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/315b0264c2901681bc227d5c96fde2951f3c8063">315b0264</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2020-08-31T16:19:03-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Add CAEngine.initDBSubsystem()
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/5916a9e80d4f0a3b51b17798b644c3efcbd38d6a">5916a9e8</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2020-08-31T16:19:03-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Add CAEngine.initUGSubsystem()
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/3b8037f939f3ea1738b14456fe5e9ed776edf3a9">3b8037f9</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2020-08-31T20:08:45-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Add CMSEngine.initOIDLoaderSubsystem()
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/b1904853e0bd41afa35958fc02e9bb61ab67181b">b1904853</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2020-08-31T20:08:50-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Add CMSEngine.initX500NameSubsystem()
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/d35abfff90432c930b076e670a55fe2b80154e3f">d35abfff</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2020-08-31T21:07:46-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Add CMSEngine.initRequestSubsystem()
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/ee57957fccec196ccbfd86ca0dcdbccae7e93848">ee57957f</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2020-08-31T21:41:07-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Replaced IJobsScheduler with JobsScheduler
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/e0b249636e2ea24d3d0633e65bf1d6e0a3dbd35f">e0b24963</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2020-08-31T21:54:07-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Add CMSEngine.initJobsScheduler()
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/a21d480dcd2e14b5b9cc52d4960a3499e0d0620d">a21d480d</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2020-09-01T11:17:15-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Replaced IAuthzSubsystem with AuthzSubsystem
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/bdea2888b4d32dbaafff07cc4def44a0142a1ec7">bdea2888</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2020-09-01T11:26:34-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Add CMSEngine.initAuthzSubsystem()
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/0775bb6005b21c25b7a11194d4361ad35dda3a2f">0775bb60</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2020-09-01T11:45:28-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Replaced IAuthSubsystem with AuthSubsystem
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/ed142dd43200be9f153698a770d51b4b67ca5bb9">ed142dd4</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2020-09-01T11:52:49-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Add CMSEngine.initAuthSubsystem()
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/d0922215837eb838b3cb5200faa2c45d16dca1b2">d0922215</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2020-09-01T12:32:52-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Move CertificateAuthority.mCertRepot to CAEngine
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/33b7abec20030390adf4cad3166df41defd17e63">33b7abec</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2020-09-01T12:32:52-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Move CertificateAuthority.mCRLRepot to CAEngine
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/e65d55da2cd3a27b1554c33d33202c2b918220cc">e65d55da</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2020-09-01T12:32:52-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Move CertificateAuthority.mReplicaRepot to CAEngine
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/97038b5119199414f5017ab710a47a2e43e247f5">97038b51</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2020-09-01T20:22:01-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Update CMSEngine.loadSubsystems()
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/244557a48f521321c5997610c233280b56901ab0">244557a4</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2020-09-01T20:22:01-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Update CMSEngine.initSubsystems()
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/6f634c5c42e2e567fc91a33317760a8366e64d0b">6f634c5c</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2020-09-01T20:22:01-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Update CMSEngine.startupSubsystems()
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/05e63a84bfadc4a8fc2a06f351bb78bfd1541a33">05e63a84</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2020-09-01T20:22:02-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Update CMSEngine.shutdownSubsystems()
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/e14fa10fdecc67cc911187a747d163346417bad8">e14fa10f</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2020-09-01T20:22:02-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Remove unused SubsystemInfo constructor
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/d968173e92aed100ca8755e3dba6cf3ec5baaf29">d968173e</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2020-09-01T20:22:02-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Remove unused subsystem lists in CMSEngine
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/a1c326d1ba991bbeafa50fe612c9ed319f6d4307">a1c326d1</a></strong>
<div>
<span>by Dinesh Prasanth M K</span>
<i>at 2020-09-02T10:12:44-07:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">CI: Use NFS instead of virtualbox guest

VBGuest addition to a VM requires a rebuild of plugins, causing
a whole lot of packages to be installed. This patch removes the
dependency on VBGuest and uses NFS to sync the folders between
guest and host.

Note that since we plan to add more tests, we are cutting out
F31 from this patch (ie) we will be running our tests on latest
stable fedora release

Signed-off-by: Dinesh Prasanth M K <dmoluguw@redhat.com>
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/cc6f657ee2d3110134bec1ec4ab8fe6ffa95502c">cc6f657e</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2020-09-02T21:45:52-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Move CertificateAuthority.mPolicy to CAEngine
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/6465213bb0d2b19c24e35e14cf14056c949763f9">6465213b</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2020-09-02T21:45:52-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Move CertificateAuthority.mService to CAEngine
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/b077273c6b19fa479059722140566d5cce64206a">b077273c</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2020-09-02T21:45:52-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Move CertificateAuthority.mNotify to CAEngine
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/44eb7eab3eefcb81ec8c5add7a383921563cca22">44eb7eab</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2020-09-02T21:45:52-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Move CertificateAuthority.mPNotify to CAEngine
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/59c5f50d2dcc6ad082bfed18ed1bcd359c8cfa89">59c5f50d</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2020-09-02T21:45:52-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Move CertificateAuthority.mRequestQueue to CAEngine
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/8f4b229df3ec3cf97306ccc89578390f3d527b90">8f4b229d</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2020-09-03T09:15:21-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Move SystemConfigService.processKeyPair() to Configurator
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/816866b9f1de73dc6cf6f17ba00aa9948f1c2120">816866b9</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2020-09-03T18:02:07-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Add Configurator.loadCert()
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/b799ba290090a47076649412f717e57ab3982191">b799ba29</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2020-09-03T18:02:50-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Add Configurator.generateCert()
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/05dbb9f08a548986e03820bff7cfc2ccfe166464">05dbb9f0</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2020-09-03T18:03:20-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Move SystemConfigService.processCert() to Configurator
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/ba5f1b2e7d8d342d1c89b821d144a86716e6a587">ba5f1b2e</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2020-09-03T18:03:21-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Add Configurator.setupCert()
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/c1f61a2e512635aba4d0fd861fdcadefb01337d7">c1f61a2e</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2020-09-04T09:11:59-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Move CertificateAuthority.mDefaultCertVersion to CAEngine
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/4349c90763faa2ccfc4c2aaa4eff6282257528ce">4349c907</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2020-09-04T09:11:59-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Move CertificateAuthority.mDefaultValidity to CAEngine
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/7de9663e8df1e81ce27132584cf7ec94993e1311">7de9663e</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2020-09-04T09:12:51-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Move CertificateAuthority.mEnablePastCATime to CAEngine
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/993f6345605c9a39e7adc360473a22ae1ce2f977">993f6345</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2020-09-04T09:12:51-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Move CertificateAuthority.mEnableOCSP to CAEngine
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/a43300fb27030bcc29bed3ca0635f71e8691692b">a43300fb</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2020-09-04T09:14:03-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Move CertificateAuthority.mFastSigning to CAEngine
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/c9981d4219cf6fef60bece88f7d065729b1b2fcf">c9981d42</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2020-09-04T12:52:12-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Move CertificateAuthority.mUseNonces to CAEngine
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/3653533ae6fa7c5d01953a10700b705999b7a28c">3653533a</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2020-09-04T12:53:01-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Move CertificateAuthority.mMaxNonces to CAEngine
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/d113c2f0b12d7a5a5bf1149bfac4392ebbf0abb0">d113c2f0</a></strong>
<div>
<span>by Dinesh Prasanth M K</span>
<i>at 2020-09-04T12:20:16-07:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">CI: Run healthcheck in CI pipeline

This patch executes both PKI healthcheck and IPA healthcheck
tools in corresponding CI jobs.

Signed-off-by: Dinesh Prasanth M K <dmoluguw@redhat.com>
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/c2f6b3b7fff949e6594b34bb768b40a40a0a04fc">c2f6b3b7</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2020-09-04T14:32:43-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Move CA services startup to CAEngine.initSubsystems()
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/f443dfa1c5bb2a8cb2b8bbf2ab57be6d612899b9">f443dfa1</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2020-09-04T14:32:43-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Move CertificateAuthority.mListenerPlugins to CAEngine
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/308668fb20cfa49b6d2c8b77a80e8acba0b5fc07">308668fb</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2020-09-04T14:32:43-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Move CertificateAuthority.mByName to CAEngine
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/675791845f6efd6ae5fe82adb15ff118a1507472">67579184</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2020-09-04T14:32:43-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Move CertificateAuthority.mCRLPublisher to CAEngine
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/46ef5dc5c8178c20534b1ef70fa31096078d0a9a">46ef5dc5</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2020-09-04T14:34:36-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Move KeyRetriever checks to CAEngine.startKeyRetriever()
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/e9e1ad287c066ee67f7b3b202d24027c41df3977">e9e1ad28</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2020-09-04T14:34:41-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Move KeyRetriever creation to CAEngine.startKeyRetriever()
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/9410e74350bdda2c7ed0630c985f0b9a26e268b3">9410e743</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2020-09-04T14:34:41-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Move CertificateAuthority.mPublisherProcessor to CAEngine
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/9ba9d601e99fc8913d937c61511e375dbebadd40">9ba9d601</a></strong>
<div>
<span>by jmagne</span>
<i>at 2020-09-04T17:05:41-07:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Address Bug 1787115 - [RFE] Need Method to copy SKI from CSR to Certificate signed. (#511)

This fix allows a way to configure a profile's SubjectKeyIdentifier process to optionally pick up
a SKI extension from the incoming CSR and use it instead of the one that is self calculated by the server.

Here is a proile snippet for the SKI as example:

policyset.caCertSet.8.default.name=Subject Key Identifier Extension Default
policyset.caCertSet.8.default.params.critical=false
policyset.caCertSet.8.default.params.messageDigest=SHA-1
policyset.caCertSet.8.default.params.useSKIFromCertRequest=true

Note the new param : useSKIFromCertRequest=true
This new param will default to false, thus not disturbing existing functionality.

When set to true, the CA will attempt to use the SKI extension within the CSR instead
of creating a new one unconditionally.

If the new param is fals or not present, the original functionality will execute.

If for some reason the ext can't be found in the CSR, the existing functionality will execute
as well.

Here is a simple CA Server CSR with a custom SKI to test with:

-----BEGIN NEW CERTIFICATE REQUEST-----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-----END NEW CERTIFICATE REQUEST-----

If the CSR doesn't have the extension while the param is set, the SKI will
be calculated as usual.

Co-authored-by: Jack Magne <jmagne@localhost.localdomain></pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/e67dc554c6059cda17cd5f6851dd839aa21fcef5">e67dc554</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2020-09-04T22:40:00-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Move CertificateAuthority.mCRLIssuePoints to CAEngine
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/8ca544d80546cc40d3e638a645d6c8b8315b50e2">8ca544d8</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2020-09-04T22:40:00-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Move CertificateAuthority.mMasterCRLIssuePoint into CAEngine
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/bd196146e6108000c8b65295c10b2cdbd3bc5548">bd196146</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2020-09-04T22:40:00-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Move CertificateAuthority.mIssuanceProtCert to CAEngine
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/405c12838a571d6ca5daf155363f09cc782bdfcf">405c1283</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2020-09-04T22:40:00-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Move CertificateAuthority.authorityMonitor to CAEngine
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/4a3ade755a17336e931dc57519adef3a6c3c2949">4a3ade75</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2020-09-08T18:09:26-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Move CertificateAuthority.mCertIssuedListener to CAEngine
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/be899c7b79b07f05dde1b0a47eab1c560cd6bbbd">be899c7b</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2020-09-08T18:09:28-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Move CertificateAuthority.mCertRevokedListener to CAEngine
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/dcc83f7cb4fb80fd32a70e9a08002d83ebe0d4e6">dcc83f7c</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2020-09-08T18:09:29-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Move CertificateAuthority.mReqInQListener to CAEngine
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/296c4bffe3e3d2bb26c9bee981c7c2176f237c23">296c4bff</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2020-09-08T18:09:30-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Clean up CertificateAuthority.startup()
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/2222ba4b0b7be56bf4216abe15514b46ad775fe7">2222ba4b</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2020-09-08T18:09:31-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Refactored CertificateAuthority constructor
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/958832039433ce8b6172aabe303e6cefdf144a9a">95883203</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2020-09-08T18:09:33-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Refactored CertificateAuthority.hostCA
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/4cbb18d12d078b7ce39101c9003bf3bf6e601e45">4cbb18d1</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2020-09-08T18:09:34-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Add CAEngine.getConnectionFactory()
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/6e553f66bafe7a3a4c7c07dfc60397dd0c2f4e3b">6e553f66</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2020-09-08T19:44:39-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Clean up SelfTestSubsystem initialization
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/149630e0c135311a2379f661ab0d36294dd626ff">149630e0</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2020-09-08T19:49:31-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Clean up CertificateAuthority initialization
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/75a713d91bb5121908cf290c3c31d8fd81b85905">75a713d9</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2020-09-08T19:49:31-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Clean up CrossCertPairSubsystem initialization
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/37bb71babeee94767f8c9cf3d21f050391c36c62">37bb71ba</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2020-09-08T19:49:31-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Clean up KeyRecoveryAuthority initialization
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/853b910d07b7ca0154001d8cfce0ebf35d8b582f">853b910d</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2020-09-08T19:49:31-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Clean up OCSPAuthority initialization
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/eac41bd95e6a3efbe2f9e48faf9d650bdce0ca96">eac41bd9</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2020-09-08T19:49:31-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Clean up TKSAuthority initialization
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/e6531d9bf0d7a4cbe346dc610c19ad3f41b2f18a">e6531d9b</a></strong>
<div>
<span>by Christina Fu</span>
<i>at 2020-09-10T15:40:45-07:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Bug1875563-Add KRA Transport and Storage Certificates profiles for IPA

This patch adds two profiles for IPA, namely
 caIPAKraTransportCert
 caIPAKraStorageCert

Both are consistent with with the existing profile caIPAserviceCert where
  visible=false
  auth.instance_id=raCertAuth
    raCertAuth is an instance of AgentCertAuth with
    agentGroup=Registration Manager Agents

Upgrade scripts are provided to handle upgrades as well.

fixes https://bugzilla.redhat.com/show_bug.cgi?id=1875563
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/421bf4c0edf82e4f4eeccb6cd426748508dbe01a">421bf4c0</a></strong>
<div>
<span>by Alexander Scheel</span>
<i>at 2020-09-11T13:04:36-04:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Update javax-activation paths for Debian

As reported by Timo on IRC.

Signed-off-by: Alexander Scheel <ascheel@redhat.com>
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/41c732a4d1b0f0e9f0654ef487a83c4cb80e4c6b">41c732a4</a></strong>
<div>
<span>by Alexander Scheel</span>
<i>at 2020-09-11T13:04:36-04:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Migrate JAVA_HOME in instance configuration

When we upgrade from F32 to F33, we need to be able to upgrade JAVA_HOME
to set it to the new value. This value will also change on F32 (from a
JDK8-specific path to a generic path). This requires migration to happen
on subsystem start.

This means that the recommended way to configure JAVA_HOME to a value
OTHER then what's shipped in /usr/.../pki.conf becomes to set it in
/etc/.../pki.conf, and means that /etc/sysconfig/tomcat.conf gets
rewritten each time.

Signed-off-by: Alexander Scheel <ascheel@redhat.com>
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/2a70b3f0bb07b7c21be66589e84bbcc5d8ec9a25">2a70b3f0</a></strong>
<div>
<span>by Alexander Scheel</span>
<i>at 2020-09-11T13:04:36-04:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Enforce JDK 8 source and bytecode everywhere

This will ensure that, as F33 and later releases happen, we'll continue
developing code compatible with RHEL 8 and F32.

Signed-off-by: Alexander Scheel <ascheel@redhat.com>
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/d367fd75d2f4900893688cdb07d068ae1ec25e55">d367fd75</a></strong>
<div>
<span>by Alexander Scheel</span>
<i>at 2020-09-11T13:04:36-04:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Keep JAVA_HOME in tomcat.conf

Despite the name tomcat.conf, this is also the main configuration file
loaded by instances. Instances (especially pkispawn) expect config to be
only the Tomcat configuration, despite loading configuration from the
environment as well. Eventually, we should migrate all of this to use
the global configuration rather than the per-instance configuration.

Signed-off-by: Alexander Scheel <ascheel@redhat.com>
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/c200594fe280881a0dfc07072e62080d019bebb7">c200594f</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2020-09-11T12:16:30-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Move Configurator.setupReplication() to SubsystemDBInitCLI
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/4abfdc77508545fb90ef127fbbf373ae1609d705">4abfdc77</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2020-09-11T12:16:30-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Clean up log messages in LDAPConfigurator
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/137815a593ad3ff9cd35fc509b75b470a543f3ef">137815a5</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2020-09-11T12:16:30-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Remove unused SystemConfigResource.setupClone()
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/1da816ca61209a5a260ab93af2f771588d42747e">1da816ca</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2020-09-11T12:16:30-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Remove unused CloneSetupRequest
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/206df0a6f0fe31a5e2f8e8d828f8e7ce8172a8bb">206df0a6</a></strong>
<div>
<span>by Dinesh Prasanth M K</span>
<i>at 2020-09-11T17:35:52-07:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Add CONTRIBUTING doc

Signed-off-by: Dinesh Prasanth M K <dmoluguw@redhat.com>
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/7c2f595dee00219ed53255c8ea5eea84a529e9b0">7c2f595d</a></strong>
<div>
<span>by 06shalini</span>
<i>at 2020-09-14T19:55:46+05:30</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Merging tier1 functional tests jobs to master (#553)

* Updated pytest-ansible to latest package and added utils from pki integration-test module.

Signed-off-by: Shalini Khandelwal <skhandel@redhat.com>

* Sync downstream test code with upstream for all tier1 jobs

Signed-off-by: Shalini Khandelwal <skhandel@redhat.com>

* Test checkin to run pipeline

Signed-off-by: Shalini Khandelwal <skhandel@redhat.com>

* Fixed external-ca and ldaps test jobs

Signed-off-by: Shalini Khandelwal <skhandel@redhat.com>

Co-authored-by: Shalini Khandelwal <skhandel@redhat.com></pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/3bccc93ee58f8a9d3204bb52bbffcf028233c415">3bccc93e</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2020-09-14T11:15:13-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Refactor LDAPConfigStore

The LDAPConfigStore has been modified to use an LDAPConnection
instead of an ILdapConnFactory.
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/83931e9357b56b0a02308ed3df7c2ed3bd513b4a">83931e93</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2020-09-14T11:15:13-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Move CAConfigurator.importProfiles() into CAProfileImportCLI
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/f1b8e6b80f87820e907128710af2c13ee705195c">f1b8e6b8</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2020-09-14T11:15:13-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Add pki-server ca-profile-import
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/c14511a8d1b0047a7e4d9a017c4c65369fb86793">c14511a8</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2020-09-14T11:15:13-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Remove unused SystemConfigResource.setupDatabase()
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/fbccd2ad8445389a61a48fd7045a55b3b0607f99">fbccd2ad</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2020-09-14T11:15:13-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Remove unused DatabaseSetupRequest
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/1623b441892e08950d3222a46eae0bfbae1e371e">1623b441</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2020-09-14T11:17:59-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Clean up PKIDeployer.setup_cert()
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/3c23c84045a69f0af5f8aa9705b24d5ce5b4b994">3c23c840</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2020-09-14T11:34:44-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Refactor Configurator.createAdminCertificate() (part 1)

The code that imports the admin cert has been moved out of
Configurator.createAdminCertificate(). The code that uses
the CA to generate the admin certificate has been moved into
CAConfigurator.
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/26da24480dc849ca0c415763af1846fd2fe6709d">26da2448</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2020-09-14T11:50:51-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Refactor Configurator.createAdminCertificate() (part 2)

The Configurator.createAdminCertificate() that uses the CA
to create the admin cert has been moved into CAConfigurator.
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/e87fa82a723e920b24cd6e55d0f367ef17cf292e">e87fa82a</a></strong>
<div>
<span>by Dinesh Prasanth M K</span>
<i>at 2020-09-14T18:42:31-07:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Fix syntax error in performance testing script

Missing paranthesis causes error while trying to execute performance
test.

Signed-off-by: Dinesh Prasanth M K <dmoluguw@redhat.com>
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/41ba09a5ffa20b5b5cd5d369539c25ba1fb11a70">41ba09a5</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2020-09-14T21:24:10-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Move UpdateCRL to pki-ca
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/186adaf541760095131ac8f07f66647c1ba89876">186adaf5</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2020-09-14T21:24:10-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Move Configurator.createPKCS7()
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/e7a997eca380ddcda0254bf86a56007852328b0d">e7a997ec</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2020-09-14T21:24:10-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Refactor Configurator.loadCert()

The code that creates the cert and request records for
existing certs in Configurator.loadCert() has been moved
into CAConfigurator.
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/75c7a913e7da22a5ee886579d751f974f4cc8f7c">75c7a913</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2020-09-14T21:24:10-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Refactor Configurator.configCert()

The Configurator.configCert() has been renamed to generateCert()
and modified to store the cert data in the Cert object instead
of returning an X509CertImpl object.
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/c75022b4748ef42e27683730736f2d6f50e8be3e">c75022b4</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2020-09-14T21:24:10-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Remove unused Cert.mDN
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/a470a8987cc783bc3a9ad81860746be3b96840fd">a470a898</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2020-09-14T21:24:10-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Refactor Configurator.configRemoteCert()

The Configurator.configRemoteCert() has been modified to
take a binary instead of Base64-encoded request data.
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/795008bdb32dd5eea9e7d47123e8c8f4ea6fef8a">795008bd</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2020-09-14T21:24:10-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Move CertUtils.buildSANSSLserverURLExtension() to Configurator
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/99e20c8aac276804a7655dfcaa5f55639bd290b0">99e20c8a</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2020-09-14T21:24:10-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Add Configurator.generateLocalCert()
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/d46659ba9c86700d59d6150f4822ea17ed30f780">d46659ba</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2020-09-14T21:24:10-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Add Configurator.generateRemoteCert()
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/b2e62dc4d328f59d9a5529fdd9ea99dd22091316">b2e62dc4</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2020-09-14T21:33:44-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Refactor Configurator.generateCertAndRequest()

The Configurator.generateCertAndRequest() has been replaced
with direct calls to generateCertRequest() and generateCert().
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/5f061a2d234d3e4892aad609f4fce31c369d4f15">5f061a2d</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2020-09-14T21:33:44-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Refactor Configurator.generateCert()

The code that generates the certs for CA and the
SSL server cert for CA clone has been moved into
CAConfigurator.generateCert().
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/83f4259ea3f50d38b2281233277ef55bf35873bc">83f4259e</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2020-09-14T21:33:44-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Move Configurator.generateLocalCert()
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/43df39317765c77e1ecbbd1f34503c8800e36a9c">43df3931</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2020-09-14T21:33:44-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Move Configurator.createRequest()
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/40bd8274ad980be3320fd63730b2ff139480a8e0">40bd8274</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2020-09-14T21:34:21-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Update log messages in CertificateAuthority
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/02c0a0c20b986146b7a7f907f56705159a9863e9">02c0a0c2</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2020-09-14T21:34:24-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Update log messages in CAEngine
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/127a233d4979ee723ce6736c2cea54c048e738f5">127a233d</a></strong>
<div>
<span>by Dinesh Prasanth M K</span>
<i>at 2020-09-15T16:15:42-07:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Update README.md with instructions

Our README.md currently has very low-level technical info
which might not serve its use for a beginner. The README
should act as a good cover page for the project to attract
more contributors and users and, provide minimal yet useful
information for new-users.

This patch updates the existing README.md file with such
minimal, yet useful information

Signed-off-by: Dinesh Prasanth M K <dmoluguw@redhat.com>
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/a85d998c6ec9141a0109a47ff7e230fcc1d5578a">a85d998c</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2020-09-16T13:27:28-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Updated ACME docs
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/f35d270b5551ae35e699163d78d451e5b7c247da">f35d270b</a></strong>
<div>
<span>by Alexander Scheel</span>
<i>at 2020-09-17T11:01:51-04:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Add dependencies in Java11-specific libraries

This ensures lib/ gets created prior to any Java11-specific symlinks.

Signed-off-by: Alexander Scheel <ascheel@redhat.com>
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/54de035b3a16144a888d807c636d05b15c806572">54de035b</a></strong>
<div>
<span>by Alexander Scheel</span>
<i>at 2020-09-17T11:01:51-04:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Make PKI_JAVA_PATH respect PKI_JAVA_PATH

Signed-off-by: Alexander Scheel <ascheel@redhat.com>
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/8c6af8d9c5482ae95c2912ba8553474e9e8e6435">8c6af8d9</a></strong>
<div>
<span>by Alexander Scheel</span>
<i>at 2020-09-17T11:01:51-04:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Fix %{java_version} -> ${java_version}

Because java_version isn't a RPM spec file attribute (and is instead an
inline shell variable), we have to use $ instead of % to reference it.

Signed-off-by: Alexander Scheel <ascheel@redhat.com>
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/6f0da7cafd877f097bc3c2db7eaaed107ec6467e">6f0da7ca</a></strong>
<div>
<span>by Alexander Scheel</span>
<i>at 2020-09-17T12:06:55-04:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Add Fedora 33 image, switch to r.fp.o

registry.fedoraproject.org (r.fp.o) has more up-to-date Fedora images
than Dockerhub does. This is because Dockerhub is external infra with
a review process, whereas registry.fedoraproject.org is directly
controlled by the Fedora Project, so images can be pushed directly.

Signed-off-by: Alexander Scheel <ascheel@redhat.com>
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/782f9df466a4b28a9254c57b66bdb44660b52347">782f9df4</a></strong>
<div>
<span>by Alexander Scheel</span>
<i>at 2020-09-17T12:06:55-04:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Fix variable names for flake8 on python3.9

Signed-off-by: Alexander Scheel <ascheel@redhat.com>
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/fca780375a0845448fa5c23c2aaaed304ff59680">fca78037</a></strong>
<div>
<span>by Alexander Scheel</span>
<i>at 2020-09-17T12:06:55-04:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Disable W0707 warning due to output

Consider explicitly re-raising using the 'from' keyword

Signed-off-by: Alexander Scheel <ascheel@redhat.com>
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/91fb4a88e8babd01350003579785bfaaceb2f706">91fb4a88</a></strong>
<div>
<span>by Alexander Scheel</span>
<i>at 2020-09-17T15:31:42-04:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Migrate from commons-lang2 -> commons-lang3

Note that this is blocked on lang3 >= 3.10 landing in Fedora 31.

Credits: Fabio "decathorpe" Valentini

Related: https://pagure.io/dogtagpki/issue/3205

Signed-off-by: Alexander Scheel <ascheel@redhat.com>
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/64c17e27258ba224c9e59365904d0156f8bb3a76">64c17e27</a></strong>
<div>
<span>by Alexander Scheel</span>
<i>at 2020-09-17T15:31:42-04:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Work with older Apache Commons Lang3

Signed-off-by: Alexander Scheel <ascheel@redhat.com>
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/d9491b46a5077faf47750a0a273b06434cdb6048">d9491b46</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2020-09-17T18:15:49-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Add package.json for NPM

The package.json has been added in order to import files
distributed via NPM (e.g. PatternFly, jQuery).
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/b9a832a2e5e10a5694f16eb5d0a96ebfe8896e7c">b9a832a2</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2020-09-17T18:15:49-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Add PatternFly 4.35.2 for ACME

Some PatternFly files have been imported for ACME.
A tool has been added to simplify updating the files
in the future.
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/960cf8a0368ff04bae9c9fb99adc27b1b8269bbc">960cf8a0</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2020-09-17T18:15:49-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Add jQuery 3.5.1 for ACME

A minimized jQuery file has been imported for ACME.
A tool has been provided to simplify updating the file
in the future.
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/88c7a1abe498ff6165e6005fcf8f5e5e005e0783">88c7a1ab</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2020-09-17T18:15:49-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Add ACME front page

A new index.jsp has been added for ACME webapp. The web.xml
has been modified to map only ACME URLs to ACME application.
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/a0bd61a26f2f741cb6a83b1ee1dfb32a0be8c3de">a0bd61a2</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2020-09-17T18:26:02-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Fix NPE in TPSProcessor.mapCredFromMsgResponse()

The TPSAuthenticator has been modified to no longer store a
reference to the authentication manager during initialization.
Instead, it will get the authentication manager directly from
the AuthSubsystem when requested in getAuthManager().

The TPSProcessor.checkAndAuthenticateUser() has also been
modified to chain the original exception to provide the complete
stack trace.
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/4c3ddb0c2d3db36a5a9327eec557629c6d4a30bf">4c3ddb0c</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2020-09-21T09:47:21-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Remove unused Profile.mOwner
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/d38026410cd9ecd2415e041c2c54efe73d7284f3">d3802641</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2020-09-21T09:51:09-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Rename IProfileAuthenticator to ProfileAuthenticator
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/2ed602333e1a32dbe5f38e0477928ec3641efd2d">2ed60233</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2020-09-21T09:51:10-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Rename IAuthManager to AuthManager
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/c7fa66179ba6241cb57ef5ca5e3ea4465a9052d3">c7fa6617</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2020-09-21T09:51:10-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Rename ICertUserLocator to CertUserLocator
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/0bcca28aecdda0a56019842019a4040a1fe0484c">0bcca28a</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2020-09-21T09:51:11-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Move CertUserLocator to pki-server
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/8ef461d0a994372a9763f1dcac202371ce5076b5">8ef461d0</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2020-09-21T09:51:13-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Move CMCSharedTokenSubjectNameConstraint to pki-ca
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/6db61a9b73e71acb622bc0f011b390a747b70472">6db61a9b</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2020-09-21T10:46:01-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Merge ILdapConnInfo into LdapConnInfo
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/679c099021d6b5a3013a7c6dd43603f9463ae3a6">679c0990</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2020-09-21T10:46:01-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Merge ILdapAuthInfo into LdapAuthInfo
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/fe9fff13e45bde8b396f0d95cd69a8746f2a3cc3">fe9fff13</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2020-09-21T10:46:01-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Clean up LdapConnInfo
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/c0309750fc2ed60b7e43d9a6a9fe6cb1568fcdca">c0309750</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2020-09-21T10:46:01-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Clean up LdapAuthInfo
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/5a5349c073c9512df5824c2c8ba9f14e76789633">5a5349c0</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2020-09-21T10:46:01-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Remove unused ISubsystem from Profile.init()
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/78671846a5c5751b8f77ff04170811fb32a197b0">78671846</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2020-09-21T10:46:01-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Move BaseSubsystem into pki-server
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/1eba66ed09e405980224c7add51ae4be805ad386">1eba66ed</a></strong>
<div>
<span>by Dinesh Prasanth M K</span>
<i>at 2020-09-21T10:46:48-07:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Enable COPR_REPO to fix QE tests in CI

Note the use of delimiter ~ instead of / since the copr
name consists of / and @ characters.

Signed-off-by: Dinesh Prasanth M K <dmoluguw@redhat.com>
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/c8470c3dcd5b82ba6840b06f53b8a2e4a4ecbba6">c8470c3d</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2020-09-21T14:13:28-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Add LDAPConnectionConfig getters
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/e1785072e30b4912b5d660f9d1baf8b1bfff259e">e1785072</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2020-09-21T14:13:28-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Add PKISocketConfig
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/083c1814b7415f1bb69fe4c702c1da832d5fd31c">083c1814</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2020-09-21T14:13:28-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Clean up NPM tools
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/495e768f6c23876ea4a6eae1dea28dbc7b5a5522">495e768f</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2020-09-21T14:13:28-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Clean up Client.createProxy()
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/14caa1fe0eeffaca653ca427cc5323a45bf7c987">14caa1fe</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2020-09-21T14:13:28-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Add Client.get() and post()
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/aefb34f84ab8344c518abe8effcf74942bc3d646">aefb34f8</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2020-09-21T16:40:29-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Replace PKIConnection.resteasyClient with client
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/f8747a8ad1bb6c855b208432e02b55344b5d8cf4">f8747a8a</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2020-09-21T16:41:20-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Add PKIConnection.target()
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/43d111d4826f8cab94c55abb04c3cc69681c3cc3">43d111d4</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2020-09-21T16:41:27-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Add PKIClient.setOutput()
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/1de3e2358a26bd4708e1399e9c342d832c930bd9">1de3e235</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2020-09-21T16:48:47-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Merge PKIConnection.get() and post() to PKIClient
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/807f05681bf3ec74d630fa8ddb0a32554535a820">807f0568</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2020-09-21T17:30:50-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Merge PKIConnection.createProxy() into PKIClient
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/1354de3d2d3d81da98e89b90180bede13e270270">1354de3d</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2020-09-21T17:31:33-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Rename AccountInfo to Account
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/9fd77d2211031c73c4e5c45c7f242d9a05aad196">9fd77d22</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2020-09-21T18:53:20-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Add JSON parser for Account class
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/cd878aba21f0c9ef5feb2a0f62e2e69fdce3113b">cd878aba</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2020-09-21T19:20:38-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Merge PKIConnection.getEntity() into PKIClient
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/00d2015f11d77af86ea546e7cad8f2b3ea9de5be">00d2015f</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2020-09-21T21:36:47-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Add response type to PKIClient.get() and post()
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/85a88309bbf1b63445c31db1291c80972a1758a6">85a88309</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2020-09-21T21:36:47-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Add response type to Client.get() and post()
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/f751540226ca937d129808dfcdc1644f1110397a">f7515402</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2020-09-21T21:39:50-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Update AccountClient

The AccountClient has been modified to use get() instead
of AccountResource.
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/f5864246b478f3413052129ef7e44dfa55f647a3">f5864246</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2020-09-21T21:40:08-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Merge AccountResource into AccountService
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/e680746ac4926367aef5c3ae3404dbb23c07eb19">e680746a</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2020-09-22T08:51:08-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Clean up JSON mapping in ResourceMessage
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/8b5eb770a93fd5399e7212ccaaf2dc9931a04545">8b5eb770</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2020-09-22T08:51:09-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Move ACME.randomAlphanumeric() into ACMEEngine
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/2797b6bfcba412362c96b5e72d5d248b64795247">2797b6bf</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2020-09-22T09:11:46-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Add ACMEEngine.setEnabled()
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/29b191e6f5391c574ec12db95f15e948ea54f017">29b191e6</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2020-09-22T18:24:32-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Fix typos in ACME docs
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/e37ac8134c19e246c59ae5fab5585a0038c37ce4">e37ac813</a></strong>
<div>
<span>by Alexander Scheel</span>
<i>at 2020-09-23T05:46:19-04:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Remove SSL configuration; rely on crypto-policies

When TLSv1.3 support landed in Fedora and RHEL, crypto-policies enabled
it everywhere including in FIPS mode. However, because we bounded the
range above by TLSv1.2, we wouldn't negotiate TLSv1.3 when communicating
with CA instances. crypto-policies should be the single source of truth
for these values, and we shouldn't limit ourselves artificially.
Instead, users should change crypto-policies to the correct policy for
their needs.

Signed-off-by: Alexander Scheel <ascheel@redhat.com>
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/8400f54a16a0e47c93faf9f26afcdeac692980c7">8400f54a</a></strong>
<div>
<span>by Alexander Scheel</span>
<i>at 2020-09-23T05:46:19-04:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Align server.xml with crypto-policies

We shouldn't set custom ciphers in server.xml as they'll override the
default NSS values. These values already align with crypto-policies, and
these legacy configuration options result in global values which apply
to all parts (client and server) of the PKI configuration. Instead,
server-specific values should be chosen by using standard Tomcat
parameters:

https://tomcat.apache.org/tomcat-9.0-doc/config/http.html#SSL_Support

These are:

 protocols="<values>"
 ciphers="<values>"

See the tomcat documentation for more information.

Signed-off-by: Alexander Scheel <ascheel@redhat.com>
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/b21ac386cdafda0beec995d9cd388b30f6b081e3">b21ac386</a></strong>
<div>
<span>by Alexander Scheel</span>
<i>at 2020-09-23T05:46:19-04:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Remove unused SSLVersionRange code

This code shouldn't be used as it affects global NSS configuration; we
should leave these at the default values and only change individual
SSL-backed PRFileDesc instances instead.

Signed-off-by: Alexander Scheel <ascheel@redhat.com>
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/3dec5afa358adf49cc1698411d6a247f54681c87">3dec5afa</a></strong>
<div>
<span>by Alexander Scheel</span>
<i>at 2020-09-23T05:46:19-04:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Enable PHA in legacy SSLSocket

Signed-off-by: Alexander Scheel <ascheel@redhat.com>
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/0615fb891a6d5c8bc165b2ff6c4ae20c84efdda0">0615fb89</a></strong>
<div>
<span>by Alexander Scheel</span>
<i>at 2020-09-23T05:46:19-04:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Add migration script to remove legacy config

Signed-off-by: Alexander Scheel <ascheel@redhat.com>
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/71d70af8d80585941d0389a6bf38788a5c3f74e7">71d70af8</a></strong>
<div>
<span>by Alexander Scheel</span>
<i>at 2020-09-23T05:46:19-04:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Bump JSS to reflect PHA dependency

This commit never made it to v10.9 branch, but it has the same
dependency. SSLSocket.enablePostHandshakeAuthDefault was added in JSS
v4.7.3, hence the JSS version bump.

Signed-off-by: Alexander Scheel <ascheel@redhat.com>
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/9bd1c6a0597d081c6444c065237151967aac7c90">9bd1c6a0</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2020-09-23T08:36:47-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Fix PKI_JAVA_PATH
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/4a45608246d5191d7de389d33a78d3d56ad2fb8f">4a456082</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2020-09-23T08:46:17-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Remove duplicate ldapjdk.jar in ACME
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/96fd9e001ab3d7d63dee15751f46281cffdda5e2">96fd9e00</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2020-09-23T08:57:18-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Rename LDAPDatabase.basedn to baseDN
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/b578706dbddc36335f65fc13eb2c8a43463a939f">b578706d</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2020-09-23T18:27:02-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Update links to project website
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/9fc36ca54d4f97bafb596ae391124ab7fd0289fb">9fc36ca5</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2020-09-24T12:52:32-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Move ACME common classes to pki-certsrv

The ACME common classes have been moved into pki-certsrv
package since they will be needed by ACME clients.
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/9ec48ef9d5615a6365a05600d8622415ed05444b">9ec48ef9</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2020-09-25T11:55:37-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Update reqId in CertUtils.updateLocalRequest()
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/12bae6139240e18fc8321e21f6770c6b7525b6a6">12bae613</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2020-09-25T11:55:38-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Clean up preop.cert.<tag>.reqId
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/fe9e75a836e30aa1aae72994a3280a613c113351">fe9e75a8</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2020-09-25T11:55:39-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Move CertUtils.updateLocalRequest() to CAConfigurator
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/180bee977b8b6034230331b181e998f2f09c8645">180bee97</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2020-09-25T11:55:41-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Merge Configurator.handleCert() into processCert()
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/4a5029e4bf4b75c477858f2955effe148e8178d2">4a5029e4</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2020-09-25T11:55:42-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Merge Configurator.importCert() into processCert()
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/a10ec92fa7d33835d107948d12547d6e77953c61">a10ec92f</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2020-09-25T11:55:43-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Move TKSKnownSessionKey to pki-tks
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/78faaf369e798f6071383840a5bfe9ed4b95994f">78faaf36</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2020-09-25T11:55:44-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Clean up log messages in PluginRegistry
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/c1ef9ce337969b6c3d1833da6d59a878a42f4d27">c1ef9ce3</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2020-09-25T14:04:23-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Remove unused CertUtil.findCertificate()
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/06eecf766b2a79adf211ad8f6111c1e1dd72725f">06eecf76</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2020-09-25T14:24:12-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Replace CMSEngine with CAEngine in pki-ca
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/0ce630d0c64cbf191ad835ebe8fa01bb50e00609">0ce630d0</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2020-09-25T14:24:13-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Replace CMSEngine with KRAEngine in pki-kra
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/7e380ea94e21ad84874ade82714cfddd9922581f">7e380ea9</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2020-09-25T14:24:14-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Replace CMSEngine with OCSPEngine in pki-ocsp
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/a4d29a9b82e6862e36e575006524f700442f0455">a4d29a9b</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2020-09-25T14:24:15-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Replace CMSEngine with TKSEngine in pki-tks
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/4a3b2729fdfeafe39abd5eb97ca33ef5e9475107">4a3b2729</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2020-09-25T14:24:15-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Replace CMSEngine with TPSEngine in pki-tps
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/a34ac929e66e217715e6759a0116a2aece525b34">a34ac929</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2020-09-25T15:18:41-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Replace EngineConfig with TKSEngineConfig in pki-tks
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/989cbe642cf1e55a23707cc54bdb649045b950f9">989cbe64</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2020-09-25T15:18:42-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Add setter/getter for tps.list
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/b8bb2e9df120b325e6fb44da9c767a705fc28832">b8bb2e9d</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2020-09-25T15:18:43-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Add TPSConnectorConfig
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/040b5657b90768a434a9b9b083be335d44080b7b">040b5657</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2020-09-25T15:18:44-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Add setters/getters for TPSConnectorConfig
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/061078527e38992d10ea7e3bafb3c7c4f513b306">06107852</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2020-09-28T14:48:36-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Update NPM package files
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/ddb373451e94e8ff142519d64c523df7aecfe17f">ddb37345</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2020-09-28T20:52:08-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Clean up SAN parameters handling
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/d6677b13ea99c29bd0020d259932e1de1bd65036">d6677b13</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2020-09-28T20:52:08-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Remove UGSubsystem.getCertUserLocator()
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/e51a3f40d8e7a8e96dfe84638d470e1c9c86d329">e51a3f40</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2020-09-28T20:52:08-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Remove unused User.mBase
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/ea6c1fc1956ef15d01cb7272b399ca407c299c18">ea6c1fc1</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2020-09-28T20:52:08-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Remove unused Group.mBase
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/10dc5005b4eb6c49e9f9036a187ae860f6f400fc">10dc5005</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2020-09-28T20:52:08-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Remove unused IUsrGrp
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/c0f09c5e1c71da5559106ac290ff1d1137ed4b03">c0f09c5e</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2020-09-28T20:52:08-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Remove unused IIdEvaluator
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/3176ae6c2017df667461905048269e628c5eb2a7">3176ae6c</a></strong>
<div>
<span>by Dinesh Prasanth M K</span>
<i>at 2020-09-29T13:24:05-04:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Fix brackets in revocation performance test

Signed-off-by: Dinesh Prasanth M K <dmoluguw@redhat.com>
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/3bf4240254c51966e48a9b7406573e0434c3f7f5">3bf42402</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2020-09-29T14:29:15-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Add AppService

The AppService has been added to provide a list of subsystems
deployed on the instance. The list is generated by checking each
subfolder under <instance>/conf to see if it has a corresponding
deployed web application. The /pki/ui page has been modified to
use the AppService to provide links to all subsystems on the
instance.
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/4e10ad78013f0d6c9fc1a737a056a7110a9bae84">4e10ad78</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2020-09-29T15:39:34-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Add ACMEManagedService

The ACMEManagedService annotation has been added to apply the
ACMERequestFilter to certain services only rather than the
entire ACME responder.
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/df7c5b23c80fd5e6a2702a8fecd68b49cbaa8933">df7c5b23</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2020-09-29T15:39:34-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Add ACMERealm

The ACMERealm has been added to define the users and groups
allowed to access certain services in the ACME responder.
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/1d46b9cdb5182862286a8b94e2efa11e9fe72cbd">1d46b9cd</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2020-09-29T15:39:34-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Add LDAPRealm and DSRealm for ACME

The DSRealm (which extends LDAPRealm) has been added to
define the ACME realm using users and groups in DS.
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/8fea902e98c79519e93f755cba3529c4d0a860de">8fea902e</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2020-09-29T15:39:34-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Add pki-server acme-realm-show/mod commands

The pki-server acme-realm-show/mod commands have been
added to display and configure the ACME realm.
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/10e3870105624ffcc5f0798480be8b4213c4c0ad">10e38701</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2020-09-29T15:39:34-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Add ACMELoginService and ACMELogoutService

The ACMELoginService and ACMELogoutService have been added
to authenticate into the ACME responder.
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/361d1227d25cd337451871b8f41db377e7d38fd5">361d1227</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2020-09-29T15:39:34-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Add ACMEEnableService and ACMEDisableService

The ACMEEnableService and ACMEDisableService have been
added to enable/disable services in the ACME responder.
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/69eaf22ba0efef9a314a86fc07375f16cd3d0257">69eaf22b</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2020-09-29T15:39:34-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Add pki acme-info command

The pki acme-info command has been added to show
some information about the ACME responder.
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/65a3ea2352785a70ed97600871d7fbd9739f0021">65a3ea23</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2020-09-29T15:39:34-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Add pki acme-enable/disable commands

The pki acme-enable/disable commands have been added to
enable/disable services in the ACME responder.
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/3b5a26e60755417d71f86dd4ea34a529b52a03f1">3b5a26e6</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2020-09-29T15:39:34-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Update ACME docs
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/c863e587a8e63bf218608899435851262f3ff4a1">c863e587</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2020-09-29T17:21:31-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Move base/common/src to base/common/src/main/java
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/64caba59f1c0ca9b8b4154b51979216c4c7fef2f">64caba59</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2020-09-29T18:18:34-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Move base/common/functional/src to base/common/src/test/java
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/1caad924f318e548220a10519191ce08993f2973">1caad924</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2020-09-29T19:01:49-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Add UGSubsystemConfig
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/0acf647c302ce45b2c2a63bb68142fcc2d346860">0acf647c</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2020-09-29T19:01:50-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Clean up UGSubsystem.init()
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/823c84057ea0852d16d1f6fc65273e17f246c05f">823c8405</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2020-09-29T19:01:51-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Remove unused UGSubsystem.mId
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/8fe1284e7e22b42a8027bc983d5b1e5bbd3c85ee">8fe1284e</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2020-09-29T19:01:52-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Remove unused UGSubsystem.getDescription()
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/c69f970c15683a4fe14a24518c965ed21a140dfe">c69f970c</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2020-09-29T19:01:53-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Clean up log messages in UGSubsystem
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/3d41b645b5790e1b88e852fc99ca82871c197fea">3d41b645</a></strong>
<div>
<span>by Alexander Scheel</span>
<i>at 2020-09-30T09:19:15-04:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Remove net-tools as dependency

As far as I can tell, this package isn't required by the new
pkispawn installer. As people are asking for it to be removed from
Fedora ELN, we should drop our dependency on it.

Signed-off-by: Alexander Scheel <ascheel@redhat.com>
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/4df4769e60ccd04a68a247621133c37217e990a1">4df4769e</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2020-09-30T10:56:27-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Replace CMSEngine.getEEHost() with EngineConfig.getHostname()
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/b9567d0b18b09f1e128afb9a04e966e9407453c8">b9567d0b</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2020-09-30T10:56:29-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Replace CMSEngine.getEESSLHost() with EngineConfig.getHostname()
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/e2a49f6611407346495dfa6485775d632d2be65e">e2a49f66</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2020-09-30T10:56:31-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Replace CMSEngine.getEENonSSLHost() with EngineConfig.getHostname()
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/4e8443b894c429e167d1a954606980288360e932">4e8443b8</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2020-09-30T10:56:33-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Replace CMSEngine.getAgentHost() with EngineConfig.getHostname()
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/ee755d9f4191fc073c645bcee535922fcd83d919">ee755d9f</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2020-09-30T10:56:34-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Remove unused CMSEngine.getAdminHost()
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/78ffb9c9d575df8d2477a497bceff9f882e0c8a8">78ffb9c9</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2020-09-30T10:56:35-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Remove unused CMSEngine.hostname
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/a7ea9abf83a60741ec1532a0ae6a1480c38d2d53">a7ea9abf</a></strong>
<div>
<span>by jmagne</span>
<i>at 2020-09-30T10:36:40-07:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Resolve: Bug 1710978 - TPS - Add logging to tdbAddCertificatesForCUID if adding or searching for cert record fails (#560)

Submitted by RHCS-maint.

This fix provides better logging when the update to the token db sufferes a partial or complete failure.

Due to the unlikelyness of this happening in practice, this fix provides a simple config based way to simulate
the issue, such that the log activity can be easily observed just as if had happened during an actual failure.

Set the following in the TPS's CS.cfg:

op.enroll.testAddCertsToDBFailure=true.

The setting is false by default.

Co-authored-by: Jack Magne <jmagne@localhost.localdomain></pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/49d9d4ad92de6b7ba9225c9a2888b0ca6e8f0fd0">49d9d4ad</a></strong>
<div>
<span>by jmagne</span>
<i>at 2020-09-30T10:39:36-07:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;"> Resolve: Bug 1858860 - TPS - Update Error Codes returned to client (CIW/ESC) to Match CS8. (#565)

This is simply the addition to one very simple patch to the pin reset procedure, that provides
    the proper error code back to the client in 2 very unlikely error scenarios.

RHCS-maint.</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/40d6412d927c6a491059dbd6dee1185f85029c43">40d6412d</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2020-09-30T14:17:15-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Move base/native-tools to base/tools

The base/native-tools folder has been renamed into base/tools.
The files in pki-tools package will be unchanged except that
the /usr/share/pki/native-tools/setpin.conf will now be in
/usr/share/pki/tools.

https://bugzilla.redhat.com/show_bug.cgi?id=1883996
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/782fc3693e0d55877c6f071f77da25318ebd75c0">782fc369</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2020-09-30T15:43:46-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Move base/acme/sbin to base/acme/bin
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/ddc2e6ba7cb8608383f84bf59ac9ea67613ef6e3">ddc2e6ba</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2020-09-30T15:43:46-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Clean up pki.spec
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/97e415f0e3e508cf55f29d7a4f160c49bd678685">97e415f0</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2020-10-01T13:34:43-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Clean up Instance.wait_for_startup()
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/e8df0e764f6d82c006e0924484f15616ed3b5ba1">e8df0e76</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2020-10-01T13:34:43-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Add PasswordStoreConfig
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/e93543cdc1a2bc3fcb8f96e75a173e85271527fb">e93543cd</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2020-10-01T13:34:43-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Add JssSubsystemConfig
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/d0e8b1af38e2b389864ce3dfec4e25f1131d196c">d0e8b1af</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2020-10-01T13:34:43-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Add JssSubsystemConfig.isEnabled()
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/a8499e4a8368e98b588ef9cbdec2cc6aa41f4b44">a8499e4a</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2020-10-01T13:34:43-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Add JssSubsystemConfig.getNSSDatabaseDir()
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/87ba1bf77ffa1db72e36e198599599801724f13e">87ba1bf7</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2020-10-01T13:34:43-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Add JssSubsystemConfig.getObscureMethod()
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/e702a1744f1e8cbee92fc6570dd556b98651e912">e702a174</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2020-10-01T13:34:43-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Add JssSubsystemConfig.getCloseNSSDatabase()
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/e78e357c686c041c58b7f01fe9006038adf433c3">e78e357c</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2020-10-01T13:47:37-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Add RandomConfig
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/5433cc927bdf076fb613e7cc1c27a24ac2129201">5433cc92</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2020-10-01T13:47:39-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Add SSLConfig
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/e6076319fd894b2839033d03c7462c6e58dd5dfa">e6076319</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2020-10-01T13:47:40-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Add SSLConfig.getCipherPreferences()
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/2cc2d2322c3a646b9b50839f8be6a65adcd08d51">2cc2d232</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2020-10-01T13:47:42-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Add SSLConfig.getECType()
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/2d89b87350a5b4aa72a284084b9c0e1083aca5b7">2d89b873</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2020-10-01T13:47:44-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Clean up CAConfigurator.createLocalAdminCert()

The CAConfigurator.createLocalAdminCert() has been modified
to return the newly created certificate object so it's not
necessary to retrieve the certificate from the repository.
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/df7557838a0c26ca18c18dc13334de333346c601">df755783</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2020-10-01T13:47:45-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Remove unused preop.admincert properties
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/67625856ac5381cefd7703a9f72613a1303d2c31">67625856</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2020-10-01T15:07:40-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Move base/tools/src to base/tools/src/main/native

The native tools sources have been moved from base/tools/src
to base/tools/src/main/native to separate it from Java tools
sources.

https://bugzilla.redhat.com/show_bug.cgi?id=1883996
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/e4f73cefae2049ec31b82a5ce3300f1638bbc8bb">e4f73cef</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2020-10-01T15:54:21-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Fix Java source paths
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/5e80fc0f8b2520badd856b138b10512f63c90d01">5e80fc0f</a></strong>
<div>
<span>by Alexander Scheel</span>
<i>at 2020-10-05T12:47:40-04:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Update links to bug trackers to point to GitHub

Signed-off-by: Alexander Scheel <ascheel@redhat.com>
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/389d34a50552a7579460ead2e6101bb0b40492bb">389d34a5</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2020-10-05T12:28:14-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Merge base/java-tools into base/tools

The Java tools sources have been moved from base/java-tools
to base/tools.

https://bugzilla.redhat.com/show_bug.cgi?id=1883996
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/8b9242ca4f7df660e2bc30e9bcd89a4eb8dd3567">8b9242ca</a></strong>
<div>
<span>by Alexander Scheel</span>
<i>at 2020-10-05T14:40:08-04:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Limit requiredSecret character set

This adds new parameters `charset` and `length` to
`generate_password(...)`, letting us limit the character set when
required without modifying PUNCTUATION, while also extending the
length of the generated password when required.

Resolves: #3342

Signed-off-by: Alexander Scheel <ascheel@redhat.com>
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/29f8189b3356cd7224009dad80c295573c12eb50">29f8189b</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2020-10-05T15:02:43-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Move IEnrollmentPolicy to pki-server
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/26d86e9efd5e8ee4b991d1e1fc7a3da2c6fa182b">26d86e9e</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2020-10-05T15:02:43-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Move IKeyArchivalPolicy to pki-server
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/9b9727340a351d0895b06911a77a37173df6ae6c">9b972734</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2020-10-05T15:02:43-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Move IKeyRecoveryPolicy to pki-server
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/6458133872f2d92e718bc7c1216c1891590c5795">64581338</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2020-10-05T15:02:43-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Move IRenewalPolicy to pki-server
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/6d9cdc6243014707dd8188da27e4cd42adb49ea0">6d9cdc62</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2020-10-05T15:02:43-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Move IRevocationPolicy to pki-server
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/81e967d7b1144d263a49c0d9795a81180ba8b740">81e967d7</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2020-10-05T15:02:43-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Move IPolicySet to pki-server
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/faed9e6c86b5a076a8b9dbee58183aff11c956f2">faed9e6c</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2020-10-05T15:04:17-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Merge ICertificateRepository to CertificateRepository
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/c74a8763f621878186bb22c4aa61be9ea8374685">c74a8763</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2020-10-05T16:39:08-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Clean up Configurator.updateNextRanges()
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/0ac70565912286f5c4a0927f16880b52e64b3796">0ac70565</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2020-10-05T17:48:39-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Clean up TPSInstaller.configureCAConnector()

The unused cainfo.select has been removed.
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/8a7dff2c23d90505a3762b1083058e7a3fc7d35f">8a7dff2c</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2020-10-05T17:48:49-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Clean up TPSInstaller.configureTKSConnector()

The unused tksinfo.select has been removed.
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/1780884e6b96ac0bb518bd3b37b66f06aa693cf8">1780884e</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2020-10-05T17:49:09-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Clean up TPSInstaller.configureKRAConnector()

The unused krainfo.select has been removed.
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/faf0f928418bab6dee9fceb83817069116154742">faf0f928</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2020-10-05T18:29:39-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Remove unused subsystem.count
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/c5edf12e5c9076cb574db144df8f18563960235f">c5edf12e</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2020-10-05T19:33:41-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Clean up Configurator.loadKeyPair()

The Configurator.loadKeyPair() has been modified to take
an existing X509Certificate object.
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/ec0491639865b73a7a82387ca26ad5c196c5559f">ec049163</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2020-10-05T19:36:00-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Clean up Configurator.createECCKeyPair()

The Configurator.createECCKeyPair() has been modified to
use the default curve name if not provided.
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/b687119d803e45305c7af5b6b7bdaf4e1937c9c6">b687119d</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2020-10-05T19:36:42-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Clean up Configurator.createRSAKeyPair()

The Configurator.createRSAKeyPair() has been modified to
use the default key size if not provided.
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/e711488a4ce22490738e4d14f1d7b2b81f39d9e5">e711488a</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2020-10-05T19:37:45-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Replace Configurator.processKeyPair()

The Configurator.processKeyPair() has been replaced with a
direct call to loadKeyPair() or createKeyPair() depending
on the availability of the certificate.
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/c54f111367a9d3cdcd09110a46717058390fb9ea">c54f1113</a></strong>
<div>
<span>by 06shalini</span>
<i>at 2020-10-06T12:06:55+05:30</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Fixed nighly pipeline run by fixing stable package versions (#3344)

Signed-off-by: Shalini Khandelwal <skhandel@redhat.com>

Co-authored-by: Shalini Khandelwal <skhandel@redhat.com></pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/bd2a76543107212331d4dc7eeb6a5d723831f001">bd2a7654</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2020-10-06T08:48:51-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Remove redundant Cert.mSubsystem
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/1147bc6edfa2c96887fa51780fdb00102f30bbd8">1147bc6e</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2020-10-06T08:48:52-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Refactor Configurator.generateCertRequest()

The Configurator.generateCertRequest() has been converted
into createCertRequest() which returns the certificate request
data.
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/8b31aa718077bcfce2a6416329f934119a2734f6">8b31aa71</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2020-10-06T08:48:53-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Refactor Configurator.configRemoteCert()

The Configurator.configRemoteCert() has been converted into
createRemoteCert() that takes a list of DNS names for SAN
extension.
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/a426b8001a0a7a4d141e3ff056134e05f2df5009">a426b800</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2020-10-06T08:48:54-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Replace Configurator.generateRemoteCert()

The Configurator.generateRemoteCert() has been replaced with
a direct call to createRemoteCert().
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/2f00efb66e8d610c0485bf9131a6840c52d1b208">2f00efb6</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2020-10-06T08:48:55-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Refactor CAConfigurator.generateLocalCert()

The CAConfigurator.generateLocalCert() has been converted
into createLocalCert() that returns an X509CertImpl object.
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/2ed9adb51dc3a11b6c6963a8ffb6a208f6f62aab">2ed9adb5</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2020-10-06T08:48:56-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Refactor Configurator.generateCert()

The Configurator.generateCert() has been converted into
createCert() that returns an X509CertImpl object.
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/74f4897ea931429fdeed56967a7ca9b4472d71cc">74f4897e</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2020-10-06T08:48:58-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Remove unused Cert.mType
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/78d8f1152b15eb38fae5d62c08f6eaf0376a132a">78d8f115</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2020-10-06T08:48:59-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Refactor Configurator.loadCert()

The code that loads the cert and request data from CS.cfg
has been moved out of Configurator.loadCert().
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/2b165d8e6606cf2687b9a91a13d95d408afedd24">2b165d8e</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2020-10-06T08:49:00-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Refactor Configurator.processCert()

The Configurator.processCert() has been modified to take
an X509Certificate object.
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/838b1f5e2ca61ec51f66fc2f40f374e350abf5bb">838b1f5e</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2020-10-06T08:58:43-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Refactor CAConfigurator.updateLocalRequest()

The CAConfigurator.updateLocalRequest() has been modified to
take an IRequest object instead of a RequestId object such
that it doesn't need to search for the request object in the
request queue.
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/5fb0b660b6a4493ad91e19e493710c02cd8b9f72">5fb0b660</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2020-10-06T08:58:43-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Replace CertUtils.createLocalCert()

The CertUtils.createLocalCert() has been replaced with
a direct call to createCertRecord().
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/e22143e248735c0f573a747351dce32eeda35198">e22143e2</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2020-10-06T08:58:44-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Clean up CAConfigurator.updateLocalRequest()
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/090c2a66fee40cad1c9a7d07c520c2f39960d975">090c2a66</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2020-10-06T08:58:45-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Refactored CertUtils.createLocalRequest()

The CertUtils.createLocalRequest() has been converted
into initLocalRequest() that takes an IRequest object.
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/2ec60d4a15316fecb2fb4c865cf55e5415a2c79f">2ec60d4a</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2020-10-06T08:58:46-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Replace CAConfigurator.createRequest()

The CAConfigurator.createRequest() has been replaced
with direct calls to IRequestQueue.newRequest() and
CertUtils.initLocalRequest().
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/51a2d0782f78e864828bb1f0ba65a04cf094b2e8">51a2d078</a></strong>
<div>
<span>by Dinesh Prasanth M K</span>
<i>at 2020-10-07T11:33:01-04:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">GH issues migration cleanup 1

This patch cleansup code, that refers to pagure tickets,
to point to the new GH issue.

Signed-off-by: Dinesh Prasanth M K <dmoluguw@redhat.com>
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/8e16088f486b0e16d6633b8266834f81c8f16ef7">8e16088f</a></strong>
<div>
<span>by Dinesh Prasanth M K</span>
<i>at 2020-10-07T13:24:52-04:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Update pkispawn man page with instructions to dscreate

This patch updates pkispawn's man page with instructions
to install a DS instance using dscreate.

Partly resolves: bz#1656772

Signed-off-by: Dinesh Prasanth M K <dmoluguw@redhat.com>
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/15e78c27aa023dd9515eb2c680b459dc297f1f70">15e78c27</a></strong>
<div>
<span>by Dinesh Prasanth M K</span>
<i>at 2020-10-07T13:24:52-04:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Fix angle brackets in pkispawn man page

This patch:
- Fixes issue with angle brackets in pkispawn man page
- Removes obsolete DS specific information from pkispawn man page

Signed-off-by: Dinesh Prasanth M K <dmoluguw@redhat.com>
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/67ac57cd6eef19e765b46a589f39f77b65bbd16b">67ac57cd</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2020-10-07T14:10:42-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Refactor Configurator.processCert()

The Configurator.processCert() has been modified to
take a Cert object that contains the cert info.
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/2a95560b722fe03215defb20f7f2ab520507ea5d">2a95560b</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2020-10-07T14:10:42-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Add PKIDeployer.finalize_subsystem()

The code that finalizes the configuration parameters in
Configurator.finalizeConfiguration() has been moved into
PKIDeployer.finalize_subsystem().
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/b991a22549a189fe3d7af88bf22d087462cf869c">b991a225</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2020-10-07T14:10:42-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Remove unused FinalizeConfigRequest.importSharedSecret
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/c279c652445793f76f5f5b13935be1cfe03c7926">c279c652</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2020-10-07T14:10:42-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Remove TPSConfigurator.getSharedSecret()

The code that configures conn.tks1.tksSharedSymKeyName
in TPSConfigurator.getSharedSecret() has been moved into
PKIDeployer.import_shared_secret().
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/53e305c134e3838a12a6d034bfe188ab7e2e1b3f">53e305c1</a></strong>
<div>
<span>by Christina Fu</span>
<i>at 2020-10-08T09:20:33-07:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Bug1875563-add profile caAuditSigningCert

This patch will revert the previously added IPA specific KRA storage
and transport cert prorfiles, as it turned out that they just need
generic KRA storage and transport cert profiles, which could be
fulfilled by using the following two existing profiles
  caStorageCert.cfg
  caTransportCert.cfg
In addition, a caAuditSigningCert profile is added, although I find
a misleading profile named caSignedLogCert.cfg  that was intended for
the use.  I disabled caSignedLogCert.cfg instead.

I also removed the SHA1 algorithms from all the *storage* and *audit*
profiles while I'm at it.

The upgrade scripts only adds the new profile caAuditSigningCert.  It
does not modify existing profiles or remove those two IPA specific
ones.

fixes https://bugzilla.redhat.com/show_bug.cgi?id=1875563
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/ec1765649d6dc354d2e51abc72c3aa5651e16f4c">ec176564</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2020-10-08T11:42:30-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Merge IPublisherProcessor into PublisherProcessor
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/3e923404bccf71773a92e833dd062736ef1b0b50">3e923404</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2020-10-08T11:42:30-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Remove unused CMSEngine.upgradeConfig()
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/293c5e8aac9e866d0caedb2f9d0c5983e1e94ab7">293c5e8a</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2020-10-08T11:42:30-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Remove unused Upgrade class
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/4fba2d34134985ee7c1648d52eeea0244669caa4">4fba2d34</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2020-10-08T11:42:30-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Move GetCRL to pki-ca
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/9fdad1cb8e81440736bf05e6eb65c6eb03c50a64">9fdad1cb</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2020-10-08T11:42:30-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Move DisplayCRL to pki-ca
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/9d5c48508a67d7a97fff226e4a71dba8ee805a93">9d5c4850</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2020-10-08T11:42:30-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Move GetInfo to pki-ca
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/eb9b36e5c19511648212b01b8b8ba36ee3738465">eb9b36e5</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2020-10-08T11:42:30-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Move UpdateDir to pki-ca
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/23f7f9bd395b52b022c88c28430ecfb5a1395652">23f7f9bd</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2020-10-08T11:42:30-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Move CrlCachePrettyPrint to pki-ca
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/5fc92a21cccb6698e6ad290154f9c53710a4deb3">5fc92a21</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2020-10-08T11:42:30-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Move CMSAuthorityKeyIdentifierExtension to pki-ca
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/7366502e5f5b0be0fae2956fe21ab31425d4b1a9">7366502e</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2020-10-08T11:42:30-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Move CMSCRLNumberExtension to pki-ca
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/a38d11e53462001ac525ad5bd11207a9cb23da4c">a38d11e5</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2020-10-08T11:42:30-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Move CMSDeltaCRLIndicatorExtension to pki-ca
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/10bad6ab4b3f3bf13b914a76e4e9fdcd27405f3e">10bad6ab</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2020-10-08T11:44:32-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Rename pki-server <subsystem>-range-update to <subsystem>-range-request
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/ac7174557ea5aa3d1e6638612fdb343c1e95fb82">ac717455</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2020-10-08T11:46:23-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Add SubsystemRangeUpdateCLI

The code that updates ranges in Configurator.updateNextRanges()
has been copied into SubsystemRangeUpdateCLI.
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/a6da401c3ad7530c58bbd60a04659b24804f39ce">a6da401c</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2020-10-08T11:47:10-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Add pki-server <subsystem>-range-update

The pki-server <subsystem>-range-update has been added to
call SubsystemRangeUpdateCLI from command line.
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/2c24f572e00e83a262f74d2187aac26e28a85636">2c24f572</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2020-10-08T11:47:32-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Add CACertRemoveCLI

The code that removes the CA signing cert record in
Configurator.deleteSigningRecord() has been copied
into CACertRemoveCLI.
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/e72efb3a07ffec1b9c9e2d0d89173dfb025b984f">e72efb3a</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2020-10-08T11:47:32-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Add pki-server ca-cert-del

The pki-server ca-cert-del has been added to call
CACertRemoveCLI from command line.
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/f5e688063a3553a398f1d315da561346f646707c">f5e68806</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2020-10-08T14:14:57-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Add LDAPConfigMonitor

The LDAPConfigMonitor has been added for LDAPDatabase
to monitor ACME config properties stored in the database
using persistent search.

The ACMEEnableService and ACMEDisableService have been
modified to update the 'enabled' config property in the
database.

The ACMERequestFilter has been modified to use the `enabled`
config property from the database. However, if the property
is not set in the database, the filter will use the property
from the config file instead.
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/2ef15dc8aad01b51b893ff62c996a43666e45a90">2ef15dc8</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2020-10-08T18:13:03-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Clean up CAConfigurator.finalizeConfiguration() (part 1)

The code that removes the CA signing cert record in
CAConfigurator.finalizeConfiguration() has been moved
into configuration.py.
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/d739fac23a0b7e8f1d501a59211cdafe59fa1152">d739fac2</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2020-10-08T18:13:03-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Clean up CAConfigurator.finalizeConfiguration() (part 2)

The code that enables the profile subsystem in
CAConfigurator.finalizeConfiguration() has been moved
into configuration.py.
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/ab091c5a5d8f5ae1e2736f2b73760d3d3513baaa">ab091c5a</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2020-10-08T18:13:03-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Clean up CAConfigurator.finalizeConfiguration() (part 3)

The code that configures ca.crl.MasterCRL.startingCrlNumber
in CAConfigurator.finalizeConfiguration() has been moved into
configuration.py.
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/3faa3866056f744c1568835953c5494e7c2b90f2">3faa3866</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2020-10-08T18:13:03-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Clean up CAConfigurator.finalizeConfiguration() (part 4)

The code that disables CRL caching and generation in
CAConfigurator.finalizeConfiguration() has been moved
into configuration.py.
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/49c120960a198c79360ec24aeb6d99d965830057">49c12096</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2020-10-08T18:13:03-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Clean up CAConfigurator.finalizeConfiguration() (part 5)

The code that configures security domain master in
CAConfigurator.finalizeConfiguration() has been moved
into configuration.py.
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/26c347a856a258746c46061b5b3dcecf3d7b1bf7">26c347a8</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2020-10-08T18:13:03-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Clean up CAConfigurator.finalizeConfiguration() (part 6)

The code that updates the range numbers in CAConfigurator and
KRAConfigurator.finalizeConfiguration() has been moved into
configuration.py.
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/a175d38544cb412fdf2a9c58f6f6d11f4160df52">a175d385</a></strong>
<div>
<span>by Christina Fu</span>
<i>at 2020-10-09T09:20:45-07:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Bug1874595-(add missing patch for) TPS Server-side keygen support for id only tokens

This patch relates to Bug 1494591, where the fix was missing a patch.

It makes it so that as long as one keyType has serverKeyGen enabled then
all key tyes under the same tps profile are consideered server-side
keygen.

Code submitted by RHCS-MAINT

fixes https://bugzilla.redhat.com/show_bug.cgi?id=1874595
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/101c5b765cb4f3983b9cc199dd03771e75cf56c0">101c5b76</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2020-10-09T11:34:39-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Move ListCerts to pki-ca
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/bf2b7b4058f1865dae13fa9b99f478f3a6be974d">bf2b7b40</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2020-10-09T11:34:39-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Move SrchCerts to pki-ca
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/32960d12a0dd694d506a5fe79345b17b0ab6f202">32960d12</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2020-10-09T11:34:39-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Move Monitor to pki-ca
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/a1095befc504ff11994e2d94d6632df98cc03f38">a1095bef</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2020-10-09T11:34:39-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Move CRLRepository to pki-ca
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/80d49141e3db448b1e2aae0451141b828b9aa935">80d49141</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2020-10-09T11:34:39-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Move UniqueSubjectName to pki-ca
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/74de65a9c1800342d80e1c6ac7db29c5ad432c75">74de65a9</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2020-10-09T11:34:39-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Move UniqueSubjectNameConstraints to pki-ca
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/3c5df519f2658504abbd493959da19615a713e2c">3c5df519</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2020-10-09T11:34:39-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Move org.dogtagpki.legacy.server.policy.extensions to pki-ca
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/d7776c456d7bc2d0071852037a07e0a799c8ec49">d7776c45</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2020-10-09T11:34:39-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Move org.dogtagpki.legacy.server.policy.constraints to pki-ca
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/f09342d55a161a3b91a2dd59ce313be42fa48681">f09342d5</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2020-10-09T11:36:13-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Remove ICertificateAuthority.getCRLRepository()

The ICertificateAuthority.getCRLRepository() has been replaced
with direct calls to CAEngine.getCRLRepository().
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/abeed4220840cb6bacf4d046bf6e8da1e8328e26">abeed422</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2020-10-09T11:36:15-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Merge ICRLRepository into CRLRepository
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/e6588ad4393d7f4e307774b05f0efabfa0a6b98f">e6588ad4</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2020-10-09T11:36:17-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Remove ICertificateAuthority.getCRLIssuingPoints()

The ICertificateAuthority.getCRLIssuingPoints() has been
replaced with direct calls to CAEngine.getCRLIssuingPoints().
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/98d33c5b51263a0e1c017de8027b871228f6b022">98d33c5b</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2020-10-09T11:36:18-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Remove ICertificateAuthority.getCRLIssuingPoint()

The ICertificateAuthority.getCRLIssuingPoint() has been
replaced with direct calls to CAEngine.getCRLIssuingPoint().
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/cb3b51f1931c8683cd1ba76e788e5b4f801a0abe">cb3b51f1</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2020-10-09T11:36:20-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Replace ICertificateAuthority.getCertificateRepository()

Some of the ICertificateAuthority.getCertificateRepository()
invocations have been replaced with direct calls to
CAEngine.getCertificateRepository().
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/1ba298dcc2889d715f41d78cb8a5dfa0eb844ef4">1ba298dc</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2020-10-09T12:34:14-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Move AddCAServlet to pki-ocsp
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/47ab2a1ec0bcffd06e977ea8aabbe804e496aa31">47ab2a1e</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2020-10-09T12:34:16-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Move AddCRLServlet to pki-ocsp
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/96a7c8a72b7af7fe931cee40518df4b0d3870ec0">96a7c8a7</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2020-10-09T12:34:17-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Move CheckCertServlet to pki-ocsp
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/bdef9580707423f11b8e8db38981b421029453f4">bdef9580</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2020-10-09T12:34:18-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Move ListCAServlet to pki-ocsp
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/329468b62a879046e748ba4a83e40c816e98c491">329468b6</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2020-10-09T12:34:19-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Move RemoveCAServlet to pki-ocsp
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/c834e3723cb29f0b9f527dabda8f4738b92a982d">c834e372</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2020-10-09T12:34:20-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Move com.netscape.certsrv.logging.event to pki-server
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/020ccefb39e6e0b483a44ef1f37a4844691c8c35">020ccefb</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2020-10-09T12:34:22-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Move org.dogtagpki.legacy.policy to pki-server
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/9db1146a7249ec1363b72effaa73e39364a74962">9db1146a</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2020-10-09T12:34:23-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Move IConnector to pki-server
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/f99b426de69ca98bb498e537553424de2d1ad9eb">f99b426d</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2020-10-09T12:34:25-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Move IService to pki-server
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/410e1c60dd9f2e5be251d212cc58d930043ccbb0">410e1c60</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2020-10-09T12:34:26-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Move request interfaces to pki-server
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/50333404a03d912ebb0ed5172f8d3cec3a279f9e">50333404</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2020-10-09T13:06:55-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Move GeneralNamesAsConstraintsConfig to a new file
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/47a1d84b8a42bc6ab33cb575aaf6bc225419d663">47a1d84b</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2020-10-09T13:06:57-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Move GeneralNamesConfig to a new file
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/6f1ea9efc1bbc113a029b221d1da41924a40ce6d">6f1ea9ef</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2020-10-09T13:06:58-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Move GeneralNameConfig to a new file
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/872ab4f8515e21b85483a0df80d071da3d7b9861">872ab4f8</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2020-10-09T13:07:00-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Move GeneralNameAsConstraintsConfig to a new file
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/413d70cc14aeb718fca8e7530b841107a1ddcc7c">413d70cc</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2020-10-09T13:07:02-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Move SubjAltNameGN to a new file
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/f9c4bb933930f5fc7c03de3034dff094c16dc3d1">f9c4bb93</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2020-10-09T13:07:03-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Move PolicyInstance to a new file
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/752cf6489e73242f7f89b846aa3c9cd6bcea22ce">752cf648</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2020-10-09T13:07:05-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Move RegisteredPolicy to a new file
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/7963fdfe58994d393f0311654ca156e1addd2f94">7963fdfe</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2020-10-09T13:07:07-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Move PredicateTokenizer to a new file
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/bd646873f48e88378891738cb63beae9e651cdac">bd646873</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2020-10-09T13:07:09-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Move ExpressionComps to a new file
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/9332e4f64f3895edcabc428a5f28ed06dfc6a1c1">9332e4f6</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2020-10-09T13:07:10-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Rename ICRLPublisher to CRLPublisher
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/e6e2a1e44bf108422d3f0029555d63242e3b711b">e6e2a1e4</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2020-10-13T11:15:32-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Remove CryptoUtil.sortCertificateChain()

The CryptoUtil.sortCertificateChain() has been replaced with
Cert.sortCertificateChain().
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/aa480286a469559878a45cdb44ccd42fba42cf2d">aa480286</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2020-10-13T11:15:37-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Merge ICertUserDBAuthentication into CertUserDBAuthentication
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/e0d5d37a070a1d653cec7de8f2436cb8d0fe2b51">e0d5d37a</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2020-10-13T11:15:42-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Merge IGroup to Group
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/2df76f4849cab2b3b888fcc0443d4b53a443d286">2df76f48</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2020-10-13T11:15:43-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Merge IGroupConstants into Group
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/c4042744a6857a9714817758613402ce556663d7">c4042744</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2020-10-13T11:15:46-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Merge IUser into User
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/ad8bd463999ac7c938e7c4686c8b5c154b1c78ea">ad8bd463</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2020-10-13T11:18:39-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Merge IUserConstants into User
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/7ebf8d786067634c231dd6fb5efcc007d54614b1">7ebf8d78</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2020-10-13T16:06:40-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Clean up LDAPDatabase
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/0619f5a1b5092d3176163e52e55970bb8cd48052">0619f5a1</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2020-10-13T16:06:41-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Clean up LDAPRealm
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/f589afad4c0623010b5a6d53e83fc788aecc92b2">f589afad</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2020-10-13T16:06:42-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Clean up LDAPConfigMonitor
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/304040d5feac191316bbddf3ff86152ca945aa5c">304040d5</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2020-10-13T16:06:43-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Clean up create.ldif for DS realm
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/4f4e5a29879badcf8f501966806a290fd5139075">4f4e5a29</a></strong>
<div>
<span>by dpuniaredhat</span>
<i>at 2020-10-14T17:37:41+05:30</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">acme mvp test (#3352)

Adding automation to Deploy acme container on podman and openshift

1. Update existing acme test cases and add test cases
2. Adding test to deploy acme using podman with Persistent Database and run test cases
3. Adding acme deployment with nss_issuer
4. Adding test to delopy acme on openshift with Persistent Database

Signed-off-by: Deepak Punia <dpunia@redhat.com></pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/d765cd87fdab24576b422f8100f38bd6fb9ac00e">d765cd87</a></strong>
<div>
<span>by dpuniaredhat</span>
<i>at 2020-10-15T19:00:15+05:30</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Bugzilla 1874595 automation (#3355)

TPS - Server side key generation is not working for Identity only tokens

Signed-off-by: Deepak Punia <dpunia@redhat.com></pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/cb3f19b86f3d5e7632a0e8342bd548cc2de3f111">cb3f19b8</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2020-10-15T09:53:40-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Add patternfly.min.css.map into ACME UI
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/8d96b89f03f59167356483164774d3b6c5bca564">8d96b89f</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2020-10-15T09:54:12-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Clean up ACME UI
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/eb501630e0549a7720a9a84aa97bc148a224939b">eb501630</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2020-10-15T09:54:13-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Add JSON encoder/decoder for User
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/8883e23d3df167d51536e62bb2c06ede0adb87de">8883e23d</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2020-10-15T09:54:14-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Update LDAPRealm to generate PKIPrincipal

The LDAPRealm has been updated generate a PKIPrincipal
instead of a GenericPrincipal such that it can store
the User object.
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/d9607c2b4b7b14e3c183bd49d0944bcb17830bce">d9607c2b</a></strong>
<div>
<span>by Christina Fu</span>
<i>at 2020-10-15T17:02:24-07:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Bug1874600-TPS does not check token cuid on the user externalReg record during PIN reset

  RHCS-MAINT contribution
  This patch makes sure that if "tokenCUID" exists for the user reg record,
  pinReset operation would make sure that it mathes with the current
  tokne cuid;
  If the "tokenCUID" does not exisst in the user registration record
  then any token can be used for pinReset;

  fixes https://bugzilla.redhat.com/show_bug.cgi?id=1874600
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/b9edb38dd397f20ca35ef784709041be5df10d96">b9edb38d</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2020-10-19T13:16:48-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Remove unused UGSubsystem.startup()
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/26e16da18957502469e95a7749a2eb8ce9cb40f6">26e16da1</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2020-10-19T13:16:56-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Add hashCode() and equals() for DataCollection
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/aa6d7b086ac58e782862218e2710f204faed8e45">aa6d7b08</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2020-10-19T13:19:15-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Add pki-server <subsystem>-group-find

The pki-server <subsystem>-group-find has been added to
list all groups directly from the database.
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/14244b72f7e26a797e422c308e76a0a19527cd04">14244b72</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2020-10-19T14:43:47-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Add pki-server <subsystem>-group-member-find

The pki-server <subsystem>-group-member-find has been added
to list all members of a group directly from the database.
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/2c114ff26535143a20007a91f00468ad660efbbd">2c114ff2</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2020-10-19T14:43:50-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Add pki-server <subsystem>-group-member-add

The pki-server <subsystem>-group-member-add has been added
to add a member into a group directly into the database.
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/033d320046a5c6e95600564a1476708b5ff1cd9e">033d3200</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2020-10-19T14:43:50-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Move pkidbuser group configuration

The code that configures pkidbuser groups have been moved
into configuration.py.
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/2defedfdeae08c2481e7e06c542ea9a99db7856a">2defedfd</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2020-10-19T15:28:00-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Fix cert validation in LDAPRealm

The LDAPRealm has been modified to validate the cert data
in addition to the cert ID.
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/5f4ed745bd456ee87df78b20e953bc82b91b1443">5f4ed745</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2020-10-19T15:28:00-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Add PostgreSQLRealm

The PostgreSQLRealm has been added to define the ACME realm
using users and groups in PostgreSQL database.
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/fbf94d38410a3a448b15591c724d016b738f0284">fbf94d38</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2020-10-19T15:28:00-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Update pki-server acme-realm
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/7f43a7120a68e6f8fb4a127adf76726deb0a253e">7f43a712</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2020-10-19T15:28:00-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Add docs for PostgreSQLRealm
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/f1ce33fb774ccf2748b5b8b35098802ae4d56b34">f1ce33fb</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2020-10-19T16:03:34-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Clean up realm doc
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/4d8520c74cbd4ef051bda789f163227a2f13f789">4d8520c7</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2020-10-19T16:04:31-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Refactor UGSubsystem.addCertSubjectDN()

The UGSubsystem.addCertSubjectDN() has been converted into
addSeeAlso() which takes a user ID and the value of the
seeAlso attribute.
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/9badc0c0d05c16c5ebb8206fad3ec1c4f5de46db">9badc0c0</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2020-10-19T16:06:34-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Refactor UGSubsystem.removeCertSubjectDN()

The UGSubsystem.removeCertSubjectDN() has been converted
into removeSeeAlso() that takes the user ID and the value
of the seeAlso attribute.
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/ea148d61048043980bdac4218ffaff8ea59d75a0">ea148d61</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2020-10-19T16:14:10-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Add UGSubsystem.findUsersByKeyword()

The code that generates an LDAP filter to search users by
keyword has been moved into UGSubsystem.findUsersByKeyword().
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/a664613137b245e4d9ba38c91fff1aa8bb26d151">a6646131</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2020-10-19T16:14:17-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Add JSON converter for UserData
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/d23b45b3d32a22461c134f7f2300b544d4dea972">d23b45b3</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2020-10-19T16:14:17-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Add JSON converter for UserCollection
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/93b892a155bf9ac85c60dbd27a867565d9e24af8">93b892a1</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2020-10-19T19:35:18-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Update PostgreSQLRealm to create PKIPrincipal

The PostgreSQLRealm has been modified to create a PKIPrincipal
which stores the User object instead of a GenericPrincipal which
stores only the username.
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/6c62d4b81db6fa04f95cc5a37037edfc94092660">6c62d4b8</a></strong>
<div>
<span>by Fraser Tweedale</span>
<i>at 2020-10-20T11:09:28+10:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">startup notification: add StartupNotifier interface

Add the StartupNotifier interface.  Update CMSEngine to invoke
.notifyReady() for each configured notifier when startup is
completed.

Loading of notifiers and a systemd notifier instance will be
implemented in subsequent commits.

Part of: https://pagure.io/dogtagpki/issue/1233
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/c452bdec6ac9a565edfe0e67f8ec02f219001ba7">c452bdec</a></strong>
<div>
<span>by Fraser Tweedale</span>
<i>at 2020-10-20T11:09:28+10:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">startup notification: initialise from CS.cfg

Initialise StartupNotifier instances configured in CS.cfg.  The
configuration scheme is:

  startupNotifiers.list=systemd,foo
  startupNotifiers.systemd.class=package.and.ClassName
  startupNotifiers.foo.class=com.netscape.cmscore.apps.FooNotifier
  startupNotifiers.foo.paramA=valueA
  startupNotifiers.foo.paramB=valueB

`startupNotifiers.list' gives a list of substore names, one for each
StartupNotifier instance.  The 'class' parameter of each substore
specifies the Java class name.  The config substore is passed to the
StartupNotifier.init() method.

Part of: https://pagure.io/dogtagpki/issue/1233
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/5c0a0c9da257253e628ad2f30d08b2909dac520b">5c0a0c9d</a></strong>
<div>
<span>by Fraser Tweedale</span>
<i>at 2020-10-20T11:09:28+10:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">startup notification: add pki-systemd jar

Implement SystemdStartupNotifier, which does not actually notify
systemd yet (this will be implemented in a subsequent commit).
Ship this class in its own jar.  The inclusion of this jar in the
pki-server package will be made conditional on an RPM macro in the
next commit.

Part of: https://pagure.io/dogtagpki/issue/1233
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/4f106e2be351a976fe4a5e04eb06aceb42026089">4f106e2b</a></strong>
<div>
<span>by Fraser Tweedale</span>
<i>at 2020-10-20T11:09:28+10:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">startup notification: make the systemd class optional

Add the `sdnotify` RPM bcond to make the SystemdStartupNotifier
class optional.  When enabled, it is supplied in a separate JAR
(part of the pki-server package), and the webapp symlink is added in
the pki-ca package.  It is enabled by default.

Note that on Fedora and presumably RHEL also, libsystemd.so is
always present.  sd_booted(3) can be used to determine whether pid 1
is systemd or not, so having a systemd notifier implementation
present doesn't imply that systemd must be used.

Nevertheless, it was requested to make this component optional.  So
here we are.

Part of: https://pagure.io/dogtagpki/issue/1233
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/1bc6a40cd1842046e4760137abb110be4d62d2ee">1bc6a40c</a></strong>
<div>
<span>by Fraser Tweedale</span>
<i>at 2020-10-20T11:09:28+10:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">startup notification: complete systemd notifier

Complete the implementation of SystemdStartupNotifier.  We use JNA
to bind to libsystemd.  The dependency on 'jna' package only occurs
when %{with sdnotify}.

The systemd unit template file is left alone, retaining Type=simple.
In order to enable systemd startup notification, you can override
the Type in the "drop-in" directory. For example, if the instance
name is 'pki-tomcat', write to the file:

  /etc/systemd/system/pki-tomcatd@pki-tomcat.service.d/notify.conf

the content:

  [Service]
  Type=notify

See systemd.unit(5) for more details.

Fixes: https://pagure.io/dogtagpki/issue/1233
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/ef08897797763bea86f656fb7cbc3c1de6cf7286">ef088977</a></strong>
<div>
<span>by Fraser Tweedale</span>
<i>at 2020-10-20T11:09:28+10:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">startup notification: load libsystemd in init()

In the SystemdStartupNotifier, in order to better handle errors load
the library in init() rather than as static class configuration.
This gives better control over when Dogtag attempts to load the
library, and how it can handle errors.

Part of: https://pagure.io/dogtagpki/issue/1233
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/592f412e762b3d88e9509691050cc865bd1d75cd">592f412e</a></strong>
<div>
<span>by Fraser Tweedale</span>
<i>at 2020-10-20T11:09:28+10:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">startup notification: return result to caller

Update the StartupNotifier interface to return a NotifyResult to the
caller.  The NotifyResult contains a success/failure enum and a
string message.  Update CMSEngine to interpret the NotifyResult and
log a message if appropriate.

The SystemdStartupNotifier no longer writes to stderr/stdout.  As a
result, there is no longer any ambiguity about which CMS subsystem a
failure occurred in.

Part of: https://pagure.io/dogtagpki/issue/1233
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/6f573ee1298d5d177bd912babdb205d5bef9a631">6f573ee1</a></strong>
<div>
<span>by jmagne</span>
<i>at 2020-10-19T18:26:57-07:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Enhancment to Bug 1858860 - TPS - Update Error Codes returned to client (CIW/ESC) to Match CS8. (#3361)

This enhancement allows config values to be used to test the unlikely error conditions addressed in the original bug:

To test one two scenarios, use these settings one at a time:

op.pinReset.testNoBeginMsg=false
op.pinReset.testUpdateDBFailure=false

The first one will test the error code returned when the beginOp message is missing when atempting
a pin Reset operation. The error returned should be error "4".

The second one will test if the update of the db for the token does not complete properly.

The error returned in this scenario should be "41".

The tpsclient utility can be used to test these two scenarios. Once again try them separately
because the first error will stop the pin reset procedure before the second scenario can even happen.</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/8529ebe27ce349996a00ffa01c69cfbe6942c4ec">8529ebe2</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2020-10-20T09:22:50-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Add PostgreSQLConfigMonitor

The PostgreSQLConfigMonitor has been added to periodically
monitor ACME config properties stored in PostgreSQL database.
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/885136fb7d4fa95b15de32b3add36c9d703c50a0">885136fb</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2020-10-20T09:22:50-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Add docs for PostgreSQLConfigMonitor
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/c7be1f9b298236eb7b0813e5b207493ce480f7b5">c7be1f9b</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2020-10-20T09:26:55-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Fix pki-server acme-realm-show
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/4f12d13eee7cc1817622dbc37d2fe0e20893dbc2">4f12d13e</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2020-10-20T11:26:48-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Update version number to 10.10.0-beta1
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/3df7a23c2f3f0e4e42c94c10feb62ecc161f5182">3df7a23c</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2020-10-20T16:54:54-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Update JSS dependency
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/9b6247dce0f4d830d64cffb19d5b60ba3c6236fa">9b6247dc</a></strong>
<div>
<span>by Fraser Tweedale</span>
<i>at 2020-10-21T10:47:27+10:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">CommonNameToSANDefault: allow label starting with digit

https://tools.ietf.org/html/rfc1123#section-2 relaxes the grammar
specified in https://tools.ietf.org/html/rfc1034#section-3.5,
allowing a DNS label to start with a number.  RFC 5280 explicitly
adopts the modifications of RFC 1123, so the current check that
requires a label to start with a letter is too strict.  Update the
check to allow labels to start with number or letter.

Fixes: https://github.com/dogtagpki/pki/issues/3339
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/2e1a0cfdb640e24c5badce436ef402392abb4587">2e1a0cfd</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2020-10-21T08:38:27-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Update TomcatJSS dependency
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/8449667ddf68edb9e67db30f194fab28a857b219">8449667d</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2020-10-21T16:55:20-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Add pki-acme.js

The JavaScript code in ACME's index.jsp has been moved
into pki-acme.js.
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/defadf1af4d94d6606c3b97cb42a5bfad6a2b478">defadf1a</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2020-10-21T19:18:10-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Add pki-server <subsystem>-user-find

The pki-server <subsystem>-user-find has been added to
find users linked to a certificate.
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/6c322670d1065c43b69c92ff8e9cca7b9ff33b32">6c322670</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2020-10-21T19:27:02-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Add pki-server <subsystem>-user-mod

The pki-server <subsystem>-user-mod has been added to
link/unlink a user to a certificate.
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/27e272374e1f178aa69c5b0cbde3dd46224e58b2">27e27237</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2020-10-21T20:25:03-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Remove Configurator.removeOldDBUsers()

The code that links/unlinks users to/from subsystem cert
has been moved into configuration.py.
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/fb0ed6406ad04f469ca8bf032e75a41d03816f6e">fb0ed640</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2020-10-22T15:06:36-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Add InMemoryRealm

The InMemoryRealm has been added to provide a simple realm
that contains just the admin user.
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/0b73ae1b3f5b62d58b7ed6a9ca3c554ffff20462">0b73ae1b</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2020-10-22T15:06:36-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Update ACME deployment for Podman

The Dockerfile and the pki-acme-run script have been modified
to use the InMemoryRealm by default and provide a mechanism
to change it.
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/6157d43134947add442350c9137157e6005c0d6c">6157d431</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2020-10-22T15:06:36-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Update ACME deployment for OpenShift

The OpenShift deployment files have been modified to use
the InMemoryRealm by default and provide a mechanism to
change it.
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/ad6d9fadc8cc1bb80a933aa448d15299cabc450b">ad6d9fad</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2020-10-23T10:01:39-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Clean up exception handling in pki-server

The pki-server has been modified to show better error messages.
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/b0047db2f856b1f917dc69adedaf1b7b66f1d7d5">b0047db2</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2020-10-23T10:01:39-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Add log messages for Password.get_password()
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/84696756e30769470bc5a5906c15dbdce7ee5d02">84696756</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2020-10-23T10:01:39-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Refactor UGSubsystem.addUserCert()

The UGSubsystem.addUserCert() has been modified to take
a user ID and a certificate object.
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/f093ae97300dd50d627c49a41f89f3c5f5f27b53">f093ae97</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2020-10-23T10:01:39-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Add pki-server <subsystem>-user-cert-add

The pki-server <subsystem>-user-cert-add has been added to
add a cert to a user for client cert authentication.
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/d49310da6a114fd668c97672c93a0e8b07f721b1">d49310da</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2020-10-23T10:01:39-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Refactor pkidbuser cert configuration

The code that configures pkidbuser cert has been moved
into configuration.py.
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/6ad73713f653c2bf983a1065b94e7d561b203ae0">6ad73713</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2020-10-23T10:01:39-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Clean up UGSubsystem.addUser()

The UGSubsystem.addUser() has been modified to allow
optional attributes according to the LDAP schema.
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/438eff69008a83166ad1a517602500fe602a40f7">438eff69</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2020-10-23T10:01:39-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Add pki-server <subsystem>-user-show

The pki-server <subsystem>-user-show has been added to
retrieve a user directly from the database.
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/4f9e4d956f9e4a3bd1a4c4ce5cfc237b47cb5eeb">4f9e4d95</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2020-10-23T10:01:39-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Add pki-server <subsystem>-user-add

The pki-server <subsystem>-user-add has been added to
add a user directly into the database.
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/4078259a1e1b3ceea406c893f92d3dfbd3c408dd">4078259a</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2020-10-23T10:01:39-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Refactor pkidbuser creation

The code that creates pkidbuser has been moved into
configuration.py.
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/89f178adc87e41c6926a1eaa7dd971e764673e5f">89f178ad</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2020-10-23T11:09:59-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Add PKIDeployer.setup_database_user()

The code that configures pkidbuser has been moved into
PKIDeployer.setup_database_user().
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/61744481ed346d16649359dbbdd13c52b1d893a5">61744481</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2020-10-23T13:44:06-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Fix cloning issue

Due to recent changes pkispawn tried to add a duplicate
pkidbuser during cloning so it failed. The code has been
modified to no longer add pkidbuser during cloning.
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/42ab987a3f2963aa3064a78174789b8e1e7fc351">42ab987a</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2020-10-23T14:43:08-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Remove unused SystemConfigService.setupDatabaseUser()
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/ab918bf7210ee67400a386181985499c63e2ec8c">ab918bf7</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2020-10-26T15:13:53-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Fix error handling in pki-server
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/355f265595d184cb66e63eeac24fa9de3c68745a">355f2655</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2020-10-26T15:14:00-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Fix Password.get_password()

The Password.get_password() has been modified to use
pki.util.load_properties() to load the password file.
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/2648cc6e2433540798627f49a5805bc5eb0706ab">2648cc6e</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2020-10-26T15:29:52-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Add pki securitydomain-join

The code that registers the new subsystem into the security
domain has been moved into pki securitydomain-join.
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/657819599dd34cfac30faca9fb9c67995b03cdfa">65781959</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2020-10-26T21:48:32-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Clean up PKISubsystem.join_security_domain()
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/25f6ecd491a33317b9de3530ac6e520523afab09">25f6ecd4</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2020-10-26T21:49:16-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Add pki-server sd-host-add

The code that adds the security domain manager has been
moved into pki-server sd-host-add.
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/26450226ef39611ac8344b5a23ec1f5c0d4c7c0a">26450226</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2020-10-26T23:01:00-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Add pki-server sd-create

The code that creates the security domain has been moved into
pki-server sd-create.
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/b4a33e3340d616dfef694d0f0761520fd1c3b1c5">b4a33e33</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2020-10-26T23:01:06-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Remove unused SystemConfigService.setupSecurityDomain()
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/b24f6b166de9151229cfe104cd2f305d67133831">b24f6b16</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2020-10-26T23:01:06-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Remove unused SecurityDomainSetupRequest
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/f74a6bd29176bb57d1653f5451b817cc54db1409">f74a6bd2</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2020-10-27T13:10:41-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Clean up group configuration for pkidbuser
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/73d0e6e4caa199ddad409762a6be97ebd5d13d05">73d0e6e4</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2020-10-27T13:10:44-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Add --output-format for pki-server <subsystem>-group-member-find
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/53706d43c2660736fb57c16b8764dbe116213a85">53706d43</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2020-10-27T13:10:45-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Add --tps-profiles for pki-server <subsystem>-add-user
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/f26500c1c2b0b4aeea2d18a94a6d1e6b2871d346">f26500c1</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2020-10-27T13:10:47-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Refactor admin certificate configuration

The code that configures the admin certificate in
Configurator.updateAdminUserCert() has been moved into
PKIDeployer.setup_admin().
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/9e3db0971a39d60358b2fc9916e61b960fd6ff6c">9e3db097</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2020-10-27T13:10:49-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Refactor admin group configuration

The code that configures the admin groups in
Configurator.createAdminUser() has been moved into
PKIDeployment.setup_admin().
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/63c7434b62adcc0b9a6885be41bff9f1bdb1a969">63c7434b</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2020-10-27T13:10:50-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Refactor admin user creation

The code that creates the admin user in
Configurator.createAdminUser() has been moved into
PKIDeployer.setup_admin().
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/d4ed7a86756292246c1f7f4d5a3ad50e78e20292">d4ed7a86</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2020-10-27T13:10:52-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Remove ACME tech preview notifications
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/d7cd710436fb0615dea5aee637449056946f7756">d7cd7104</a></strong>
<div>
<span>by Fraser Tweedale</span>
<i>at 2020-10-27T17:53:57-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">acme: refactor validation retry behaviour into ACMEChallengeProcessor

Challenge retry behaviour was duplicated across validators.
Refactor this behaviour into the ACMEChallengeProcessor class.

The validateChallenge method can now no longer raise (arbitrary)
exceptions.  Instead it returns a value of the ValidationResult
type.  As a consequence, more exceptions need to be handled, but the
upshot is that such failures are now captured and get represented
properly in the challenge object's error field.
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/cc566b63e11b71a335002839868eca88c0700799">cc566b63</a></strong>
<div>
<span>by Fraser Tweedale</span>
<i>at 2020-10-27T17:53:57-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">acme: add ACMEIdentifierValidator class

Add a class and methods for validating the syntax of an identifier.
This will allow the newOrder service to reject orders with malformed
identifiers (a subsquent commit will implement this behaviour).
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/2cfa3c6359ba39699b6aa2b8577e67264c41288c">2cfa3c63</a></strong>
<div>
<span>by Fraser Tweedale</span>
<i>at 2020-10-27T17:53:57-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">acme: validate identifier syntax

Update ACMENewOrderService to validate identifier syntax and respond
with an error object if it finds a malformed identifier.

Also add a service base class providing the "respond with ACMEError
object".  Other service classes should be updated over time to use
it, so that we (a) return proper error objects in conformance with
RFC 8555 and (b) avoid code duplication through use of the base
class.
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/e63ff6295e8a60809b1fd25e273257f2a9777a3c">e63ff629</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2020-10-28T11:08:21-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Clean up ACME docs
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/113a86341e6a7fe3bd40c0e20357dee0b524a137">113a8634</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2020-10-28T11:11:59-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Clean up ACME docs (part 2)
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/927f6662f49212d320becdb949a1e3a3c185e4c3">927f6662</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2020-10-28T14:09:48-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Update ACME login and logout services

The ACME login service has been modified to allow anybody
to retrieve the login information from the current session.

The ACME logout service has been modified to allow anybody
to clear the current session.
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/373f5c5c88d674a99379e8ea0bc9d43e1cc7e072">373f5c5c</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2020-10-28T14:09:48-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Add avatar and user's full name for ACME UI

The ACME UI has been modified to display an avatar and
user's full name.
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/9db5355f5033e306575edccc589d6bec76ad7895">9db5355f</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2020-10-28T14:09:48-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Add profile menu for ACME UI

The ACME UI has been modified to provide a profile menu
which initially contains the login and logout menu items.
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/38616b5a1e89a75601f6a6de63f79136dd1239ef">38616b5a</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2020-10-28T14:09:48-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Add sidebar menu for ACME UI

A sidebar menu has been added into the ACME UI. The main page
has been split into home.jsp and help.jsp.
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/2cd562a585b3b2822092b2596a4bc019ff730d95">2cd562a5</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2020-10-28T14:09:48-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Add sidebar toggle in ACME UI

A toggle has been added to show/hide the sidebar in the ACME UI.
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/15962317d7815161d810727f55702220cb980c12">15962317</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2020-10-28T14:09:48-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Add configuration page in ACME UI

A configuration page has been added in ACME UI to show the
current service status and links to enable/disable the service.
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/181487b3d770138a8d38166b7ce65a509008f765">181487b3</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2020-10-28T14:09:48-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Add login/logout sidebar menu
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/5e06d8069fb8d3279ac317b682fa86b13da3c562">5e06d806</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2020-10-28T14:09:48-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Fix ACME UI logout
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/61297c6f97cb0e850a76307d1200b4a7c63f001c">61297c6f</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2020-10-28T14:42:31-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Update version number to 10.0.0
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/4531ea21b52e0d750f6eba1d56925aaa8ef00c94">4531ea21</a></strong>
<div>
<span>by Timo Aaltonen</span>
<i>at 2020-10-31T20:32:00+02:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Merge tag 'v10.9.4' into m-n
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/4326bcb5b4a7116604184a2ddbd1828139e866d9">4326bcb5</a></strong>
<div>
<span>by Timo Aaltonen</span>
<i>at 2020-10-31T20:32:05+02:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Merge branch 'master' into m-n
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/209133e8192810574f0332f9eeecbda9b9513b6b">209133e8</a></strong>
<div>
<span>by Timo Aaltonen</span>
<i>at 2020-11-01T13:04:37+02:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">bump the version
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/01773e48c9197d1a3acae0428e92fef1b2df16b2">01773e48</a></strong>
<div>
<span>by Timo Aaltonen</span>
<i>at 2020-11-01T13:09:33+02:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">patches: Refreshed, fix-java11-dependencies.diff and fix-pki-java- path.diff dropped, upstream.
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/ff5c30d5eec3f08527268314f94a5252d5746857">ff5c30d5</a></strong>
<div>
<span>by Timo Aaltonen</span>
<i>at 2020-11-01T13:10:48+02:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">control: Bump jss and tomcatjss dependencies.
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/c73e1f9bdb80712f4bc27a3184c012a998086a26">c73e1f9b</a></strong>
<div>
<span>by Timo Aaltonen</span>
<i>at 2020-11-01T13:15:19+02:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">control: Migrate to libcommons-lang3-java.
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/7973918b7edd58a347b9f8fee8dd94e3d3ffeddf">7973918b</a></strong>
<div>
<span>by Timo Aaltonen</span>
<i>at 2020-11-01T14:15:12+02:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">control, pki-server.install, rules: Add support for systemd notifications, add libjna-java to depends.
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/150c41d9e9e20e6101077c26df2e0761cf0c6ee3">150c41d9</a></strong>
<div>
<span>by Timo Aaltonen</span>
<i>at 2020-11-01T14:24:04+02:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">pki-tools, copyright: Java and native-tools got moved, update paths.
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/8fdbdced6b34a362b6e8133d0334ce3f33965dd1">8fdbdced</a></strong>
<div>
<span>by Timo Aaltonen</span>
<i>at 2020-11-01T18:54:44+02:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">refresh rest of the patches
</pre>
</li>
</ul>
<h4>30 changed files:</h4>
<ul>
<li class="file-stats">
<a href="#354079a72b91a4280407c16a36f47d1986fd85a5">
.classpath
</a>
</li>
<li class="file-stats">
<a href="#366cdbd6e405218760f06f85df3039b2809dcb64">
<span class="new-file">
+
.github/workflows/qe-tests.yml
</span>
</a>
</li>
<li class="file-stats">
<a href="#4b905b3ce8db4f70f4829d47fb4b4f852ff810a2">
.github/workflows/required-tests.yml
</a>
</li>
<li class="file-stats">
<a href="#a5cc2925ca8258af241be7e5b0381edf30266302">
.gitignore
</a>
</li>
<li class="file-stats">
<a href="#3f454a98e586d1aa0d322e19afd5e67e08f2d3c8">
<span class="new-file">
+
CONTRIBUTING.md
</span>
</a>
</li>
<li class="file-stats">
<a href="#8ec9a00bfd09b3190ac6b22251dbb1aa95a0579d">
README.md
</a>
</li>
<li class="file-stats">
<a href="#d0f22e8bdff03f4e5a1fd1bf9ce97db437323959">
base/CMakeLists.txt
</a>
</li>
<li class="file-stats">
<a href="#0b3cc8b828fd333d07b22c8f8cd7923f0bf75ea9">
base/acme/CMakeLists.txt
</a>
</li>
<li class="file-stats">
<a href="#63ffd8e45cfcae6135a76ec084286fce4acc3a2f">
base/acme/Dockerfile
</a>
</li>
<li class="file-stats">
<a href="#b79bea530cf82a6344c73a270b0661da2e16c814">
<span class="new-file">
+
base/acme/bin/pki-acme-run
</span>
</a>
</li>
<li class="file-stats">
<a href="#dae87b076f6402e65d0171d8133267a7bff8d60a">
<span class="new-file">
+
base/acme/conf/realm.conf
</span>
</a>
</li>
<li class="file-stats">
<a href="#a7ec5ab6fc297858bd5ccb9a00d419b75be65599">
<span class="new-file">
+
base/acme/database/ds/create.ldif
</span>
</a>
</li>
<li class="file-stats">
<a href="#fd73bba9cc2bca4eb32cef8f8439f234af883b52">
<span class="new-file">
+
base/acme/database/ds/database.conf
</span>
</a>
</li>
<li class="file-stats">
<a href="#07f9cab9f15e558f2286ffe243dd0a5fb7b7d8c4">
<span class="new-file">
+
base/acme/database/ds/schema.ldif
</span>
</a>
</li>
<li class="file-stats">
<a href="#cd414bf01c797d3be6764d5c5d7c98cf9de39ac0">
base/acme/database/ldap/create.ldif
</a>
</li>
<li class="file-stats">
<a href="#2b90e8da42abde5c1605767936beb0e202a3e02f">
base/acme/database/ldap/schema.ldif
</a>
</li>
<li class="file-stats">
<a href="#09b7032f11b42098dd6eb90c11de16a6fcab4163">
<span class="new-file">
+
base/acme/database/openldap/create.ldif
</span>
</a>
</li>
<li class="file-stats">
<a href="#5957e541ca44b0d2a468fdb82081373d735bc49a">
<span class="new-file">
+
base/acme/database/openldap/database.conf
</span>
</a>
</li>
<li class="file-stats">
<a href="#909caa755a5d4a80ccc80f77a25b946eaabd77ff">
<span class="new-file">
+
base/acme/database/openldap/schema.ldif
</span>
</a>
</li>
<li class="file-stats">
<a href="#09e2e7949ea81561c8eec8bd61d7b74d4a27392a">
base/acme/database/postgresql/create.sql
</a>
</li>
<li class="file-stats">
<a href="#6f049b0c092ff159fd4e1ebd30f0939fb652ec1b">
base/acme/database/postgresql/drop.sql
</a>
</li>
<li class="file-stats">
<a href="#f88eee053fb2ebc8ec64730ea2a26bf82714ecc3">
base/acme/database/postgresql/statements.conf
</a>
</li>
<li class="file-stats">
<a href="#c565b1970758217a97cb948e724f423c9f0ad719">
base/acme/openshift/pki-acme-deployment.yaml
</a>
</li>
<li class="file-stats">
<a href="#5405a968792d622fbc5985369f5351a2271afe58">
<span class="new-file">
+
base/acme/openshift/pki-acme-realm.yaml
</span>
</a>
</li>
<li class="file-stats">
<a href="#ed9ffcb1571185ee44ed9eea34726aa2b09845ad">
<span class="new-file">
+
base/acme/realm/ds/create.ldif
</span>
</a>
</li>
<li class="file-stats">
<a href="#87f12dd2ae826b70a678390aba6a6df81a81209a">
<span class="new-file">
+
base/acme/realm/ds/realm.conf
</span>
</a>
</li>
<li class="file-stats">
<a href="#9f47f5094d519f06b9f20e0c3d2b495b306317ba">
<span class="new-file">
+
base/acme/realm/in-memory/realm.conf
</span>
</a>
</li>
<li class="file-stats">
<a href="#068d61a1239d8cbf4be4b7fde38fe40772142450">
<span class="new-file">
+
base/acme/realm/postgresql/create.sql
</span>
</a>
</li>
<li class="file-stats">
<a href="#974271d167664bddd3bb60984d8b342b7e835872">
<span class="new-file">
+
base/acme/realm/postgresql/drop.sql
</span>
</a>
</li>
<li class="file-stats">
<a href="#cb8cf39149d5d92cae670653d0271c00b776d716">
<span class="new-file">
+
base/acme/realm/postgresql/realm.conf
</span>
</a>
</li>
</ul>
<h5>The diff was not included because it is too large.</h5>

</div>
<div class="footer" style="margin-top: 10px;">
<p style="font-size: small; color: #666;">

<br>
<a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/compare/3881dbb2d95a82c98e4c4d76d31e62a7a7ee651e...8fdbdced6b34a362b6e8133d0334ce3f33965dd1">View it on GitLab</a>.
<br>
You're receiving this email because of your account on salsa.debian.org.
If you'd like to receive fewer emails, you can
adjust your notification settings.



</p>
</div>
</body>
</html>