<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN" "http://www.w3.org/TR/REC-html40/loose.dtd">

<html lang="en">

<head>

<meta content="text/html; charset=US-ASCII" http-equiv="Content-Type">

<title>

GitLab

</title>

<style>img {

max-width: 100%; height: auto;

}

</style>

</head>

<body>

<div class="content">

<h3>

Timo Aaltonen pushed to branch upstream

at <a href="https://salsa.debian.org/freeipa-team/dogtag-pki">FreeIPA packaging / dogtag-pki</a>

</h3>

<h4>

Commits:

</h4>

<ul>

<li>

<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/300fbb536b21b36ba7dc6e8e1788aadaec676e23">300fbb53</a></strong>

<div>

<span>by Dinesh Prasanth M K</span>

<i>at 2020-08-04T16:53:55-04:00</i>

</div>

<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Fix Secure connection issue when server is down

When the PKI server is down, the server is temporarily

brought up using a temporary SSL server cert. This cert

needs to be trusted to enable secure connection.

This patch:

* allows passes instance's nssdb as the client nssdb to

  trust the SSL server created during cert-fix (offline

  cert renewal process).

* Gets the hostname using socket instead of from env

  variable

Signed-off-by: Dinesh Prasanth M K <dmoluguw@redhat.com>

</pre>

</li>

<li>

<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/858d6a0586c67719d2a4491e2e3d2dc375e959ac">858d6a05</a></strong>

<div>

<span>by Endi S. Dewata</span>

<i>at 2020-08-04T15:55:38-05:00</i>

</div>

<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Updated version number to 10.10.0-alpha1

</pre>

</li>

<li>

<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/b62d6960bbe9a610daaf066dd52390abbe96857a">b62d6960</a></strong>

<div>

<span>by Stanislav Levin</span>

<i>at 2020-08-04T15:56:02-05:00</i>

</div>

<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Fix Version.__getnewargs__

According to the docs [0]:

>  object.__getnewargs__()

This method serves a similar purpose as __getnewargs_ex__(), but

supports only positional arguments. It must return a tuple of

arguments args which will be passed to the __new__() method upon

unpickling.

[0]: https://docs.python.org/3/library/pickle.html#object.__getnewargs__

Fixes: https://pagure.io/dogtagpki/issue/3200

Signed-off-by: Stanislav Levin <slev@altlinux.org>

</pre>

</li>

<li>

<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/b14b0268ab4cc69c72cd3b28145cd022693104a0">b14b0268</a></strong>

<div>

<span>by Stanislav Levin</span>

<i>at 2020-08-04T15:58:12-05:00</i>

</div>

<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Fix unittest DeprecationWarning

`assertEquals` is deprecated in favor of `assertEqual` since Python3.2:

https://docs.python.org/3/whatsnew/3.2.html

Fixes: https://pagure.io/dogtagpki/issue/3201

Signed-off-by: Stanislav Levin <slev@altlinux.org>

</pre>

</li>

<li>

<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/1baa5763b6272cbe8cb4a1b6bba4e73b39ff246f">1baa5763</a></strong>

<div>

<span>by Endi S. Dewata</span>

<i>at 2020-08-05T14:01:09-05:00</i>

</div>

<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Fixed exception message in ConfigClient

</pre>

</li>

<li>

<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/ff77811b49250602bd66b53d9e6c1c2f15a692fa">ff77811b</a></strong>

<div>

<span>by Endi S. Dewata</span>

<i>at 2020-08-05T14:01:09-05:00</i>

</div>

<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Updated ACME container to Fedora 31

</pre>

</li>

<li>

<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/49585867207922479644a03078c29548de02cd03">49585867</a></strong>

<div>

<span>by Dinesh Prasanth M K</span>

<i>at 2020-08-05T16:35:58-04:00</i>

</div>

<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Move from sudo to runuser

This patch migrates usage of sudo to runuser. In containers

sudo is not installed by default. Whereas, `runuser` is part of

'util-linux' pacakge, whcih is installed by default

Fixes: https://pagure.io/dogtagpki/issue/3171

Signed-off-by: Dinesh Prasanth M K <dmoluguw@redhat.com>

</pre>

</li>

<li>

<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/a2665b9f09705943a0bb4f29432a2998512a8140">a2665b9f</a></strong>

<div>

<span>by jmagne</span>

<i>at 2020-08-06T09:44:27-07:00</i>

</div>

<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Address RHCS-1347 dd healthcheck to test the health of clone. (#496)

Simple test of clones associated with a pki instance.

Testing is predicated on locating within the given instance a CA security domain subsystem.

>From there the security domain is consulted for a list of cloned subsystems.

Each clone found is checked in a simple fashion for a connectivity and for simple data,

when appropriate. For now the OCSP , TKS, and TPS clones are checked for connectivity.

Another caveat: Originally I wanted to pair up each discoverd clone with it's master and compare data

within the CA and KRA to match them up. This round I was nota able to easily figure out this mapping, so for

now the actual clones are tested.

Simple command line to run the test directly:

pki-healthcheck --debug  --source pki.server.healthcheck.clones.connectivity_and_data --check ClonesConnectivyAndDataCheck

The test reaches out provides a result for each group of ca, kra, ocsp, tps, and tks clones.

Note that we have issues with tps and ocsp clones at this point.

Co-authored-by: Jack Magne <jmagne@localhost.localdomain></pre>

</li>

<li>

<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/33623f6bb7e5e4640f62d50c1e4547d609a9ee31">33623f6b</a></strong>

<div>

<span>by Endi S. Dewata</span>

<i>at 2020-08-07T12:37:59-05:00</i>

</div>

<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Added ACMEDatabase.getAccountOrders()

The ACMEDatabase.getAccountOrders() has been added to return

all order records created by an account.

</pre>

</li>

<li>

<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/f6c2f759ead1859c63cd478e8b7df1c545534027">f6c2f759</a></strong>

<div>

<span>by Endi S. Dewata</span>

<i>at 2020-08-07T12:37:59-05:00</i>

</div>

<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Added ACMEAccountOrdersService

The ACMEAccountOrdersService has been added to return

non-invalid orders created by an account.

</pre>

</li>

<li>

<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/64e76602138eec12f5e8c7ae73747484265900bc">64e76602</a></strong>

<div>

<span>by Alexander Scheel</span>

<i>at 2020-08-07T14:03:42-04:00</i>

</div>

<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Fix runuser to use absolute path

When pki-server is called as root, the following message is displayed

when trying to use runuser:

    DEBUG: Command: runuser -u pkiuser -- /usr/sbin/pki-server upgrade --debug pki-tomcat

    ERROR: [Errno 2] No such file or directory: 'runuser'

    Traceback (most recent call last):

      File "/usr/lib/python3.9/site-packages/pki/server/pkiserver.py", line 40, in <module>

        cli.execute(sys.argv)

      File "/usr/lib/python3.9/site-packages/pki/server/cli/__init__.py", line 143, in execute

        super(PKIServerCLI, self).execute(args)

      File "/usr/lib/python3.9/site-packages/pki/cli/__init__.py", line 197, in execute

        module.execute(module_args)

      File "/usr/lib/python3.9/site-packages/pki/server/cli/__init__.py", line 770, in execute

        instance.run(

      File "/usr/lib/python3.9/site-packages/pki/server/__init__.py", line 290, in run

        p = self.execute(

      File "/usr/lib/python3.9/site-packages/pki/server/instance.py", line 214, in execute

        subprocess.run(cmd, env=self.config, check=True)

      File "/usr/lib64/python3.9/subprocess.py", line 501, in run

        with Popen(*popenargs, **kwargs) as process:

      File "/usr/lib64/python3.9/subprocess.py", line 947, in __init__

        self._execute_child(args, executable, preexec_fn, close_fds,

      File "/usr/lib64/python3.9/subprocess.py", line 1819, in _execute_child

        raise child_exception_type(errno_num, err_msg, err_filename)

    FileNotFoundError: [Errno 2] No such file or directory: 'runuser'

This is because sudo lives under /usr/bin, which exists on PATH by

default, but because runuser lives under /usr/sbin (which is admin-only)

it doesn't live on PATH by default. Thus, an absolute path to the

executable needs to be provided.

This change was merged in 49585867207922479644a03078c29548de02cd03.

Signed-off-by: Alexander Scheel <ascheel@redhat.com>

</pre>

</li>

<li>

<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/26bb71efa2efa2c9b8595df0dedf5506e93e34a6">26bb71ef</a></strong>

<div>

<span>by Alexander Scheel</span>

<i>at 2020-08-07T14:03:52-04:00</i>

</div>

<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Add server dependency on jaxb-api

Signed-off-by: Alexander Scheel <ascheel@redhat.com>

</pre>

</li>

<li>

<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/acac6d87c3b784879cc293a6a950495b448bf145">acac6d87</a></strong>

<div>

<span>by Dinesh Prasanth M K</span>

<i>at 2020-08-10T18:22:25-04:00</i>

</div>

<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Add nuxwdog status to pki-server status

Display whether nuxwdog is enabled on the system when executing

pki-server status

Signed-off-by: Dinesh Prasanth M K <dmoluguw@redhat.com>

</pre>

</li>

<li>

<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/a53957ec6cfd2e2f2488f03dadb4b6673ee10334">a53957ec</a></strong>

<div>

<span>by Endi S. Dewata</span>

<i>at 2020-08-10T19:10:18-05:00</i>

</div>

<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Added pki-acme RPM package

The ACME-related files have been moved from pki-server to a new

pki-acme package. The pki-javadoc has been modified to include

ACME classes.

</pre>

</li>

<li>

<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/ce730f7f6ef198651e2a30af91f7a2bf6cad09a9">ce730f7f</a></strong>

<div>

<span>by Endi S. Dewata</span>

<i>at 2020-08-12T08:33:14-05:00</i>

</div>

<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Disabled AIA and cert policy extensions in ACME examples

The ACME NSS issuer has been modified to disable the AIA and

certificate policy extensions by default since they contain

non-functional URLs that might cause certbot to generate

error messages.

</pre>

</li>

<li>

<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/d7858a3b3082dcebc7652a7b10193e47d3f95bd5">d7858a3b</a></strong>

<div>

<span>by Alexander Scheel</span>

<i>at 2020-08-12T11:13:34-05:00</i>

</div>

<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Start NSSCertExportCLI

Can be tested with pki nss-cert-export

Signed-off-by: Alexander Scheel <ascheel@redhat.com>

</pre>

</li>

<li>

<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/c5e1541fe044e147d442400368ac55debc16dfd9">c5e1541f</a></strong>

<div>

<span>by Alexander Scheel</span>

<i>at 2020-08-12T11:13:34-05:00</i>

</div>

<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Fix export on FIPS-enabled HSMs

Signed-off-by: Alexander Scheel <ascheel@redhat.com>

</pre>

</li>

<li>

<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/04c78d6227cd5c8cb497dbc3bf1b57d1de8e70dc">04c78d62</a></strong>

<div>

<span>by Endi S. Dewata</span>

<i>at 2020-08-12T11:13:34-05:00</i>

</div>

<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Fixed cert nickname in NSSDatabase.export_cert_from_db()

The NSSDatabase.export_cert_from_db() has been modified to

no longer prepend the token name to the cert nickname since

the cert nickname obtained from serverCertNick.conf already

contains the token name.</pre>

</li>

<li>

<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/2de8e580b860675f0d37005ace082c21b95ee213">2de8e580</a></strong>

<div>

<span>by Endi S. Dewata</span>

<i>at 2020-08-12T11:13:34-05:00</i>

</div>

<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Removed blank lines in pki nss-cert-export output

The pki nss-cert-export has been modified to remove the extra

blank lines between certs and at the end of the output.</pre>

</li>

<li>

<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/06ec7e93a4609a1fe9feb97af7aafa847e4f455e">06ec7e93</a></strong>

<div>

<span>by Endi S. Dewata</span>

<i>at 2020-08-12T15:58:52-05:00</i>

</div>

<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Added creation timestamps in ACME database

The ACME database has been modified to store the creation

timestamps of ACME records for further analysis.

</pre>

</li>

<li>

<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/06c9066440c0eeb590c7357e18b118b576f44063">06c90664</a></strong>

<div>

<span>by Endi S. Dewata</span>

<i>at 2020-08-13T09:10:00-05:00</i>

</div>

<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Cleaned up log messages in FIPS.is_enabled()

</pre>

</li>

<li>

<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/dba659180578759346df3445748beba21d44b0cf">dba65918</a></strong>

<div>

<span>by Endi S. Dewata</span>

<i>at 2020-08-13T09:10:00-05:00</i>

</div>

<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Cleaned up log messages in NSSDatabase

</pre>

</li>

<li>

<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/78520ccf227add9aa7e1858ae420832280350593">78520ccf</a></strong>

<div>

<span>by Endi S. Dewata</span>

<i>at 2020-08-13T09:13:46-05:00</i>

</div>

<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Removed Configurator.importAndSetCertPermissionsFromHSM()

The Configurator.importAndSetCertPermissionsFromHSM()

is redundant since the import has been done and the

trust flags have been set earlier in configuration.py.

</pre>

</li>

<li>

<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/4976eef95b78677e1cbc8240556cb762af8b7be9">4976eef9</a></strong>

<div>

<span>by Endi S. Dewata</span>

<i>at 2020-08-13T09:17:51-05:00</i>

</div>

<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Removed Configurator.verifySystemCertificates()

The Configurator.verifySystemCertificates() is redundant

since the certificates will be validated by the code that

actually uses the certificate.

</pre>

</li>

<li>

<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/dbe55769af529236293e3ff47e48d942e9e6c794">dbe55769</a></strong>

<div>

<span>by Endi S. Dewata</span>

<i>at 2020-08-13T10:36:23-05:00</i>

</div>

<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Removed CloneSetupRequest.setupReplication

The CloneSetupRequest.setupReplication is no longer needed

since the pki_clone_setup_replication will be checked before

calling SystemConfigService.setupClone().

</pre>

</li>

<li>

<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/d58a4d8ea8d80c186f11247a70f25e92ff4d566e">d58a4d8e</a></strong>

<div>

<span>by Endi S. Dewata</span>

<i>at 2020-08-13T12:35:23-05:00</i>

</div>

<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Removed duplicate extension attributes

The X509CertImplMapper.mapObjectToLDAPAttributeSet() has been

modified to add the extensions as a single attribute with

multiple values instead of multiple attributes with single

values.

</pre>

</li>

<li>

<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/6642a31b35ce0519ed88cd098150412e7e065225">6642a31b</a></strong>

<div>

<span>by Endi S. Dewata</span>

<i>at 2020-08-13T20:15:09-05:00</i>

</div>

<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Moved ExtAttrDynMapper into a separate file

</pre>

</li>

<li>

<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/073ca9b9a2c29a4248560438f2e2d832a5046f04">073ca9b9</a></strong>

<div>

<span>by Endi S. Dewata</span>

<i>at 2020-08-13T20:17:22-05:00</i>

</div>

<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Moved RequestAttrsMapper into a separate file

</pre>

</li>

<li>

<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/8633de0484909045948554aa6d745cd6fc1a8b11">8633de04</a></strong>

<div>

<span>by Endi S. Dewata</span>

<i>at 2020-08-13T20:18:38-05:00</i>

</div>

<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Moved RequestIdMapper into a separate file

</pre>

</li>

<li>

<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/117dee93528236e35a11ded059705655e26706f8">117dee93</a></strong>

<div>

<span>by Endi S. Dewata</span>

<i>at 2020-08-13T20:19:50-05:00</i>

</div>

<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Moved RequestStateMapper into a separate file

</pre>

</li>

<li>

<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/4b7e3d9fecd5c06d0cbd03b10c15458e265b7e29">4b7e3d9f</a></strong>

<div>

<span>by Endi S. Dewata</span>

<i>at 2020-08-13T20:19:50-05:00</i>

</div>

<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Updated log messages in DBSSession

</pre>

</li>

<li>

<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/35bd2159beaafb5d05c489fa70e15025d90239fc">35bd2159</a></strong>

<div>

<span>by Endi S. Dewata</span>

<i>at 2020-08-13T20:19:50-05:00</i>

</div>

<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Updated log messages in UGSubsystem.addUser()

</pre>

</li>

<li>

<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/134063962f027abe823f41a44cec5ac631545f18">13406396</a></strong>

<div>

<span>by Endi S. Dewata</span>

<i>at 2020-08-13T20:19:50-05:00</i>

</div>

<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Updated log messages in Configurator.createSecurityDomain()

</pre>

</li>

<li>

<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/c6f91404b2d9f122abbbe281e420e7b8e4c286cd">c6f91404</a></strong>

<div>

<span>by Endi S. Dewata</span>

<i>at 2020-08-17T12:32:32-05:00</i>

</div>

<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Moved ValidityConstraint to pki-ca

</pre>

</li>

<li>

<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/9d4d1496389e2bad2a99c4c44f50321da749a1ad">9d4d1496</a></strong>

<div>

<span>by Endi S. Dewata</span>

<i>at 2020-08-17T12:32:41-05:00</i>

</div>

<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Moved CAValidityConstraint to pki-ca

</pre>

</li>

<li>

<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/dcd4af06cd924a24b4e361c304ac220e4cbb371a">dcd4af06</a></strong>

<div>

<span>by Endi S. Dewata</span>

<i>at 2020-08-17T12:32:43-05:00</i>

</div>

<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Moved ValidityDefault to pki-ca

</pre>

</li>

<li>

<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/e1a09d37334c17d37dda12b2c3e84555af740f9e">e1a09d37</a></strong>

<div>

<span>by Endi S. Dewata</span>

<i>at 2020-08-17T12:32:45-05:00</i>

</div>

<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Moved CAValidityDefault to pki-ca

</pre>

</li>

<li>

<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/e3e8bb4311374cd9672d4c622dc98a50f8858a5a">e3e8bb43</a></strong>

<div>

<span>by Endi S. Dewata</span>

<i>at 2020-08-17T12:32:47-05:00</i>

</div>

<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Moved AuthorityKeyIdentifierExtDefault to pki-ca

</pre>

</li>

<li>

<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/8034c425d88f2abb0bde442f191ddf596e13c117">8034c425</a></strong>

<div>

<span>by Endi S. Dewata</span>

<i>at 2020-08-17T12:32:49-05:00</i>

</div>

<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Moved CAEnrollDefault to pki-ca

</pre>

</li>

<li>

<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/f62127f1f51320f4d13456cd73a1c05d55dcc56d">f62127f1</a></strong>

<div>

<span>by Endi S. Dewata</span>

<i>at 2020-08-17T12:32:51-05:00</i>

</div>

<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Moved CAAdminServlet to pki-ca

</pre>

</li>

<li>

<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/fa66cef494b36b929b145ea86f45bf3345dd0a5a">fa66cef4</a></strong>

<div>

<span>by Endi S. Dewata</span>

<i>at 2020-08-17T12:32:53-05:00</i>

</div>

<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Moved SearchReqs to pki-ca

</pre>

</li>

<li>

<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/b984169f936ed07b2b8163dbf36e14e3b95647ce">b984169f</a></strong>

<div>

<span>by Endi S. Dewata</span>

<i>at 2020-08-17T12:32:56-05:00</i>

</div>

<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Moved ProcessCertReq to pki-ca

</pre>

</li>

<li>

<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/d414e4c480b07eda885efd7c192b9ab983e09967">d414e4c4</a></strong>

<div>

<span>by Endi S. Dewata</span>

<i>at 2020-08-17T12:32:59-05:00</i>

</div>

<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Moved CheckRequest to pki-ca

</pre>

</li>

<li>

<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/4ef8639d233fc33a384886efad5012b481c17c3b">4ef8639d</a></strong>

<div>

<span>by Endi S. Dewata</span>

<i>at 2020-08-17T12:33:04-05:00</i>

</div>

<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Moved CertificateIssuedListener to pki-ca

</pre>

</li>

<li>

<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/deda4fc3d072aa680745eac298339e4b646242e1">deda4fc3</a></strong>

<div>

<span>by Endi S. Dewata</span>

<i>at 2020-08-17T12:33:07-05:00</i>

</div>

<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Moved CertificateRevokedListener to pki-ca

</pre>

</li>

<li>

<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/b346f168fa675335f037f7422144f7254de6c013">b346f168</a></strong>

<div>

<span>by Endi S. Dewata</span>

<i>at 2020-08-17T12:36:02-05:00</i>

</div>

<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Removed unused CloneSetupRequest.domainInfo

</pre>

</li>

<li>

<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/cfc48c721f1f272259faf28e9e2901d0abc0df99">cfc48c72</a></strong>

<div>

<span>by Endi S. Dewata</span>

<i>at 2020-08-17T12:36:08-05:00</i>

</div>

<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Removed unused CloneSetupRequest.installToken

</pre>

</li>

<li>

<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/087861ff1c0d8bc4d037c0af8c90cd27f76dccba">087861ff</a></strong>

<div>

<span>by Endi S. Dewata</span>

<i>at 2020-08-17T12:36:10-05:00</i>

</div>

<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Removed unused CloneSetupRequest.cloneUri

</pre>

</li>

<li>

<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/b5971bdb3caaf4a1898879415c9ffe389c244243">b5971bdb</a></strong>

<div>

<span>by Endi S. Dewata</span>

<i>at 2020-08-17T12:36:12-05:00</i>

</div>

<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Removed unused CloneSetupRequest.systemCertsImported

</pre>

</li>

<li>

<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/cceb185111e067f9d7c9bc041ec68c96c313849d">cceb1851</a></strong>

<div>

<span>by Endi S. Dewata</span>

<i>at 2020-08-17T13:27:11-05:00</i>

</div>

<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Updated log messages in UGSubsystem

</pre>

</li>

<li>

<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/75014d318ca483ea9a9fe438efd4d5ca4235601d">75014d31</a></strong>

<div>

<span>by Christina Fu</span>

<i>at 2020-08-17T14:10:23-07:00</i>

</div>

<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Bug1629025-DEV doc for: Server-Side Keygen for EE

This patch provides document: ServerSideKeygen.adoc

https://bugzilla.redhat.com/show_bug.cgi?id=1629025

</pre>

</li>

<li>

<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/09eaa014bc768252f4b2fba10e509877bccadce1">09eaa014</a></strong>

<div>

<span>by Endi S. Dewata</span>

<i>at 2020-08-17T17:10:02-05:00</i>

</div>

<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Replaced ICertificateAuthority in CAService

</pre>

</li>

<li>

<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/3d7afcfee5fa2e99ddbd1cbfb0734c14f8d2e35f">3d7afcfe</a></strong>

<div>

<span>by Endi S. Dewata</span>

<i>at 2020-08-17T17:10:02-05:00</i>

</div>

<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Replaced ICertificateAuthority in CTEngine.process()

</pre>

</li>

<li>

<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/2945a5b7e6f25a2ff8b4506abf3033c0f9790203">2945a5b7</a></strong>

<div>

<span>by Endi S. Dewata</span>

<i>at 2020-08-17T17:10:02-05:00</i>

</div>

<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Replaced ISubsystem in CAPolicy.init()

</pre>

</li>

<li>

<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/df81fc3cca617a089705aaae435dedb6c02a77dd">df81fc3c</a></strong>

<div>

<span>by Endi S. Dewata</span>

<i>at 2020-08-17T17:10:02-05:00</i>

</div>

<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Replaced ISubsystem in KRAPolicy.init()

</pre>

</li>

<li>

<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/bfc42c2e73c292328fc9b73f5cda3c49b65c249d">bfc42c2e</a></strong>

<div>

<span>by Endi S. Dewata</span>

<i>at 2020-08-17T17:10:02-05:00</i>

</div>

<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Replaced ISubsystem in GenericPolicyProcessor.init()

</pre>

</li>

<li>

<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/f713480486f1d79385c408a8d12983439551334c">f7134804</a></strong>

<div>

<span>by Endi S. Dewata</span>

<i>at 2020-08-17T17:11:41-05:00</i>

</div>

<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Replaced ICertificateAuthority in CertificateAuthority.createSubCA()

</pre>

</li>

<li>

<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/f7e1591fd94075312b2408aa41f11fad750d1196">f7e1591f</a></strong>

<div>

<span>by Endi S. Dewata</span>

<i>at 2020-08-17T17:11:59-05:00</i>

</div>

<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Replaced ICertificateAuthority in CertificateAuthority.createCA()

</pre>

</li>

<li>

<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/cb1e6f9ef7d15c8c72e7b9b8acb9e4edb6cc0f16">cb1e6f9e</a></strong>

<div>

<span>by Endi S. Dewata</span>

<i>at 2020-08-17T17:12:02-05:00</i>

</div>

<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Replaced ICertificateAuthority in CertificateAuthority.getCAs()

</pre>

</li>

<li>

<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/c2853e463d8d77dfe98b98b5b91f68172fb7b508">c2853e46</a></strong>

<div>

<span>by Endi S. Dewata</span>

<i>at 2020-08-17T17:12:05-05:00</i>

</div>

<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Replaced ICertificateAuthority in CertificateAuthority.getCA(X500Name)

</pre>

</li>

<li>

<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/76d1e1a3f7ae8db868976e73c57ed11656925a23">76d1e1a3</a></strong>

<div>

<span>by Endi S. Dewata</span>

<i>at 2020-08-17T17:12:08-05:00</i>

</div>

<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Replaced ICertificateAuthority in CertificateAuthority.getCA(AuthorityID)

</pre>

</li>

<li>

<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/14c5298b6515554fb5cc5cb4612d887f8c1cc189">14c5298b</a></strong>

<div>

<span>by 06shalini</span>

<i>at 2020-08-18T11:50:00+05:30</i>

</div>

<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Added changes in ansible playbooks and role ymls to make tests run for following installations: (#509)

1. Fips enabled machine

2. Shared tomcat installation

3. Discrete tomcat installation

4. ecc discrete tomcat installation

Signed-off-by: Shalini Khandelwal <skhandel@redhat.com>

Co-authored-by: Shalini Khandelwal <skhandel@redhat.com></pre>

</li>

<li>

<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/ebf730d5184c136e9460448054284b20402ae320">ebf730d5</a></strong>

<div>

<span>by Endi S. Dewata</span>

<i>at 2020-08-18T11:58:34-05:00</i>

</div>

<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Moved PublisherAdminServlet to pki-ca

</pre>

</li>

<li>

<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/e4b0b7f5b9d3f22073ebeb0131fef903b8038d8d">e4b0b7f5</a></strong>

<div>

<span>by Endi S. Dewata</span>

<i>at 2020-08-18T11:58:42-05:00</i>

</div>

<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Moved ChallengeRevocationServlet1 to pki-ca

</pre>

</li>

<li>

<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/d3814050022090aaabb889eb0cc7295d64169e62">d3814050</a></strong>

<div>

<span>by Endi S. Dewata</span>

<i>at 2020-08-18T11:58:44-05:00</i>

</div>

<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Moved CMCRevReqServlet to pki-ca

</pre>

</li>

<li>

<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/61feb73c06f3706ec56c2307d368b38066c5eeaa">61feb73c</a></strong>

<div>

<span>by Endi S. Dewata</span>

<i>at 2020-08-18T11:58:45-05:00</i>

</div>

<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Moved DisplayBySerial to pki-ca

</pre>

</li>

<li>

<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/50770ad9555c48f3481beea7cdcc1df051f77c2e">50770ad9</a></strong>

<div>

<span>by Endi S. Dewata</span>

<i>at 2020-08-18T11:58:47-05:00</i>

</div>

<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Moved GetCAChain to pki-ca

</pre>

</li>

<li>

<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/7379515c743aabb8c21af9743589a4ef4364d941">7379515c</a></strong>

<div>

<span>by Endi S. Dewata</span>

<i>at 2020-08-18T11:58:49-05:00</i>

</div>

<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Moved EnrollServlet to pki-ca

</pre>

</li>

<li>

<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/863f4e25d0d2dddb95a8e258117f7fd6e0debba3">863f4e25</a></strong>

<div>

<span>by Endi S. Dewata</span>

<i>at 2020-08-18T11:58:51-05:00</i>

</div>

<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Moved GetCertChain to pki-ca

</pre>

</li>

<li>

<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/06eefe1ad91eca216ed9af12795dd8c488837f37">06eefe1a</a></strong>

<div>

<span>by Endi S. Dewata</span>

<i>at 2020-08-18T11:58:53-05:00</i>

</div>

<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Moved LdapPublishModule to pki-ca

</pre>

</li>

<li>

<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/1b89140a2e99ae5718513e4b8d2169064c24c0ce">1b89140a</a></strong>

<div>

<span>by Endi S. Dewata</span>

<i>at 2020-08-18T11:58:55-05:00</i>

</div>

<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Moved PublishCertsJob to pki-ca

</pre>

</li>

<li>

<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/537f8ef36a1b50ca8e51a5d66d9dfcb6c7880102">537f8ef3</a></strong>

<div>

<span>by Endi S. Dewata</span>

<i>at 2020-08-18T11:58:57-05:00</i>

</div>

<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Moved RenewalNotificationJob to pki-ca

</pre>

</li>

<li>

<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/7f392e8d9458aae3349c556cd7538e71ec631ad3">7f392e8d</a></strong>

<div>

<span>by Endi S. Dewata</span>

<i>at 2020-08-18T11:59:00-05:00</i>

</div>

<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Moved UnpublishExpiredJob to pki-ca

</pre>

</li>

<li>

<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/576103106e1b79c799f7c9ad14c8975d646d8095">57610310</a></strong>

<div>

<span>by Alexander Scheel</span>

<i>at 2020-08-18T14:20:48-04:00</i>

</div>

<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Make PKI use JDK8 everywhere again

Signed-off-by: Alexander Scheel <ascheel@redhat.com>

</pre>

</li>

<li>

<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/7a1a41b2f06d6cf6da1f38aaada4f09b8f7497c1">7a1a41b2</a></strong>

<div>

<span>by Endi S. Dewata</span>

<i>at 2020-08-18T13:41:46-05:00</i>

</div>

<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Removed cfgPath parameter from CMSStartServlet

The cfgPath parameter has been removed from CMSStartServlet

since it is currently not used and it can only be specified

in web.xml which is not customizable either.

</pre>

</li>

<li>

<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/21a29c0e37f42de4225187d7c051208760058d97">21a29c0e</a></strong>

<div>

<span>by Endi S. Dewata</span>

<i>at 2020-08-18T13:41:46-05:00</i>

</div>

<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Added id field for CMSEngine

A new id field has been added to CMSEngine to store the

subsystem ID.

</pre>

</li>

<li>

<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/27680c7b3ab3b50c32242cafadee49509dd5d96c">27680c7b</a></strong>

<div>

<span>by Endi S. Dewata</span>

<i>at 2020-08-18T18:23:58-05:00</i>

</div>

<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Updated CMSEngine.startup()

The CMSEngine.startup() has been renamed to start(). The

code in CMSStartServlet that initializes and starts the

engine has been moved into this method.

</pre>

</li>

<li>

<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/bd850775e1e8bd27bc5fae36f283f591901dab88">bd850775</a></strong>

<div>

<span>by Endi S. Dewata</span>

<i>at 2020-08-18T19:50:35-05:00</i>

</div>

<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Added ServletContextListener methods into CMSEngine

The CMSEngine has been modified to implement methods defined

in ServletContextListener interface for starting up and

shutting down the engine.

</pre>

</li>

<li>

<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/c5e1b24ac60a13a22668f882bf32e4f68e7a0ffc">c5e1b24a</a></strong>

<div>

<span>by Endi S. Dewata</span>

<i>at 2020-08-18T19:50:35-05:00</i>

</div>

<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Updated engine parameter in CMSStartServlet

The engine parameter in CMSStartServlet has been modified to

become optional.

</pre>

</li>

<li>

<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/78aa0de85c00dc913912eb734d194a76ec3c60e3">78aa0de8</a></strong>

<div>

<span>by Endi S. Dewata</span>

<i>at 2020-08-19T17:39:47-05:00</i>

</div>

<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Fixed ACME schema installation

Previously the ACME schema was installed by default whenever

any PKI subsystem was installed. Since all ACME files have

been moved into an optional pki-acme package, the ACME schema

should no longer be installed by default. Instead, the ACME

schema should be installed separately as described in ACME

installation document.

</pre>

</li>

<li>

<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/526fd9a157585a9d46ec9a0b85568702c943fbd5">526fd9a1</a></strong>

<div>

<span>by Endi S. Dewata</span>

<i>at 2020-08-19T20:34:49-05:00</i>

</div>

<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Updated CA startup

The CAEngine has been modified to implement

ServletContextListener which will start up and shut down

the subsystem.

</pre>

</li>

<li>

<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/760eabce0fc64ac4646e5016c2fc909f198b3021">760eabce</a></strong>

<div>

<span>by Endi S. Dewata</span>

<i>at 2020-08-19T20:35:03-05:00</i>

</div>

<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Updated KRA startup

The KRAEngine has been modified to implement

ServletContextListener which will start up and shut down

the subsystem.

</pre>

</li>

<li>

<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/588fa0d5365b0bc59d0c60de9da57624274c7b9d">588fa0d5</a></strong>

<div>

<span>by Endi S. Dewata</span>

<i>at 2020-08-19T20:35:10-05:00</i>

</div>

<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Updated OCSP startup

The OCSPEngine has been modified to implement

ServletContextListener which will start up and shut down

the subsystem.

</pre>

</li>

<li>

<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/66899ea9523944403b89c2e28d2e6bacaa6187a9">66899ea9</a></strong>

<div>

<span>by Endi S. Dewata</span>

<i>at 2020-08-19T20:35:10-05:00</i>

</div>

<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Updated TKS startup

The TKSEngine has been modified to implement

ServletContextListener which will start up and shut down

the subsystem.

</pre>

</li>

<li>

<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/9f861c26ed13a4bd31fc9b4d1884950e85571e89">9f861c26</a></strong>

<div>

<span>by Endi S. Dewata</span>

<i>at 2020-08-19T20:35:10-05:00</i>

</div>

<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Updated TPS startup

The TPSEngine has been modified to implement

ServletContextListener which will start up and shut down

the subsystem.

</pre>

</li>

<li>

<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/9bdc201a900f5e6f38dabc61639b67f2973eec21">9bdc201a</a></strong>

<div>

<span>by Endi S. Dewata</span>

<i>at 2020-08-20T12:12:56-05:00</i>

</div>

<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Moved ReqCertSANameEmailResolver to pki-ca

</pre>

</li>

<li>

<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/62d4b779a14fe57c70ade63039b0ba2f82bf0aae">62d4b779</a></strong>

<div>

<span>by Endi S. Dewata</span>

<i>at 2020-08-20T12:12:56-05:00</i>

</div>

<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Moved GetBySerial to pki-ca

</pre>

</li>

<li>

<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/00f01dbf1c5f3d906c7d9fa77cad7c7375f26ac0">00f01dbf</a></strong>

<div>

<span>by Endi S. Dewata</span>

<i>at 2020-08-20T12:12:56-05:00</i>

</div>

<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Moved HashEnrollServlet to pki-ca

</pre>

</li>

<li>

<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/bc15cefe9e5c25cb53cf88c758201d8b07639f20">bc15cefe</a></strong>

<div>

<span>by Endi S. Dewata</span>

<i>at 2020-08-20T12:12:56-05:00</i>

</div>

<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Moved CACertCAEnrollProfile to pki-ca

</pre>

</li>

<li>

<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/6ccdc79516bef1b8fc456f6e9141ae1566bc77c6">6ccdc795</a></strong>

<div>

<span>by Endi S. Dewata</span>

<i>at 2020-08-20T12:12:56-05:00</i>

</div>

<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Moved ServerCertCAEnrollProfile to pki-ca

</pre>

</li>

<li>

<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/b07e3c9dd5749bb5e7b515d55dc234b8e74debac">b07e3c9d</a></strong>

<div>

<span>by Endi S. Dewata</span>

<i>at 2020-08-20T12:12:56-05:00</i>

</div>

<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Moved UserCertCAEnrollProfile to pki-ca

</pre>

</li>

<li>

<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/3b964a46e59ebeb2f505cf23daddfcd554609bdf">3b964a46</a></strong>

<div>

<span>by Endi S. Dewata</span>

<i>at 2020-08-20T12:12:56-05:00</i>

</div>

<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Moved CAEnrollProfile to pki-ca

</pre>

</li>

<li>

<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/acbd386f37e0276036195dc80607da6de6f89404">acbd386f</a></strong>

<div>

<span>by Endi S. Dewata</span>

<i>at 2020-08-20T12:12:56-05:00</i>

</div>

<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Moved CMCOutputTemplate to pki-ca

</pre>

</li>

<li>

<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/a78fd6038b218a727236a5aaf394bf99a60bdf1d">a78fd603</a></strong>

<div>

<span>by Endi S. Dewata</span>

<i>at 2020-08-20T12:12:56-05:00</i>

</div>

<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Moved CMCUserSignedSubjectNameConstraint to pki-ca

</pre>

</li>

<li>

<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/ac60586425557168700bbdd84d2ac45f405ac86b">ac605864</a></strong>

<div>

<span>by Endi S. Dewata</span>

<i>at 2020-08-20T12:12:56-05:00</i>

</div>

<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Moved CMCUserSignedSubjectNameDefault to pki-ca

</pre>

</li>

<li>

<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/0485db3e1baf006cda7b126d3c7423ab5a68e1d0">0485db3e</a></strong>

<div>

<span>by Endi S. Dewata</span>

<i>at 2020-08-20T12:21:35-05:00</i>

</div>

<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Moved CMCUserSignedAuth to pki-ca

</pre>

</li>

<li>

<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/f2e44afacc0f5f339b915fcb5bbdf55f23377917">f2e44afa</a></strong>

<div>

<span>by Endi S. Dewata</span>

<i>at 2020-08-20T12:28:10-05:00</i>

</div>

<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Moved CAEnrollConstraint to pki-ca

</pre>

</li>

<li>

<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/5a5013ede8285b5afc17060378c5be43ba6c1ae4">5a5013ed</a></strong>

<div>

<span>by Alexander Scheel</span>

<i>at 2020-08-21T10:38:56-04:00</i>

</div>

<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Add JAXB Implementation dependency for JDK11+

Signed-off-by: Alexander Scheel <ascheel@redhat.com>

</pre>

</li>

<li>

<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/0c7f54fe96fab42336d9097261f4b850ff06db34">0c7f54fe</a></strong>

<div>

<span>by Alexander Scheel</span>

<i>at 2020-08-21T10:38:56-04:00</i>

</div>

<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Add Jakarta Activation dependency for JDK11+

Signed-off-by: Alexander Scheel <ascheel@redhat.com>

</pre>

</li>

<li>

<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/40857e61e4c1de9fd212dcb9e6417bd02027b7b1">40857e61</a></strong>

<div>

<span>by Alexander Scheel</span>

<i>at 2020-08-24T09:11:02-04:00</i>

</div>

<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Fix permissions when installing clone

When pkispawn runs, it executes as root. However, rarely is PKI

installed as root. The resulting permissions on ca.crt are 600,

preventing later pki-server migrate command from running, as it

runs as pkiuser, who doesn't have access to ca.crt. Fix the

permissions when we initially create ca.crt to be owned by pkiuser.

Signed-off-by: Alexander Scheel <ascheel@redhat.com>

</pre>

</li>

<li>

<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/87a44e923e83062f80a58f0f38c5bb8f622aba91">87a44e92</a></strong>

<div>

<span>by Endi S. Dewata</span>

<i>at 2020-08-24T11:03:31-05:00</i>

</div>

<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Moved CrossCertPairSubsystem to pki-ca

</pre>

</li>

<li>

<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/539e10ff8fa1adb278329567c4e92aa48d92fa82">539e10ff</a></strong>

<div>

<span>by Endi S. Dewata</span>

<i>at 2020-08-24T11:03:31-05:00</i>

</div>

<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Moved CertificatePair to pki-ca

</pre>

</li>

<li>

<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/b09df5c3fafee3c54cd7e05aa3ae10a3d1bf15c2">b09df5c3</a></strong>

<div>

<span>by Endi S. Dewata</span>

<i>at 2020-08-24T11:03:31-05:00</i>

</div>

<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Moved LdapEncryptCertPublisher to pki-ca

</pre>

</li>

<li>

<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/8fabafa52681ce841d7854681c80767a908a39a3">8fabafa5</a></strong>

<div>

<span>by Endi S. Dewata</span>

<i>at 2020-08-24T11:03:31-05:00</i>

</div>

<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Moved PKCS7Output to pki-ca

</pre>

</li>

<li>

<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/dfd0f525fa07689deb81ab47ef3b785a5ac3a3c2">dfd0f525</a></strong>

<div>

<span>by Endi S. Dewata</span>

<i>at 2020-08-24T11:03:31-05:00</i>

</div>

<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Moved CMMFOutput to pki-ca

</pre>

</li>

<li>

<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/6a66f61e72ca256bc0c579c58833c88f49d4c0cc">6a66f61e</a></strong>

<div>

<span>by Endi S. Dewata</span>

<i>at 2020-08-24T11:03:31-05:00</i>

</div>

<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Moved UniqueKeyConstraint to pki-ca

</pre>

</li>

<li>

<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/b6548a1d492f47191327a9a3ff8c41240bac0c6e">b6548a1d</a></strong>

<div>

<span>by Endi S. Dewata</span>

<i>at 2020-08-24T11:03:31-05:00</i>

</div>

<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Moved UniqueSubjectNameConstraint to pki-ca

</pre>

</li>

<li>

<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/1063c6c855538b428a5373eadda27892495fddfe">1063c6c8</a></strong>

<div>

<span>by Endi S. Dewata</span>

<i>at 2020-08-24T11:03:31-05:00</i>

</div>

<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Moved ServerKeygenUserKeyDefault to pki-ca

</pre>

</li>

<li>

<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/bd1f6853f1d2103b566f567ad9107f30d223e84f">bd1f6853</a></strong>

<div>

<span>by Endi S. Dewata</span>

<i>at 2020-08-24T11:03:32-05:00</i>

</div>

<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Moved SigningAlgConstraint to pki-ca

</pre>

</li>

<li>

<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/69a840f7816705157a6d861c1a96792f80e94d33">69a840f7</a></strong>

<div>

<span>by Endi S. Dewata</span>

<i>at 2020-08-24T11:03:32-05:00</i>

</div>

<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Moved SigningAlgDefault to pki-ca

</pre>

</li>

<li>

<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/2ef0b184de40cab8870fb70c6ab1eae11b361522">2ef0b184</a></strong>

<div>

<span>by Endi S. Dewata</span>

<i>at 2020-08-24T11:04:54-05:00</i>

</div>

<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Updated log messages in AuthorityService

</pre>

</li>

<li>

<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/844268fd78deb935825fefd5593ff1b08397a476">844268fd</a></strong>

<div>

<span>by Endi S. Dewata</span>

<i>at 2020-08-24T11:29:14-05:00</i>

</div>

<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Added CAEngine.getCA()

The CAEngine.getCA() has been added to return the main/host

CertificateAuthority instance.

</pre>

</li>

<li>

<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/987a4718c4b2578070cd15652b3cdbabae61afbe">987a4718</a></strong>

<div>

<span>by Endi S. Dewata</span>

<i>at 2020-08-24T19:06:28-05:00</i>

</div>

<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Move CertificateAuthority.caMap to CAEngine

</pre>

</li>

<li>

<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/db000a35667af31ae6774b2a896fb928fde8895e">db000a35</a></strong>

<div>

<span>by Endi S. Dewata</span>

<i>at 2020-08-24T19:06:34-05:00</i>

</div>

<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Move CertificateAuthority.getCAs() to CAEngine

</pre>

</li>

<li>

<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/d845df856dc13b1dcbe52f7074332500f124ade8">d845df85</a></strong>

<div>

<span>by Endi S. Dewata</span>

<i>at 2020-08-24T19:06:41-05:00</i>

</div>

<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Move CertificateAuthority.getCA(AuthorityID) to CAEngine

</pre>

</li>

<li>

<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/3ea58b7bd9d46c3e92521ef5c46d8fa8f014bad9">3ea58b7b</a></strong>

<div>

<span>by Endi S. Dewata</span>

<i>at 2020-08-24T19:06:43-05:00</i>

</div>

<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Move CertificateAuthority.getCA(X500Name) to CAEngine

</pre>

</li>

<li>

<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/e63f8b2491517865704fc3fc0caaf0cce54b4229">e63f8b24</a></strong>

<div>

<span>by Endi S. Dewata</span>

<i>at 2020-08-24T19:10:35-05:00</i>

</div>

<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Remove unused ITimeSource

</pre>

</li>

<li>

<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/40bc98aebddff93ace46429cb43c5374a4280aae">40bc98ae</a></strong>

<div>

<span>by Endi S. Dewata</span>

<i>at 2020-08-24T19:14:28-05:00</i>

</div>

<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Move CertificateAuthority.createCA() to CAEngine

</pre>

</li>

<li>

<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/83129466a0eadd4a9df0f7f5bcbed27d215c2038">83129466</a></strong>

<div>

<span>by Endi S. Dewata</span>

<i>at 2020-08-24T19:14:28-05:00</i>

</div>

<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Add CAEngine.addCA()

</pre>

</li>

<li>

<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/9de5a14bb3e3ef7090f011a56f2a07803210ab7c">9de5a14b</a></strong>

<div>

<span>by Endi S. Dewata</span>

<i>at 2020-08-24T19:14:28-05:00</i>

</div>

<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Add CAEngine.removeCA()

</pre>

</li>

<li>

<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/652eadb51523a3b9b0db98e872b47b09578f5f19">652eadb5</a></strong>

<div>

<span>by Endi S. Dewata</span>

<i>at 2020-08-24T19:49:32-05:00</i>

</div>

<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Move CertificateAuthority.keyRetrieverThreads to CAEngine

</pre>

</li>

<li>

<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/bd525e0ba4a9af1e4ccb10d09ea9968ab81361db">bd525e0b</a></strong>

<div>

<span>by Endi S. Dewata</span>

<i>at 2020-08-24T19:49:33-05:00</i>

</div>

<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Add CAEngine.hasKeyRetriever()

</pre>

</li>

<li>

<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/256248f90c1ab7e5b685e132886ac1a48889ddc1">256248f9</a></strong>

<div>

<span>by Endi S. Dewata</span>

<i>at 2020-08-24T19:49:34-05:00</i>

</div>

<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Add CAEngine.addKeyRetriever()

</pre>

</li>

<li>

<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/8e8ac28272cec68e5cc632e6829c57c4c49fcbb3">8e8ac282</a></strong>

<div>

<span>by Endi S. Dewata</span>

<i>at 2020-08-24T19:49:35-05:00</i>

</div>

<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Add CAEngine.removeKeyRetriever()

</pre>

</li>

<li>

<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/c73824cb533eda000b67a9137c270d1e7324f91e">c73824cb</a></strong>

<div>

<span>by Endi S. Dewata</span>

<i>at 2020-08-24T19:49:36-05:00</i>

</div>

<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Clean up CertificateAuthority.initDefCaAttrs()

</pre>

</li>

<li>

<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/4be50f8418918671ab0c377abe177a6c610044e9">4be50f84</a></strong>

<div>

<span>by Endi S. Dewata</span>

<i>at 2020-08-24T19:49:37-05:00</i>

</div>

<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Clean up CMSEngine.initializePasswordStore()

</pre>

</li>

<li>

<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/ef6bd38da74bb459f1516a0775373a093639a99f">ef6bd38d</a></strong>

<div>

<span>by Endi S. Dewata</span>

<i>at 2020-08-24T19:49:38-05:00</i>

</div>

<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Clean up CMSEngine.configureAutoShutdown()

</pre>

</li>

<li>

<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/b1135ba1dde956f7a571e2d9c811612c5c64de3d">b1135ba1</a></strong>

<div>

<span>by Endi S. Dewata</span>

<i>at 2020-08-24T20:59:12-05:00</i>

</div>

<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Add CMSEngine.initSecurityDomain()

</pre>

</li>

<li>

<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/8371f8137bcd0196647a6e3fedcbba1226bd4995">8371f813</a></strong>

<div>

<span>by Endi S. Dewata</span>

<i>at 2020-08-24T20:59:59-05:00</i>

</div>

<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Add CMSEngine.configurePorts()

</pre>

</li>

<li>

<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/049aa69f3653df301c5bf76ae9be6d9706257667">049aa69f</a></strong>

<div>

<span>by Endi S. Dewata</span>

<i>at 2020-08-24T21:00:00-05:00</i>

</div>

<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Add CMSEngine.initPlugins()

</pre>

</li>

<li>

<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/a8c1e749ae4f818c5e28aa1b032875ea914f3b4a">a8c1e749</a></strong>

<div>

<span>by Endi S. Dewata</span>

<i>at 2020-08-24T21:10:11-05:00</i>

</div>

<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Add CMSEngine.initSecurityProvider()

</pre>

</li>

<li>

<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/790f90d920505b15eab38f7d8723ee418f2beed2">790f90d9</a></strong>

<div>

<span>by Endi S. Dewata</span>

<i>at 2020-08-24T21:10:28-05:00</i>

</div>

<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Add CMSEngine.initLogging()

</pre>

</li>

<li>

<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/ea4b82a62a88cc3e7cd734345d2f099c10fb764c">ea4b82a6</a></strong>

<div>

<span>by Endi S. Dewata</span>

<i>at 2020-08-26T09:29:12-05:00</i>

</div>

<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Remove unused ICertificateAuthority.PROP_CA_CHAIN_NUM

</pre>

</li>

<li>

<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/c2ede922d17e766caf584fc9d3663d136af68b3c">c2ede922</a></strong>

<div>

<span>by Endi S. Dewata</span>

<i>at 2020-08-26T09:29:13-05:00</i>

</div>

<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Add CertificateAuthority.getCertChain()

</pre>

</li>

<li>

<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/39ed2641968730f22cea7264238bcb289c25e0ce">39ed2641</a></strong>

<div>

<span>by Endi S. Dewata</span>

<i>at 2020-08-26T09:29:14-05:00</i>

</div>

<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Add CMSEngine.initDatabase()

</pre>

</li>

<li>

<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/be4512dc58d4bf79753c5cde1ae2787e3fe6d4e6">be4512dc</a></strong>

<div>

<span>by Endi S. Dewata</span>

<i>at 2020-08-26T09:53:30-05:00</i>

</div>

<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Move CertificateAuthority.dbFactory to CAEngine

</pre>

</li>

<li>

<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/b23f5d2f701b2204ae73c181ac2e77dee2faa9a8">b23f5d2f</a></strong>

<div>

<span>by Endi S. Dewata</span>

<i>at 2020-08-26T09:57:38-05:00</i>

</div>

<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Move CertificateAuthority.authorityBaseDN() to CAEngine

</pre>

</li>

<li>

<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/380919dc9651ab1d3e186c99567c15c104b02377">380919dc</a></strong>

<div>

<span>by Endi S. Dewata</span>

<i>at 2020-08-26T09:57:38-05:00</i>

</div>

<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Move CertificateAuthority.entryUSNPluginEnabled() to CAEngine

</pre>

</li>

<li>

<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/07ad39b2536717c62f8a081c96a6d62a7c20695b">07ad39b2</a></strong>

<div>

<span>by Endi S. Dewata</span>

<i>at 2020-08-26T11:33:12-05:00</i>

</div>

<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Move authority update tracker to CAEngine

</pre>

</li>

<li>

<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/d9e319853638d04ebc7c606447577ffdcdb81f86">d9e31985</a></strong>

<div>

<span>by Endi S. Dewata</span>

<i>at 2020-08-26T11:33:16-05:00</i>

</div>

<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Move CertificateAuthority.getCommitConstraints() to CAEngine

</pre>

</li>

<li>

<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/a0651daae4a1ad5f95b01255430f0998337d1adc">a0651daa</a></strong>

<div>

<span>by Endi S. Dewata</span>

<i>at 2020-08-26T11:33:16-05:00</i>

</div>

<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Move CertificateAuthority.postCommit() to CAEngine

</pre>

</li>

<li>

<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/2c08462cae0e1545e6fb4c494316a8a9b2864622">2c08462c</a></strong>

<div>

<span>by Endi S. Dewata</span>

<i>at 2020-08-26T12:14:16-05:00</i>

</div>

<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Move CertificateAuthority.forgetAuthority() to CAEngine

</pre>

</li>

<li>

<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/287376e5b07a472efe2fe3c762c0542e88299aa1">287376e5</a></strong>

<div>

<span>by Endi S. Dewata</span>

<i>at 2020-08-26T12:14:16-05:00</i>

</div>

<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Move authority deletion tracker to CAEngine

</pre>

</li>

<li>

<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/019cb15e91f54dba89029cdddb09a585e180b0ce">019cb15e</a></strong>

<div>

<span>by Endi S. Dewata</span>

<i>at 2020-08-26T12:16:55-05:00</i>

</div>

<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Move CertificateAuthority.addAuthorityEntry() to CAEngine

</pre>

</li>

<li>

<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/65ff597559f4e29b5d776d1bf8afadadf94d1d71">65ff5975</a></strong>

<div>

<span>by Endi S. Dewata</span>

<i>at 2020-08-26T12:16:56-05:00</i>

</div>

<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Move CertificateAuthority.modifyAuthorityEntry() to CAEngine

</pre>

</li>

<li>

<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/731cc8fca2c5f6cbdaee7476241e3731d81a7e54">731cc8fc</a></strong>

<div>

<span>by Endi S. Dewata</span>

<i>at 2020-08-26T12:18:06-05:00</i>

</div>

<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Move CertificateAuthority.deleteAuthorityEntry() to CAEngine

</pre>

</li>

<li>

<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/11e88c9c7be5c561c15e06152c7060c5bae280de">11e88c9c</a></strong>

<div>

<span>by Endi S. Dewata</span>

<i>at 2020-08-26T12:18:08-05:00</i>

</div>

<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Remove redundant CertificateAuthority.stopped

</pre>

</li>

<li>

<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/fd269bae8ab3276d6588820263e5bc15b67f957c">fd269bae</a></strong>

<div>

<span>by Endi S. Dewata</span>

<i>at 2020-08-26T15:06:14-05:00</i>

</div>

<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Updated acmeIdentifier for ACME orders and authorizations

Previously the identifiers for ACME order and authorization

records were stored as "acmeIdentifier;<type>=<value>" in DS,

which doesn't seem to be supported in OpenLDAP. To support

both LDAP servers, the identifiers are now stored as

"acmeIdentifier=<type>:<value>".

</pre>

</li>

<li>

<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/f5ad995c5f341354d59fdb8f664f8b671f7b9f9c">f5ad995c</a></strong>

<div>

<span>by Endi S. Dewata</span>

<i>at 2020-08-26T15:06:14-05:00</i>

</div>

<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Updated userCertificate for ACME certificates

Previously the certificate data for ACME certificates was stored

as "userCertificate=<data>" in DS, which doesn't seem to work in

OpenLDAP. To support both LDAP servers, the certificate data is

now stored as "userCertificate;binary=<data>".

</pre>

</li>

<li>

<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/483229ce8ed57fd38cf8282d3cee4a92867ec3f8">483229ce</a></strong>

<div>

<span>by Endi S. Dewata</span>

<i>at 2020-08-26T15:06:14-05:00</i>

</div>

<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Added OpenLDAP database for ACME

A new OpenLDAPDatabase class has been added to provide an ACME

database in OpenLDAP. The class is currently identical to the

existing LDAPDatabase class, but it's provided for implementing

OpenLDAP- specific code in the future.

A new schema file, a sample initialization file, and a sample

configuration file for OpenLDAP have been added.

The pki-server acme-database-* commands have also been

modified to support an "openldap" type.

The ACME database documentation has been updated as well.

</pre>

</li>

<li>

<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/ae5e4d5c6616fc4e448952763d50f5045a850ed4">ae5e4d5c</a></strong>

<div>

<span>by Endi S. Dewata</span>

<i>at 2020-08-26T15:06:14-05:00</i>

</div>

<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Added DS database for ACME

The LDAP database for ACME has been copied into new DS

database to distinguish it from OpenLDAP database. Once

IPA is updated to use the DS database, the LDAP database

will be dropped.

</pre>

</li>

<li>

<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/d30700d3655c59a7ec5daeaa6adf2d9363d52597">d30700d3</a></strong>

<div>

<span>by Dinesh Prasanth M K</span>

<i>at 2020-08-26T16:34:16-04:00</i>

</div>

<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Run QE tests on upstream CI pipeline on Vagrant

Provision 2 Vagrant VMs inside Macintosh (only Mac is supported in

GH actions):

controller:

  VM used to run the ansible playbook. The playbook is provisioned

  using Vagrant's inbuilt provisioners

master:

  VM acts as the PKI master node. topology-02 (discrete instance) is

  used to configure this node.

Note1: Static inventory file is used. This is because the playbook

is being executed from the guest VM (controller) and autogenerated

hostfile is unreliable.

Note2: When creating vagrant VMs, provisioning is suspended. This is

to resolve dependency b/w master and controller (ie) the latest built

packages need to be installed in master first before controller tries

to execute playbooks.

Signed-off-by: Dinesh Prasanth M K <dmoluguw@redhat.com>

</pre>

</li>

<li>

<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/6e9d5f9e3c76c2e51fe7464ca5f5ec40d32b8c55">6e9d5f9e</a></strong>

<div>

<span>by Shalini Khandelwal</span>

<i>at 2020-08-26T16:34:16-04:00</i>

</div>

<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Added changes in installation test playbooks to wait for other instances to come up.

Signed-off-by: Shalini Khandelwal <skhandel@redhat.com>

</pre>

</li>

<li>

<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/32c4a406847bfd1879447782fc734bbe086b6ba2">32c4a406</a></strong>

<div>

<span>by Dinesh Prasanth M K</span>

<i>at 2020-08-26T16:34:16-04:00</i>

</div>

<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Fix memory for the Vagrant VMs

The vagrant VM memory config was incorrect. This patch fixes the

error. The controller now gets assigned with 930MB of RAM and the

master gets around 2750MB of RAM

Signed-off-by: Dinesh Prasanth M K <dmoluguw@redhat.com>

</pre>

</li>

<li>

<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/0d97d0151774da7e0bf278f93d525ded64376a07">0d97d015</a></strong>

<div>

<span>by Dinesh Prasanth M K</span>

<i>at 2020-08-26T16:34:16-04:00</i>

</div>

<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Fix script file to grep from binary files

The tkstool outputs some binary characters. As a result, grep

thinks it is reading a binary file. This patch adds a grep

option to process the file containing binary characters as

Text file.

Ref: https://unix.stackexchange.com/q/335716/320815

Signed-off-by: Dinesh Prasanth M K <dmoluguw@redhat.com>

</pre>

</li>

<li>

<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/807bf6906e1742b0128a56a3d4efa7a3cba9230e">807bf690</a></strong>

<div>

<span>by Endi S. Dewata</span>

<i>at 2020-08-26T16:57:03-05:00</i>

</div>

<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Fixed acmeServerCert profile

The acmeServerCert profile has been modified to remove

hard-coded URLs since they point to non-existent services

which might cause certificate validation issue.

An upgrade script has been added to fix the profile

configuration file if the profile has not been customized

by the admin.

https://bugzilla.redhat.com/show_bug.cgi?id=1868233

</pre>

</li>

<li>

<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/62d5799be73bd1c3a1b0551ce73dc78037bb5199">62d5799b</a></strong>

<div>

<span>by Endi S. Dewata</span>

<i>at 2020-08-26T17:42:24-05:00</i>

</div>

<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Move CertificateAuthority.lwcaLoaded to CAEngine

</pre>

</li>

<li>

<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/8d0f12a9c6b3f379827bd3baf2eb57785bca0374">8d0f12a9</a></strong>

<div>

<span>by Endi S. Dewata</span>

<i>at 2020-08-26T17:42:24-05:00</i>

</div>

<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Move CertificateAuthority.foundHostAuthority to CAEngine

</pre>

</li>

<li>

<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/b77557538fc975c4ceb3884bd1eee149c14873e8">b7755753</a></strong>

<div>

<span>by Endi S. Dewata</span>

<i>at 2020-08-26T17:42:24-05:00</i>

</div>

<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Move CertificateAuthority.haveLightweightCAsContainer() to CAEngine

</pre>

</li>

<li>

<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/f23e55cb3ace3c7c05af5bdf90712e379d780aed">f23e55cb</a></strong>

<div>

<span>by Endi S. Dewata</span>

<i>at 2020-08-26T17:42:24-05:00</i>

</div>

<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Move CertificateAuthority.readAuthority() to CAEngine

</pre>

</li>

<li>

<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/bed231d5a59e1399e9aef5f7bdf0dcf61107cea7">bed231d5</a></strong>

<div>

<span>by 06shalini</span>

<i>at 2020-08-27T21:26:19+05:30</i>

</div>

<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Updated pytest-ansible to latest package and added utils from pki integration-test module. (#535)

Signed-off-by: Shalini Khandelwal <skhandel@redhat.com>

Co-authored-by: Shalini Khandelwal <skhandel@redhat.com></pre>

</li>

<li>

<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/7abe19e5be79ecab51ea4b4e94fb7a7bb01dca1f">7abe19e5</a></strong>

<div>

<span>by Endi S. Dewata</span>

<i>at 2020-08-27T14:49:25-05:00</i>

</div>

<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Fixed missing sslserver and subsystem certs

When installing an additional subsystem into an instance,

the deployment scriptlet has been modified to copy the

cert and request data for sslserver and subsystem certs

from the existing subsystem.

https://bugzilla.redhat.com/show_bug.cgi?id=1869893

</pre>

</li>

<li>

<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/7a5ade617d6abe45552b5f5bdcfef762e6ee94a9">7a5ade61</a></strong>

<div>

<span>by Endi S. Dewata</span>

<i>at 2020-08-27T16:33:41-05:00</i>

</div>

<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Move CertificateAuthority.addHostAuthorityEntry() to CAEngine

</pre>

</li>

<li>

<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/15967493c710b6f416b3f5aa1079d686f39a115f">15967493</a></strong>

<div>

<span>by Endi S. Dewata</span>

<i>at 2020-08-27T16:33:41-05:00</i>

</div>

<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Cleaned up CA SigningUnit.init()

</pre>

</li>

<li>

<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/929a3c9f68f2a5627adda73bd0a042be2bc66c8c">929a3c9f</a></strong>

<div>

<span>by Endi S. Dewata</span>

<i>at 2020-08-27T16:33:41-05:00</i>

</div>

<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Add CertificateAuthority.initOCSPSigningUnit()

</pre>

</li>

<li>

<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/204e6db1464837a4ecc9164e1c6269fa6f406aab">204e6db1</a></strong>

<div>

<span>by Endi S. Dewata</span>

<i>at 2020-08-27T16:33:41-05:00</i>

</div>

<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Add CertificateAuthority.initCRLSigningUnit()

</pre>

</li>

<li>

<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/bef964f830d4e39d482ad4195c7e67e173e5e64d">bef964f8</a></strong>

<div>

<span>by Endi S. Dewata</span>

<i>at 2020-08-27T16:33:41-05:00</i>

</div>

<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Clean up CertificateAuthority.initSigUnit()

</pre>

</li>

<li>

<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/04b900f307903e87545d191298c2fabe6db1b6f5">04b900f3</a></strong>

<div>

<span>by Endi S. Dewata</span>

<i>at 2020-08-31T11:39:57-05:00</i>

</div>

<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Add JAVA_VERSION for CMake

The RPM spec and CMake files have been modified to detect the

actual Java version used to build PKI and add the appropriate

libraries for that version.

</pre>

</li>

<li>

<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/abcfb633f06fd2e239d367aa2e789bc6dfd878a1">abcfb633</a></strong>

<div>

<span>by Endi S. Dewata</span>

<i>at 2020-08-31T11:41:04-05:00</i>

</div>

<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Clean up CAEngine.addKeyRetriever()

</pre>

</li>

<li>

<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/f553c6e075c695690e04dcb534d489da3c4628ff">f553c6e0</a></strong>

<div>

<span>by Endi S. Dewata</span>

<i>at 2020-08-31T11:41:04-05:00</i>

</div>

<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Add CertificateAuthority.generateSigningCert()

</pre>

</li>

<li>

<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/ab0c00cf95c226012f20961b299edb9cc0f81df1">ab0c00cf</a></strong>

<div>

<span>by Endi S. Dewata</span>

<i>at 2020-08-31T11:41:04-05:00</i>

</div>

<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Move CertificateAuthority.createSubCA() to CAEngine

</pre>

</li>

<li>

<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/71b59059df21a1b0d54b9a1841a5f036a6a18cab">71b59059</a></strong>

<div>

<span>by Endi S. Dewata</span>

<i>at 2020-08-31T11:41:04-05:00</i>

</div>

<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Add CAEngine.updateAuthoritySerialNumber()

</pre>

</li>

<li>

<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/2fdd665733cc4b6909ec70ea8df083db199882b0">2fdd6657</a></strong>

<div>

<span>by Endi S. Dewata</span>

<i>at 2020-08-31T11:41:04-05:00</i>

</div>

<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Move CertificateAuthority.modifyAuthority() to CAEngine

</pre>

</li>

<li>

<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/331327dd13fbc7632c6a09c3cfeb76fa0e436e8f">331327dd</a></strong>

<div>

<span>by Endi S. Dewata</span>

<i>at 2020-08-31T11:41:04-05:00</i>

</div>

<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Move CertificateAuthority.addInstanceToAuthorityKeyHosts() to CAEngine

</pre>

</li>

<li>

<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/9ceb9f580416a2258b39b838390f481a7f5c59b6">9ceb9f58</a></strong>

<div>

<span>by Endi S. Dewata</span>

<i>at 2020-08-31T11:44:45-05:00</i>

</div>

<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Remove DBSubsystemDefaultStub

</pre>

</li>

<li>

<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/9e4833fc6278267637b81e5d83bb705f62a6a7ee">9e4833fc</a></strong>

<div>

<span>by Endi S. Dewata</span>

<i>at 2020-08-31T11:44:45-05:00</i>

</div>

<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Remove ICryptoSubsystem

</pre>

</li>

<li>

<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/ce768ec26ff90235ef34d200af1cbcc472f14c62">ce768ec2</a></strong>

<div>

<span>by Endi S. Dewata</span>

<i>at 2020-08-31T12:26:52-05:00</i>

</div>

<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Remove IDBSubsystem

</pre>

</li>

<li>

<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/641accda4d1e184c945b0f6824a51cefb65f54e9">641accda</a></strong>

<div>

<span>by Endi S. Dewata</span>

<i>at 2020-08-31T12:26:52-05:00</i>

</div>

<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Move ReasonToRevoke to pki-ca

</pre>

</li>

<li>

<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/ce2829c3692ef033c133b3a3c9abc2365f082ec8">ce2829c3</a></strong>

<div>

<span>by Endi S. Dewata</span>

<i>at 2020-08-31T12:26:52-05:00</i>

</div>

<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Update log messages in CertificateAuthority

</pre>

</li>

<li>

<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/e117f897a43b7f2ded0edbb204110357c29da2c0">e117f897</a></strong>

<div>

<span>by Endi S. Dewata</span>

<i>at 2020-08-31T13:02:32-05:00</i>

</div>

<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Added upgrade script to fix missing cert/request data

An upgrade script has been added to fix the missing sslserver

and subsystem cert/request data by copying it from another

subsystem.

https://bugzilla.redhat.com/show_bug.cgi?id=1869893

</pre>

</li>

<li>

<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/9bb247e6bc296c2ea67cd7ddec6563758804876b">9bb247e6</a></strong>

<div>

<span>by Endi S. Dewata</span>

<i>at 2020-08-31T16:18:24-05:00</i>

</div>

<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Update CMSEngine.init()

</pre>

</li>

<li>

<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/2c67dcfc55c97ca38666e310313cc96806b0b8bf">2c67dcfc</a></strong>

<div>

<span>by Endi S. Dewata</span>

<i>at 2020-08-31T16:18:24-05:00</i>

</div>

<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Update CMSEngine.autoShutdown()

</pre>

</li>

<li>

<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/a8bceb9d25002116e9bda10efbaeda33b3233403">a8bceb9d</a></strong>

<div>

<span>by Endi S. Dewata</span>

<i>at 2020-08-31T16:18:24-05:00</i>

</div>

<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Rename CMSEngine.initPlugins()

</pre>

</li>

<li>

<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/06c2d448712de1edb28eea23abf2da998219a09b">06c2d448</a></strong>

<div>

<span>by Endi S. Dewata</span>

<i>at 2020-08-31T16:18:24-05:00</i>

</div>

<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Add CAEngine.initLogSubsystem()

</pre>

</li>

<li>

<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/19f4e6921613c24220be77bf85ab26bbd2606cc8">19f4e692</a></strong>

<div>

<span>by Endi S. Dewata</span>

<i>at 2020-08-31T16:18:24-05:00</i>

</div>

<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Add CAEngine.initJssSubsystem()

</pre>

</li>

<li>

<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/315b0264c2901681bc227d5c96fde2951f3c8063">315b0264</a></strong>

<div>

<span>by Endi S. Dewata</span>

<i>at 2020-08-31T16:19:03-05:00</i>

</div>

<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Add CAEngine.initDBSubsystem()

</pre>

</li>

<li>

<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/5916a9e80d4f0a3b51b17798b644c3efcbd38d6a">5916a9e8</a></strong>

<div>

<span>by Endi S. Dewata</span>

<i>at 2020-08-31T16:19:03-05:00</i>

</div>

<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Add CAEngine.initUGSubsystem()

</pre>

</li>

<li>

<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/3b8037f939f3ea1738b14456fe5e9ed776edf3a9">3b8037f9</a></strong>

<div>

<span>by Endi S. Dewata</span>

<i>at 2020-08-31T20:08:45-05:00</i>

</div>

<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Add CMSEngine.initOIDLoaderSubsystem()

</pre>

</li>

<li>

<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/b1904853e0bd41afa35958fc02e9bb61ab67181b">b1904853</a></strong>

<div>

<span>by Endi S. Dewata</span>

<i>at 2020-08-31T20:08:50-05:00</i>

</div>

<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Add CMSEngine.initX500NameSubsystem()

</pre>

</li>

<li>

<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/d35abfff90432c930b076e670a55fe2b80154e3f">d35abfff</a></strong>

<div>

<span>by Endi S. Dewata</span>

<i>at 2020-08-31T21:07:46-05:00</i>

</div>

<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Add CMSEngine.initRequestSubsystem()

</pre>

</li>

<li>

<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/ee57957fccec196ccbfd86ca0dcdbccae7e93848">ee57957f</a></strong>

<div>

<span>by Endi S. Dewata</span>

<i>at 2020-08-31T21:41:07-05:00</i>

</div>

<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Replaced IJobsScheduler with JobsScheduler

</pre>

</li>

<li>

<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/e0b249636e2ea24d3d0633e65bf1d6e0a3dbd35f">e0b24963</a></strong>

<div>

<span>by Endi S. Dewata</span>

<i>at 2020-08-31T21:54:07-05:00</i>

</div>

<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Add CMSEngine.initJobsScheduler()

</pre>

</li>

<li>

<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/a21d480dcd2e14b5b9cc52d4960a3499e0d0620d">a21d480d</a></strong>

<div>

<span>by Endi S. Dewata</span>

<i>at 2020-09-01T11:17:15-05:00</i>

</div>

<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Replaced IAuthzSubsystem with AuthzSubsystem

</pre>

</li>

<li>

<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/bdea2888b4d32dbaafff07cc4def44a0142a1ec7">bdea2888</a></strong>

<div>

<span>by Endi S. Dewata</span>

<i>at 2020-09-01T11:26:34-05:00</i>

</div>

<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Add CMSEngine.initAuthzSubsystem()

</pre>

</li>

<li>

<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/0775bb6005b21c25b7a11194d4361ad35dda3a2f">0775bb60</a></strong>

<div>

<span>by Endi S. Dewata</span>

<i>at 2020-09-01T11:45:28-05:00</i>

</div>

<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Replaced IAuthSubsystem with AuthSubsystem

</pre>

</li>

<li>

<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/ed142dd43200be9f153698a770d51b4b67ca5bb9">ed142dd4</a></strong>

<div>

<span>by Endi S. Dewata</span>

<i>at 2020-09-01T11:52:49-05:00</i>

</div>

<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Add CMSEngine.initAuthSubsystem()

</pre>

</li>

<li>

<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/d0922215837eb838b3cb5200faa2c45d16dca1b2">d0922215</a></strong>

<div>

<span>by Endi S. Dewata</span>

<i>at 2020-09-01T12:32:52-05:00</i>

</div>

<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Move CertificateAuthority.mCertRepot to CAEngine

</pre>

</li>

<li>

<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/33b7abec20030390adf4cad3166df41defd17e63">33b7abec</a></strong>

<div>

<span>by Endi S. Dewata</span>

<i>at 2020-09-01T12:32:52-05:00</i>

</div>

<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Move CertificateAuthority.mCRLRepot to CAEngine

</pre>

</li>

<li>

<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/e65d55da2cd3a27b1554c33d33202c2b918220cc">e65d55da</a></strong>

<div>

<span>by Endi S. Dewata</span>

<i>at 2020-09-01T12:32:52-05:00</i>

</div>

<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Move CertificateAuthority.mReplicaRepot to CAEngine

</pre>

</li>

<li>

<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/97038b5119199414f5017ab710a47a2e43e247f5">97038b51</a></strong>

<div>

<span>by Endi S. Dewata</span>

<i>at 2020-09-01T20:22:01-05:00</i>

</div>

<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Update CMSEngine.loadSubsystems()

</pre>

</li>

<li>

<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/244557a48f521321c5997610c233280b56901ab0">244557a4</a></strong>

<div>

<span>by Endi S. Dewata</span>

<i>at 2020-09-01T20:22:01-05:00</i>

</div>

<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Update CMSEngine.initSubsystems()

</pre>

</li>

<li>

<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/6f634c5c42e2e567fc91a33317760a8366e64d0b">6f634c5c</a></strong>

<div>

<span>by Endi S. Dewata</span>

<i>at 2020-09-01T20:22:01-05:00</i>

</div>

<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Update CMSEngine.startupSubsystems()

</pre>

</li>

<li>

<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/05e63a84bfadc4a8fc2a06f351bb78bfd1541a33">05e63a84</a></strong>

<div>

<span>by Endi S. Dewata</span>

<i>at 2020-09-01T20:22:02-05:00</i>

</div>

<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Update CMSEngine.shutdownSubsystems()

</pre>

</li>

<li>

<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/e14fa10fdecc67cc911187a747d163346417bad8">e14fa10f</a></strong>

<div>

<span>by Endi S. Dewata</span>

<i>at 2020-09-01T20:22:02-05:00</i>

</div>

<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Remove unused SubsystemInfo constructor

</pre>

</li>

<li>

<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/d968173e92aed100ca8755e3dba6cf3ec5baaf29">d968173e</a></strong>

<div>

<span>by Endi S. Dewata</span>

<i>at 2020-09-01T20:22:02-05:00</i>

</div>

<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Remove unused subsystem lists in CMSEngine

</pre>

</li>

<li>

<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/a1c326d1ba991bbeafa50fe612c9ed319f6d4307">a1c326d1</a></strong>

<div>

<span>by Dinesh Prasanth M K</span>

<i>at 2020-09-02T10:12:44-07:00</i>

</div>

<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">CI: Use NFS instead of virtualbox guest

VBGuest addition to a VM requires a rebuild of plugins, causing

a whole lot of packages to be installed. This patch removes the

dependency on VBGuest and uses NFS to sync the folders between

guest and host.

Note that since we plan to add more tests, we are cutting out

F31 from this patch (ie) we will be running our tests on latest

stable fedora release

Signed-off-by: Dinesh Prasanth M K <dmoluguw@redhat.com>

</pre>

</li>

<li>

<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/cc6f657ee2d3110134bec1ec4ab8fe6ffa95502c">cc6f657e</a></strong>

<div>

<span>by Endi S. Dewata</span>

<i>at 2020-09-02T21:45:52-05:00</i>

</div>

<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Move CertificateAuthority.mPolicy to CAEngine

</pre>

</li>

<li>

<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/6465213bb0d2b19c24e35e14cf14056c949763f9">6465213b</a></strong>

<div>

<span>by Endi S. Dewata</span>

<i>at 2020-09-02T21:45:52-05:00</i>

</div>

<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Move CertificateAuthority.mService to CAEngine

</pre>

</li>

<li>

<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/b077273c6b19fa479059722140566d5cce64206a">b077273c</a></strong>

<div>

<span>by Endi S. Dewata</span>

<i>at 2020-09-02T21:45:52-05:00</i>

</div>

<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Move CertificateAuthority.mNotify to CAEngine

</pre>

</li>

<li>

<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/44eb7eab3eefcb81ec8c5add7a383921563cca22">44eb7eab</a></strong>

<div>

<span>by Endi S. Dewata</span>

<i>at 2020-09-02T21:45:52-05:00</i>

</div>

<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Move CertificateAuthority.mPNotify to CAEngine

</pre>

</li>

<li>

<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/59c5f50d2dcc6ad082bfed18ed1bcd359c8cfa89">59c5f50d</a></strong>

<div>

<span>by Endi S. Dewata</span>

<i>at 2020-09-02T21:45:52-05:00</i>

</div>

<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Move CertificateAuthority.mRequestQueue to CAEngine

</pre>

</li>

<li>

<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/8f4b229df3ec3cf97306ccc89578390f3d527b90">8f4b229d</a></strong>

<div>

<span>by Endi S. Dewata</span>

<i>at 2020-09-03T09:15:21-05:00</i>

</div>

<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Move SystemConfigService.processKeyPair() to Configurator

</pre>

</li>

<li>

<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/816866b9f1de73dc6cf6f17ba00aa9948f1c2120">816866b9</a></strong>

<div>

<span>by Endi S. Dewata</span>

<i>at 2020-09-03T18:02:07-05:00</i>

</div>

<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Add Configurator.loadCert()

</pre>

</li>

<li>

<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/b799ba290090a47076649412f717e57ab3982191">b799ba29</a></strong>

<div>

<span>by Endi S. Dewata</span>

<i>at 2020-09-03T18:02:50-05:00</i>

</div>

<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Add Configurator.generateCert()

</pre>

</li>

<li>

<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/05dbb9f08a548986e03820bff7cfc2ccfe166464">05dbb9f0</a></strong>

<div>

<span>by Endi S. Dewata</span>

<i>at 2020-09-03T18:03:20-05:00</i>

</div>

<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Move SystemConfigService.processCert() to Configurator

</pre>

</li>

<li>

<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/ba5f1b2e7d8d342d1c89b821d144a86716e6a587">ba5f1b2e</a></strong>

<div>

<span>by Endi S. Dewata</span>

<i>at 2020-09-03T18:03:21-05:00</i>

</div>

<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Add Configurator.setupCert()

</pre>

</li>

<li>

<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/c1f61a2e512635aba4d0fd861fdcadefb01337d7">c1f61a2e</a></strong>

<div>

<span>by Endi S. Dewata</span>

<i>at 2020-09-04T09:11:59-05:00</i>

</div>

<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Move CertificateAuthority.mDefaultCertVersion to CAEngine

</pre>

</li>

<li>

<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/4349c90763faa2ccfc4c2aaa4eff6282257528ce">4349c907</a></strong>

<div>

<span>by Endi S. Dewata</span>

<i>at 2020-09-04T09:11:59-05:00</i>

</div>

<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Move CertificateAuthority.mDefaultValidity to CAEngine

</pre>

</li>

<li>

<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/7de9663e8df1e81ce27132584cf7ec94993e1311">7de9663e</a></strong>

<div>

<span>by Endi S. Dewata</span>

<i>at 2020-09-04T09:12:51-05:00</i>

</div>

<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Move CertificateAuthority.mEnablePastCATime to CAEngine

</pre>

</li>

<li>

<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/993f6345605c9a39e7adc360473a22ae1ce2f977">993f6345</a></strong>

<div>

<span>by Endi S. Dewata</span>

<i>at 2020-09-04T09:12:51-05:00</i>

</div>

<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Move CertificateAuthority.mEnableOCSP to CAEngine

</pre>

</li>

<li>

<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/a43300fb27030bcc29bed3ca0635f71e8691692b">a43300fb</a></strong>

<div>

<span>by Endi S. Dewata</span>

<i>at 2020-09-04T09:14:03-05:00</i>

</div>

<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Move CertificateAuthority.mFastSigning to CAEngine

</pre>

</li>

<li>

<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/c9981d4219cf6fef60bece88f7d065729b1b2fcf">c9981d42</a></strong>

<div>

<span>by Endi S. Dewata</span>

<i>at 2020-09-04T12:52:12-05:00</i>

</div>

<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Move CertificateAuthority.mUseNonces to CAEngine

</pre>

</li>

<li>

<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/3653533ae6fa7c5d01953a10700b705999b7a28c">3653533a</a></strong>

<div>

<span>by Endi S. Dewata</span>

<i>at 2020-09-04T12:53:01-05:00</i>

</div>

<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Move CertificateAuthority.mMaxNonces to CAEngine

</pre>

</li>

<li>

<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/d113c2f0b12d7a5a5bf1149bfac4392ebbf0abb0">d113c2f0</a></strong>

<div>

<span>by Dinesh Prasanth M K</span>

<i>at 2020-09-04T12:20:16-07:00</i>

</div>

<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">CI: Run healthcheck in CI pipeline

This patch executes both PKI healthcheck and IPA healthcheck

tools in corresponding CI jobs.

Signed-off-by: Dinesh Prasanth M K <dmoluguw@redhat.com>

</pre>

</li>

<li>

<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/c2f6b3b7fff949e6594b34bb768b40a40a0a04fc">c2f6b3b7</a></strong>

<div>

<span>by Endi S. Dewata</span>

<i>at 2020-09-04T14:32:43-05:00</i>

</div>

<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Move CA services startup to CAEngine.initSubsystems()

</pre>

</li>

<li>

<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/f443dfa1c5bb2a8cb2b8bbf2ab57be6d612899b9">f443dfa1</a></strong>

<div>

<span>by Endi S. Dewata</span>

<i>at 2020-09-04T14:32:43-05:00</i>

</div>

<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Move CertificateAuthority.mListenerPlugins to CAEngine

</pre>

</li>

<li>

<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/308668fb20cfa49b6d2c8b77a80e8acba0b5fc07">308668fb</a></strong>

<div>

<span>by Endi S. Dewata</span>

<i>at 2020-09-04T14:32:43-05:00</i>

</div>

<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Move CertificateAuthority.mByName to CAEngine

</pre>

</li>

<li>

<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/675791845f6efd6ae5fe82adb15ff118a1507472">67579184</a></strong>

<div>

<span>by Endi S. Dewata</span>

<i>at 2020-09-04T14:32:43-05:00</i>

</div>

<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Move CertificateAuthority.mCRLPublisher to CAEngine

</pre>

</li>

<li>

<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/46ef5dc5c8178c20534b1ef70fa31096078d0a9a">46ef5dc5</a></strong>

<div>

<span>by Endi S. Dewata</span>

<i>at 2020-09-04T14:34:36-05:00</i>

</div>

<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Move KeyRetriever checks to CAEngine.startKeyRetriever()

</pre>

</li>

<li>

<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/e9e1ad287c066ee67f7b3b202d24027c41df3977">e9e1ad28</a></strong>

<div>

<span>by Endi S. Dewata</span>

<i>at 2020-09-04T14:34:41-05:00</i>

</div>

<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Move KeyRetriever creation to CAEngine.startKeyRetriever()

</pre>

</li>

<li>

<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/9410e74350bdda2c7ed0630c985f0b9a26e268b3">9410e743</a></strong>

<div>

<span>by Endi S. Dewata</span>

<i>at 2020-09-04T14:34:41-05:00</i>

</div>

<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Move CertificateAuthority.mPublisherProcessor to CAEngine

</pre>

</li>

<li>

<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/9ba9d601e99fc8913d937c61511e375dbebadd40">9ba9d601</a></strong>

<div>

<span>by jmagne</span>

<i>at 2020-09-04T17:05:41-07:00</i>

</div>

<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Address Bug 1787115 - [RFE] Need Method to copy SKI from CSR to Certificate signed. (#511)

This fix allows a way to configure a profile's SubjectKeyIdentifier process to optionally pick up

a SKI extension from the incoming CSR and use it instead of the one that is self calculated by the server.

Here is a proile snippet for the SKI as example:

policyset.caCertSet.8.default.name=Subject Key Identifier Extension Default

policyset.caCertSet.8.default.params.critical=false

policyset.caCertSet.8.default.params.messageDigest=SHA-1

policyset.caCertSet.8.default.params.useSKIFromCertRequest=true

Note the new param : useSKIFromCertRequest=true

This new param will default to false, thus not disturbing existing functionality.

When set to true, the CA will attempt to use the SKI extension within the CSR instead

of creating a new one unconditionally.

If the new param is fals or not present, the original functionality will execute.

If for some reason the ext can't be found in the CSR, the existing functionality will execute

as well.

Here is a simple CA Server CSR with a custom SKI to test with:

-----BEGIN NEW CERTIFICATE REQUEST-----

MIIC7zCCAdcCAQAwZTElMCMGA1UECgwcdG9wb2xvZ3ktMDNfRm9vYmFybWFzdGVyLm9yZzEbMBkG

A1UECxMSdG9wb2xvZ3ktMDMtQ0Etc2tpMR8wHQYDVQQDExZDQSBTaWduaW5nIENlcnRpZmljYXRl

MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8Z1MUxsZ0AzV51ohgklOOF99O9pu3Akv

OqJA2p6B5eDxRMq3s8Dfhgg9Gh7Jtje067oYQrqQ8Y7fs1N3gI5O2F3275InKw1j6YfSwAZtq7K1

zl86ZHyI9CdHsZb1Xpb/vgyAb48mMSW2lF2Gy/4QpIQVHxpkxbxKaskEJHFE9BgptcMFaMxYGQDq

xYWpLluGyGeHYnmE9Fx3aMaj7oo5hAW7TaYRmi+LXrvuKf1EROJntm828wWYeIG+pFfvw3it80bq

j3xYo/6Vv2G1k1qqd4eKksbqZXMYkNKzNDkZkNgO/qRu0rL+S2KyAQmSejVmmZcjsHi/hqZoULE4

lG1kAQIDAQABoEUwQwYJKoZIhvcNAQkOMTYwNDARBgNVHQ4ECgQIANBvANTQZ0YwDwYDVR0TAQH/

BAUwAwEB/zAOBgNVHQ8BAf8EBAMCAcYwDQYJKoZIhvcNAQENBQADggEBAFPfkEGa0/m2MHOgZMUW

ZVh1hW4nmBRE9Q7ZNhG7xvZaOK7sUuavRhL4vQ1Qf7wjS0Br43LviOGyxL9S/E9ZUuAv4ckH7pfR

6iox/35mwF51MUm1+8RD7gCBeAQE97Bh/gBErmgWMMqlMVckf2jVwYuIbDy0DmSc41kLsMJlAmd7

rddGIxO8kFJm/CRnwomZTM9Y/FzIq1FK/Nz7nBBX7yWUd4TustAmiwmwofmZB+gf2B0kjI/p+2sH

uIBSWk6xdy57T3KKygtqgkDschyfTJAOHC67pCKPnPpslAOMEATxcgIV0PjP7XSvpivia1T/96Xq

cr8G9sE8VJ/hwno1l9k=

-----END NEW CERTIFICATE REQUEST-----

If the CSR doesn't have the extension while the param is set, the SKI will

be calculated as usual.

Co-authored-by: Jack Magne <jmagne@localhost.localdomain></pre>

</li>

<li>

<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/e67dc554c6059cda17cd5f6851dd839aa21fcef5">e67dc554</a></strong>

<div>

<span>by Endi S. Dewata</span>

<i>at 2020-09-04T22:40:00-05:00</i>

</div>

<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Move CertificateAuthority.mCRLIssuePoints to CAEngine

</pre>

</li>

<li>

<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/8ca544d80546cc40d3e638a645d6c8b8315b50e2">8ca544d8</a></strong>

<div>

<span>by Endi S. Dewata</span>

<i>at 2020-09-04T22:40:00-05:00</i>

</div>

<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Move CertificateAuthority.mMasterCRLIssuePoint into CAEngine

</pre>

</li>

<li>

<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/bd196146e6108000c8b65295c10b2cdbd3bc5548">bd196146</a></strong>

<div>

<span>by Endi S. Dewata</span>

<i>at 2020-09-04T22:40:00-05:00</i>

</div>

<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Move CertificateAuthority.mIssuanceProtCert to CAEngine

</pre>

</li>

<li>

<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/405c12838a571d6ca5daf155363f09cc782bdfcf">405c1283</a></strong>

<div>

<span>by Endi S. Dewata</span>

<i>at 2020-09-04T22:40:00-05:00</i>

</div>

<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Move CertificateAuthority.authorityMonitor to CAEngine

</pre>

</li>

<li>

<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/4a3ade755a17336e931dc57519adef3a6c3c2949">4a3ade75</a></strong>

<div>

<span>by Endi S. Dewata</span>

<i>at 2020-09-08T18:09:26-05:00</i>

</div>

<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Move CertificateAuthority.mCertIssuedListener to CAEngine

</pre>

</li>

<li>

<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/be899c7b79b07f05dde1b0a47eab1c560cd6bbbd">be899c7b</a></strong>

<div>

<span>by Endi S. Dewata</span>

<i>at 2020-09-08T18:09:28-05:00</i>

</div>

<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Move CertificateAuthority.mCertRevokedListener to CAEngine

</pre>

</li>

<li>

<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/dcc83f7cb4fb80fd32a70e9a08002d83ebe0d4e6">dcc83f7c</a></strong>

<div>

<span>by Endi S. Dewata</span>

<i>at 2020-09-08T18:09:29-05:00</i>

</div>

<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Move CertificateAuthority.mReqInQListener to CAEngine

</pre>

</li>

<li>

<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/296c4bffe3e3d2bb26c9bee981c7c2176f237c23">296c4bff</a></strong>

<div>

<span>by Endi S. Dewata</span>

<i>at 2020-09-08T18:09:30-05:00</i>

</div>

<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Clean up CertificateAuthority.startup()

</pre>

</li>

<li>

<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/2222ba4b0b7be56bf4216abe15514b46ad775fe7">2222ba4b</a></strong>

<div>

<span>by Endi S. Dewata</span>

<i>at 2020-09-08T18:09:31-05:00</i>

</div>

<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Refactored CertificateAuthority constructor

</pre>

</li>

<li>

<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/958832039433ce8b6172aabe303e6cefdf144a9a">95883203</a></strong>

<div>

<span>by Endi S. Dewata</span>

<i>at 2020-09-08T18:09:33-05:00</i>

</div>

<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Refactored CertificateAuthority.hostCA

</pre>

</li>

<li>

<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/4cbb18d12d078b7ce39101c9003bf3bf6e601e45">4cbb18d1</a></strong>

<div>

<span>by Endi S. Dewata</span>

<i>at 2020-09-08T18:09:34-05:00</i>

</div>

<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Add CAEngine.getConnectionFactory()

</pre>

</li>

<li>

<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/6e553f66bafe7a3a4c7c07dfc60397dd0c2f4e3b">6e553f66</a></strong>

<div>

<span>by Endi S. Dewata</span>

<i>at 2020-09-08T19:44:39-05:00</i>

</div>

<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Clean up SelfTestSubsystem initialization

</pre>

</li>

<li>

<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/149630e0c135311a2379f661ab0d36294dd626ff">149630e0</a></strong>

<div>

<span>by Endi S. Dewata</span>

<i>at 2020-09-08T19:49:31-05:00</i>

</div>

<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Clean up CertificateAuthority initialization

</pre>

</li>

<li>

<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/75a713d91bb5121908cf290c3c31d8fd81b85905">75a713d9</a></strong>

<div>

<span>by Endi S. Dewata</span>

<i>at 2020-09-08T19:49:31-05:00</i>

</div>

<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Clean up CrossCertPairSubsystem initialization

</pre>

</li>

<li>

<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/37bb71babeee94767f8c9cf3d21f050391c36c62">37bb71ba</a></strong>

<div>

<span>by Endi S. Dewata</span>

<i>at 2020-09-08T19:49:31-05:00</i>

</div>

<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Clean up KeyRecoveryAuthority initialization

</pre>

</li>

<li>

<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/853b910d07b7ca0154001d8cfce0ebf35d8b582f">853b910d</a></strong>

<div>

<span>by Endi S. Dewata</span>

<i>at 2020-09-08T19:49:31-05:00</i>

</div>

<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Clean up OCSPAuthority initialization

</pre>

</li>

<li>

<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/eac41bd95e6a3efbe2f9e48faf9d650bdce0ca96">eac41bd9</a></strong>

<div>

<span>by Endi S. Dewata</span>

<i>at 2020-09-08T19:49:31-05:00</i>

</div>

<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Clean up TKSAuthority initialization

</pre>

</li>

<li>

<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/e6531d9bf0d7a4cbe346dc610c19ad3f41b2f18a">e6531d9b</a></strong>

<div>

<span>by Christina Fu</span>

<i>at 2020-09-10T15:40:45-07:00</i>

</div>

<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Bug1875563-Add KRA Transport and Storage Certificates profiles for IPA

This patch adds two profiles for IPA, namely

 caIPAKraTransportCert

 caIPAKraStorageCert

Both are consistent with with the existing profile caIPAserviceCert where

  visible=false

  auth.instance_id=raCertAuth

    raCertAuth is an instance of AgentCertAuth with

    agentGroup=Registration Manager Agents

Upgrade scripts are provided to handle upgrades as well.

fixes https://bugzilla.redhat.com/show_bug.cgi?id=1875563

</pre>

</li>

<li>

<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/421bf4c0edf82e4f4eeccb6cd426748508dbe01a">421bf4c0</a></strong>

<div>

<span>by Alexander Scheel</span>

<i>at 2020-09-11T13:04:36-04:00</i>

</div>

<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Update javax-activation paths for Debian

As reported by Timo on IRC.

Signed-off-by: Alexander Scheel <ascheel@redhat.com>

</pre>

</li>

<li>

<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/41c732a4d1b0f0e9f0654ef487a83c4cb80e4c6b">41c732a4</a></strong>

<div>

<span>by Alexander Scheel</span>

<i>at 2020-09-11T13:04:36-04:00</i>

</div>

<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Migrate JAVA_HOME in instance configuration

When we upgrade from F32 to F33, we need to be able to upgrade JAVA_HOME

to set it to the new value. This value will also change on F32 (from a

JDK8-specific path to a generic path). This requires migration to happen

on subsystem start.

This means that the recommended way to configure JAVA_HOME to a value

OTHER then what's shipped in /usr/.../pki.conf becomes to set it in

/etc/.../pki.conf, and means that /etc/sysconfig/tomcat.conf gets

rewritten each time.

Signed-off-by: Alexander Scheel <ascheel@redhat.com>

</pre>

</li>

<li>

<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/2a70b3f0bb07b7c21be66589e84bbcc5d8ec9a25">2a70b3f0</a></strong>

<div>

<span>by Alexander Scheel</span>

<i>at 2020-09-11T13:04:36-04:00</i>

</div>

<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Enforce JDK 8 source and bytecode everywhere

This will ensure that, as F33 and later releases happen, we'll continue

developing code compatible with RHEL 8 and F32.

Signed-off-by: Alexander Scheel <ascheel@redhat.com>

</pre>

</li>

<li>

<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/d367fd75d2f4900893688cdb07d068ae1ec25e55">d367fd75</a></strong>

<div>

<span>by Alexander Scheel</span>

<i>at 2020-09-11T13:04:36-04:00</i>

</div>

<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Keep JAVA_HOME in tomcat.conf

Despite the name tomcat.conf, this is also the main configuration file

loaded by instances. Instances (especially pkispawn) expect config to be

only the Tomcat configuration, despite loading configuration from the

environment as well. Eventually, we should migrate all of this to use

the global configuration rather than the per-instance configuration.

Signed-off-by: Alexander Scheel <ascheel@redhat.com>

</pre>

</li>

<li>

<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/c200594fe280881a0dfc07072e62080d019bebb7">c200594f</a></strong>

<div>

<span>by Endi S. Dewata</span>

<i>at 2020-09-11T12:16:30-05:00</i>

</div>

<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Move Configurator.setupReplication() to SubsystemDBInitCLI

</pre>

</li>

<li>

<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/4abfdc77508545fb90ef127fbbf373ae1609d705">4abfdc77</a></strong>

<div>

<span>by Endi S. Dewata</span>

<i>at 2020-09-11T12:16:30-05:00</i>

</div>

<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Clean up log messages in LDAPConfigurator

</pre>

</li>

<li>

<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/137815a593ad3ff9cd35fc509b75b470a543f3ef">137815a5</a></strong>

<div>

<span>by Endi S. Dewata</span>

<i>at 2020-09-11T12:16:30-05:00</i>

</div>

<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Remove unused SystemConfigResource.setupClone()

</pre>

</li>

<li>

<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/1da816ca61209a5a260ab93af2f771588d42747e">1da816ca</a></strong>

<div>

<span>by Endi S. Dewata</span>

<i>at 2020-09-11T12:16:30-05:00</i>

</div>

<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Remove unused CloneSetupRequest

</pre>

</li>

<li>

<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/206df0a6f0fe31a5e2f8e8d828f8e7ce8172a8bb">206df0a6</a></strong>

<div>

<span>by Dinesh Prasanth M K</span>

<i>at 2020-09-11T17:35:52-07:00</i>

</div>

<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Add CONTRIBUTING doc

Signed-off-by: Dinesh Prasanth M K <dmoluguw@redhat.com>

</pre>

</li>

<li>

<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/7c2f595dee00219ed53255c8ea5eea84a529e9b0">7c2f595d</a></strong>

<div>

<span>by 06shalini</span>

<i>at 2020-09-14T19:55:46+05:30</i>

</div>

<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Merging tier1 functional tests jobs to master (#553)

* Updated pytest-ansible to latest package and added utils from pki integration-test module.

Signed-off-by: Shalini Khandelwal <skhandel@redhat.com>

* Sync downstream test code with upstream for all tier1 jobs

Signed-off-by: Shalini Khandelwal <skhandel@redhat.com>

* Test checkin to run pipeline

Signed-off-by: Shalini Khandelwal <skhandel@redhat.com>

* Fixed external-ca and ldaps test jobs

Signed-off-by: Shalini Khandelwal <skhandel@redhat.com>

Co-authored-by: Shalini Khandelwal <skhandel@redhat.com></pre>

</li>

<li>

<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/3bccc93ee58f8a9d3204bb52bbffcf028233c415">3bccc93e</a></strong>

<div>

<span>by Endi S. Dewata</span>

<i>at 2020-09-14T11:15:13-05:00</i>

</div>

<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Refactor LDAPConfigStore

The LDAPConfigStore has been modified to use an LDAPConnection

instead of an ILdapConnFactory.

</pre>

</li>

<li>

<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/83931e9357b56b0a02308ed3df7c2ed3bd513b4a">83931e93</a></strong>

<div>

<span>by Endi S. Dewata</span>

<i>at 2020-09-14T11:15:13-05:00</i>

</div>

<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Move CAConfigurator.importProfiles() into CAProfileImportCLI

</pre>

</li>

<li>

<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/f1b8e6b80f87820e907128710af2c13ee705195c">f1b8e6b8</a></strong>

<div>

<span>by Endi S. Dewata</span>

<i>at 2020-09-14T11:15:13-05:00</i>

</div>

<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Add pki-server ca-profile-import

</pre>

</li>

<li>

<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/c14511a8d1b0047a7e4d9a017c4c65369fb86793">c14511a8</a></strong>

<div>

<span>by Endi S. Dewata</span>

<i>at 2020-09-14T11:15:13-05:00</i>

</div>

<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Remove unused SystemConfigResource.setupDatabase()

</pre>

</li>

<li>

<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/fbccd2ad8445389a61a48fd7045a55b3b0607f99">fbccd2ad</a></strong>

<div>

<span>by Endi S. Dewata</span>

<i>at 2020-09-14T11:15:13-05:00</i>

</div>

<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Remove unused DatabaseSetupRequest

</pre>

</li>

<li>

<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/1623b441892e08950d3222a46eae0bfbae1e371e">1623b441</a></strong>

<div>

<span>by Endi S. Dewata</span>

<i>at 2020-09-14T11:17:59-05:00</i>

</div>

<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Clean up PKIDeployer.setup_cert()

</pre>

</li>

<li>

<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/3c23c84045a69f0af5f8aa9705b24d5ce5b4b994">3c23c840</a></strong>

<div>

<span>by Endi S. Dewata</span>

<i>at 2020-09-14T11:34:44-05:00</i>

</div>

<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Refactor Configurator.createAdminCertificate() (part 1)

The code that imports the admin cert has been moved out of

Configurator.createAdminCertificate(). The code that uses

the CA to generate the admin certificate has been moved into

CAConfigurator.

</pre>

</li>

<li>

<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/26da24480dc849ca0c415763af1846fd2fe6709d">26da2448</a></strong>

<div>

<span>by Endi S. Dewata</span>

<i>at 2020-09-14T11:50:51-05:00</i>

</div>

<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Refactor Configurator.createAdminCertificate() (part 2)

The Configurator.createAdminCertificate() that uses the CA

to create the admin cert has been moved into CAConfigurator.

</pre>

</li>

<li>

<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/e87fa82a723e920b24cd6e55d0f367ef17cf292e">e87fa82a</a></strong>

<div>

<span>by Dinesh Prasanth M K</span>

<i>at 2020-09-14T18:42:31-07:00</i>

</div>

<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Fix syntax error in performance testing script

Missing paranthesis causes error while trying to execute performance

test.

Signed-off-by: Dinesh Prasanth M K <dmoluguw@redhat.com>

</pre>

</li>

<li>

<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/41ba09a5ffa20b5b5cd5d369539c25ba1fb11a70">41ba09a5</a></strong>

<div>

<span>by Endi S. Dewata</span>

<i>at 2020-09-14T21:24:10-05:00</i>

</div>

<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Move UpdateCRL to pki-ca

</pre>

</li>

<li>

<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/186adaf541760095131ac8f07f66647c1ba89876">186adaf5</a></strong>

<div>

<span>by Endi S. Dewata</span>

<i>at 2020-09-14T21:24:10-05:00</i>

</div>

<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Move Configurator.createPKCS7()

</pre>

</li>

<li>

<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/e7a997eca380ddcda0254bf86a56007852328b0d">e7a997ec</a></strong>

<div>

<span>by Endi S. Dewata</span>

<i>at 2020-09-14T21:24:10-05:00</i>

</div>

<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Refactor Configurator.loadCert()

The code that creates the cert and request records for

existing certs in Configurator.loadCert() has been moved

into CAConfigurator.

</pre>

</li>

<li>

<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/75c7a913e7da22a5ee886579d751f974f4cc8f7c">75c7a913</a></strong>

<div>

<span>by Endi S. Dewata</span>

<i>at 2020-09-14T21:24:10-05:00</i>

</div>

<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Refactor Configurator.configCert()

The Configurator.configCert() has been renamed to generateCert()

and modified to store the cert data in the Cert object instead

of returning an X509CertImpl object.

</pre>

</li>

<li>

<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/c75022b4748ef42e27683730736f2d6f50e8be3e">c75022b4</a></strong>

<div>

<span>by Endi S. Dewata</span>

<i>at 2020-09-14T21:24:10-05:00</i>

</div>

<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Remove unused Cert.mDN

</pre>

</li>

<li>

<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/a470a8987cc783bc3a9ad81860746be3b96840fd">a470a898</a></strong>

<div>

<span>by Endi S. Dewata</span>

<i>at 2020-09-14T21:24:10-05:00</i>

</div>

<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Refactor Configurator.configRemoteCert()

The Configurator.configRemoteCert() has been modified to

take a binary instead of Base64-encoded request data.

</pre>

</li>

<li>

<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/795008bdb32dd5eea9e7d47123e8c8f4ea6fef8a">795008bd</a></strong>

<div>

<span>by Endi S. Dewata</span>

<i>at 2020-09-14T21:24:10-05:00</i>

</div>

<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Move CertUtils.buildSANSSLserverURLExtension() to Configurator

</pre>

</li>

<li>

<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/99e20c8aac276804a7655dfcaa5f55639bd290b0">99e20c8a</a></strong>

<div>

<span>by Endi S. Dewata</span>

<i>at 2020-09-14T21:24:10-05:00</i>

</div>

<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Add Configurator.generateLocalCert()

</pre>

</li>

<li>

<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/d46659ba9c86700d59d6150f4822ea17ed30f780">d46659ba</a></strong>

<div>

<span>by Endi S. Dewata</span>

<i>at 2020-09-14T21:24:10-05:00</i>

</div>

<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Add Configurator.generateRemoteCert()

</pre>

</li>

<li>

<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/b2e62dc4d328f59d9a5529fdd9ea99dd22091316">b2e62dc4</a></strong>

<div>

<span>by Endi S. Dewata</span>

<i>at 2020-09-14T21:33:44-05:00</i>

</div>

<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Refactor Configurator.generateCertAndRequest()

The Configurator.generateCertAndRequest() has been replaced

with direct calls to generateCertRequest() and generateCert().

</pre>

</li>

<li>

<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/5f061a2d234d3e4892aad609f4fce31c369d4f15">5f061a2d</a></strong>

<div>

<span>by Endi S. Dewata</span>

<i>at 2020-09-14T21:33:44-05:00</i>

</div>

<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Refactor Configurator.generateCert()

The code that generates the certs for CA and the

SSL server cert for CA clone has been moved into

CAConfigurator.generateCert().

</pre>

</li>

<li>

<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/83f4259ea3f50d38b2281233277ef55bf35873bc">83f4259e</a></strong>

<div>

<span>by Endi S. Dewata</span>

<i>at 2020-09-14T21:33:44-05:00</i>

</div>

<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Move Configurator.generateLocalCert()

</pre>

</li>

<li>

<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/43df39317765c77e1ecbbd1f34503c8800e36a9c">43df3931</a></strong>

<div>

<span>by Endi S. Dewata</span>

<i>at 2020-09-14T21:33:44-05:00</i>

</div>

<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Move Configurator.createRequest()

</pre>

</li>

<li>

<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/40bd8274ad980be3320fd63730b2ff139480a8e0">40bd8274</a></strong>

<div>

<span>by Endi S. Dewata</span>

<i>at 2020-09-14T21:34:21-05:00</i>

</div>

<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Update log messages in CertificateAuthority

</pre>

</li>

<li>

<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/02c0a0c20b986146b7a7f907f56705159a9863e9">02c0a0c2</a></strong>

<div>

<span>by Endi S. Dewata</span>

<i>at 2020-09-14T21:34:24-05:00</i>

</div>

<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Update log messages in CAEngine

</pre>

</li>

<li>

<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/127a233d4979ee723ce6736c2cea54c048e738f5">127a233d</a></strong>

<div>

<span>by Dinesh Prasanth M K</span>

<i>at 2020-09-15T16:15:42-07:00</i>

</div>

<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Update README.md with instructions

Our README.md currently has very low-level technical info

which might not serve its use for a beginner. The README

should act as a good cover page for the project to attract

more contributors and users and, provide minimal yet useful

information for new-users.

This patch updates the existing README.md file with such

minimal, yet useful information

Signed-off-by: Dinesh Prasanth M K <dmoluguw@redhat.com>

</pre>

</li>

<li>

<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/a85d998c6ec9141a0109a47ff7e230fcc1d5578a">a85d998c</a></strong>

<div>

<span>by Endi S. Dewata</span>

<i>at 2020-09-16T13:27:28-05:00</i>

</div>

<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Updated ACME docs

</pre>

</li>

<li>

<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/f35d270b5551ae35e699163d78d451e5b7c247da">f35d270b</a></strong>

<div>

<span>by Alexander Scheel</span>

<i>at 2020-09-17T11:01:51-04:00</i>

</div>

<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Add dependencies in Java11-specific libraries

This ensures lib/ gets created prior to any Java11-specific symlinks.

Signed-off-by: Alexander Scheel <ascheel@redhat.com>

</pre>

</li>

<li>

<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/54de035b3a16144a888d807c636d05b15c806572">54de035b</a></strong>

<div>

<span>by Alexander Scheel</span>

<i>at 2020-09-17T11:01:51-04:00</i>

</div>

<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Make PKI_JAVA_PATH respect PKI_JAVA_PATH

Signed-off-by: Alexander Scheel <ascheel@redhat.com>

</pre>

</li>

<li>

<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/8c6af8d9c5482ae95c2912ba8553474e9e8e6435">8c6af8d9</a></strong>

<div>

<span>by Alexander Scheel</span>

<i>at 2020-09-17T11:01:51-04:00</i>

</div>

<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Fix %{java_version} -> ${java_version}

Because java_version isn't a RPM spec file attribute (and is instead an

inline shell variable), we have to use $ instead of % to reference it.

Signed-off-by: Alexander Scheel <ascheel@redhat.com>

</pre>

</li>

<li>

<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/6f0da7cafd877f097bc3c2db7eaaed107ec6467e">6f0da7ca</a></strong>

<div>

<span>by Alexander Scheel</span>

<i>at 2020-09-17T12:06:55-04:00</i>

</div>

<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Add Fedora 33 image, switch to r.fp.o

registry.fedoraproject.org (r.fp.o) has more up-to-date Fedora images

than Dockerhub does. This is because Dockerhub is external infra with

a review process, whereas registry.fedoraproject.org is directly

controlled by the Fedora Project, so images can be pushed directly.

Signed-off-by: Alexander Scheel <ascheel@redhat.com>

</pre>

</li>

<li>

<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/782f9df466a4b28a9254c57b66bdb44660b52347">782f9df4</a></strong>

<div>

<span>by Alexander Scheel</span>

<i>at 2020-09-17T12:06:55-04:00</i>

</div>

<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Fix variable names for flake8 on python3.9

Signed-off-by: Alexander Scheel <ascheel@redhat.com>

</pre>

</li>

<li>

<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/fca780375a0845448fa5c23c2aaaed304ff59680">fca78037</a></strong>

<div>

<span>by Alexander Scheel</span>

<i>at 2020-09-17T12:06:55-04:00</i>

</div>

<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Disable W0707 warning due to output

Consider explicitly re-raising using the 'from' keyword

Signed-off-by: Alexander Scheel <ascheel@redhat.com>

</pre>

</li>

<li>

<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/91fb4a88e8babd01350003579785bfaaceb2f706">91fb4a88</a></strong>

<div>

<span>by Alexander Scheel</span>

<i>at 2020-09-17T15:31:42-04:00</i>

</div>

<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Migrate from commons-lang2 -> commons-lang3

Note that this is blocked on lang3 >= 3.10 landing in Fedora 31.

Credits: Fabio "decathorpe" Valentini

Related: https://pagure.io/dogtagpki/issue/3205

Signed-off-by: Alexander Scheel <ascheel@redhat.com>

</pre>

</li>

<li>

<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/64c17e27258ba224c9e59365904d0156f8bb3a76">64c17e27</a></strong>

<div>

<span>by Alexander Scheel</span>

<i>at 2020-09-17T15:31:42-04:00</i>

</div>

<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Work with older Apache Commons Lang3

Signed-off-by: Alexander Scheel <ascheel@redhat.com>

</pre>

</li>

<li>

<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/d9491b46a5077faf47750a0a273b06434cdb6048">d9491b46</a></strong>

<div>

<span>by Endi S. Dewata</span>

<i>at 2020-09-17T18:15:49-05:00</i>

</div>

<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Add package.json for NPM

The package.json has been added in order to import files

distributed via NPM (e.g. PatternFly, jQuery).

</pre>

</li>

<li>

<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/b9a832a2e5e10a5694f16eb5d0a96ebfe8896e7c">b9a832a2</a></strong>

<div>

<span>by Endi S. Dewata</span>

<i>at 2020-09-17T18:15:49-05:00</i>

</div>

<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Add PatternFly 4.35.2 for ACME

Some PatternFly files have been imported for ACME.

A tool has been added to simplify updating the files

in the future.

</pre>

</li>

<li>

<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/960cf8a0368ff04bae9c9fb99adc27b1b8269bbc">960cf8a0</a></strong>

<div>

<span>by Endi S. Dewata</span>

<i>at 2020-09-17T18:15:49-05:00</i>

</div>

<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Add jQuery 3.5.1 for ACME

A minimized jQuery file has been imported for ACME.

A tool has been provided to simplify updating the file

in the future.

</pre>

</li>

<li>

<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/88c7a1abe498ff6165e6005fcf8f5e5e005e0783">88c7a1ab</a></strong>

<div>

<span>by Endi S. Dewata</span>

<i>at 2020-09-17T18:15:49-05:00</i>

</div>

<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Add ACME front page

A new index.jsp has been added for ACME webapp. The web.xml

has been modified to map only ACME URLs to ACME application.

</pre>

</li>

<li>

<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/a0bd61a26f2f741cb6a83b1ee1dfb32a0be8c3de">a0bd61a2</a></strong>

<div>

<span>by Endi S. Dewata</span>

<i>at 2020-09-17T18:26:02-05:00</i>

</div>

<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Fix NPE in TPSProcessor.mapCredFromMsgResponse()

The TPSAuthenticator has been modified to no longer store a

reference to the authentication manager during initialization.

Instead, it will get the authentication manager directly from

the AuthSubsystem when requested in getAuthManager().

The TPSProcessor.checkAndAuthenticateUser() has also been

modified to chain the original exception to provide the complete

stack trace.

</pre>

</li>

<li>

<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/4c3ddb0c2d3db36a5a9327eec557629c6d4a30bf">4c3ddb0c</a></strong>

<div>

<span>by Endi S. Dewata</span>

<i>at 2020-09-21T09:47:21-05:00</i>

</div>

<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Remove unused Profile.mOwner

</pre>

</li>

<li>

<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/d38026410cd9ecd2415e041c2c54efe73d7284f3">d3802641</a></strong>

<div>

<span>by Endi S. Dewata</span>

<i>at 2020-09-21T09:51:09-05:00</i>

</div>

<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Rename IProfileAuthenticator to ProfileAuthenticator

</pre>

</li>

<li>

<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/2ed602333e1a32dbe5f38e0477928ec3641efd2d">2ed60233</a></strong>

<div>

<span>by Endi S. Dewata</span>

<i>at 2020-09-21T09:51:10-05:00</i>

</div>

<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Rename IAuthManager to AuthManager

</pre>

</li>

<li>

<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/c7fa66179ba6241cb57ef5ca5e3ea4465a9052d3">c7fa6617</a></strong>

<div>

<span>by Endi S. Dewata</span>

<i>at 2020-09-21T09:51:10-05:00</i>

</div>

<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Rename ICertUserLocator to CertUserLocator

</pre>

</li>

<li>

<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/0bcca28aecdda0a56019842019a4040a1fe0484c">0bcca28a</a></strong>

<div>

<span>by Endi S. Dewata</span>

<i>at 2020-09-21T09:51:11-05:00</i>

</div>

<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Move CertUserLocator to pki-server

</pre>

</li>

<li>

<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/8ef461d0a994372a9763f1dcac202371ce5076b5">8ef461d0</a></strong>

<div>

<span>by Endi S. Dewata</span>

<i>at 2020-09-21T09:51:13-05:00</i>

</div>

<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Move CMCSharedTokenSubjectNameConstraint to pki-ca

</pre>

</li>

<li>

<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/6db61a9b73e71acb622bc0f011b390a747b70472">6db61a9b</a></strong>

<div>

<span>by Endi S. Dewata</span>

<i>at 2020-09-21T10:46:01-05:00</i>

</div>

<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Merge ILdapConnInfo into LdapConnInfo

</pre>

</li>

<li>

<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/679c099021d6b5a3013a7c6dd43603f9463ae3a6">679c0990</a></strong>

<div>

<span>by Endi S. Dewata</span>

<i>at 2020-09-21T10:46:01-05:00</i>

</div>

<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Merge ILdapAuthInfo into LdapAuthInfo

</pre>

</li>

<li>

<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/fe9fff13e45bde8b396f0d95cd69a8746f2a3cc3">fe9fff13</a></strong>

<div>

<span>by Endi S. Dewata</span>

<i>at 2020-09-21T10:46:01-05:00</i>

</div>

<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Clean up LdapConnInfo

</pre>

</li>

<li>

<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/c0309750fc2ed60b7e43d9a6a9fe6cb1568fcdca">c0309750</a></strong>

<div>

<span>by Endi S. Dewata</span>

<i>at 2020-09-21T10:46:01-05:00</i>

</div>

<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Clean up LdapAuthInfo

</pre>

</li>

<li>

<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/5a5349c073c9512df5824c2c8ba9f14e76789633">5a5349c0</a></strong>

<div>

<span>by Endi S. Dewata</span>

<i>at 2020-09-21T10:46:01-05:00</i>

</div>

<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Remove unused ISubsystem from Profile.init()

</pre>

</li>

<li>

<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/78671846a5c5751b8f77ff04170811fb32a197b0">78671846</a></strong>

<div>

<span>by Endi S. Dewata</span>

<i>at 2020-09-21T10:46:01-05:00</i>

</div>

<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Move BaseSubsystem into pki-server

</pre>

</li>

<li>

<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/1eba66ed09e405980224c7add51ae4be805ad386">1eba66ed</a></strong>

<div>

<span>by Dinesh Prasanth M K</span>

<i>at 2020-09-21T10:46:48-07:00</i>

</div>

<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Enable COPR_REPO to fix QE tests in CI

Note the use of delimiter ~ instead of / since the copr

name consists of / and @ characters.

Signed-off-by: Dinesh Prasanth M K <dmoluguw@redhat.com>

</pre>

</li>

<li>

<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/c8470c3dcd5b82ba6840b06f53b8a2e4a4ecbba6">c8470c3d</a></strong>

<div>

<span>by Endi S. Dewata</span>

<i>at 2020-09-21T14:13:28-05:00</i>

</div>

<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Add LDAPConnectionConfig getters

</pre>

</li>

<li>

<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/e1785072e30b4912b5d660f9d1baf8b1bfff259e">e1785072</a></strong>

<div>

<span>by Endi S. Dewata</span>

<i>at 2020-09-21T14:13:28-05:00</i>

</div>

<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Add PKISocketConfig

</pre>

</li>

<li>

<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/083c1814b7415f1bb69fe4c702c1da832d5fd31c">083c1814</a></strong>

<div>

<span>by Endi S. Dewata</span>

<i>at 2020-09-21T14:13:28-05:00</i>

</div>

<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Clean up NPM tools

</pre>

</li>

<li>

<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/495e768f6c23876ea4a6eae1dea28dbc7b5a5522">495e768f</a></strong>

<div>

<span>by Endi S. Dewata</span>

<i>at 2020-09-21T14:13:28-05:00</i>

</div>

<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Clean up Client.createProxy()

</pre>

</li>

<li>

<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/14caa1fe0eeffaca653ca427cc5323a45bf7c987">14caa1fe</a></strong>

<div>

<span>by Endi S. Dewata</span>

<i>at 2020-09-21T14:13:28-05:00</i>

</div>

<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Add Client.get() and post()

</pre>

</li>

<li>

<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/aefb34f84ab8344c518abe8effcf74942bc3d646">aefb34f8</a></strong>

<div>

<span>by Endi S. Dewata</span>

<i>at 2020-09-21T16:40:29-05:00</i>

</div>

<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Replace PKIConnection.resteasyClient with client

</pre>

</li>

<li>

<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/f8747a8ad1bb6c855b208432e02b55344b5d8cf4">f8747a8a</a></strong>

<div>

<span>by Endi S. Dewata</span>

<i>at 2020-09-21T16:41:20-05:00</i>

</div>

<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Add PKIConnection.target()

</pre>

</li>

<li>

<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/43d111d4826f8cab94c55abb04c3cc69681c3cc3">43d111d4</a></strong>

<div>

<span>by Endi S. Dewata</span>

<i>at 2020-09-21T16:41:27-05:00</i>

</div>

<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Add PKIClient.setOutput()

</pre>

</li>

<li>

<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/1de3e2358a26bd4708e1399e9c342d832c930bd9">1de3e235</a></strong>

<div>

<span>by Endi S. Dewata</span>

<i>at 2020-09-21T16:48:47-05:00</i>

</div>

<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Merge PKIConnection.get() and post() to PKIClient

</pre>

</li>

<li>

<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/807f05681bf3ec74d630fa8ddb0a32554535a820">807f0568</a></strong>

<div>

<span>by Endi S. Dewata</span>

<i>at 2020-09-21T17:30:50-05:00</i>

</div>

<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Merge PKIConnection.createProxy() into PKIClient

</pre>

</li>

<li>

<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/1354de3d2d3d81da98e89b90180bede13e270270">1354de3d</a></strong>

<div>

<span>by Endi S. Dewata</span>

<i>at 2020-09-21T17:31:33-05:00</i>

</div>

<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Rename AccountInfo to Account

</pre>

</li>

<li>

<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/9fd77d2211031c73c4e5c45c7f242d9a05aad196">9fd77d22</a></strong>

<div>

<span>by Endi S. Dewata</span>

<i>at 2020-09-21T18:53:20-05:00</i>

</div>

<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Add JSON parser for Account class

</pre>

</li>

<li>

<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/cd878aba21f0c9ef5feb2a0f62e2e69fdce3113b">cd878aba</a></strong>

<div>

<span>by Endi S. Dewata</span>

<i>at 2020-09-21T19:20:38-05:00</i>

</div>

<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Merge PKIConnection.getEntity() into PKIClient

</pre>

</li>

<li>

<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/00d2015f11d77af86ea546e7cad8f2b3ea9de5be">00d2015f</a></strong>

<div>

<span>by Endi S. Dewata</span>

<i>at 2020-09-21T21:36:47-05:00</i>

</div>

<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Add response type to PKIClient.get() and post()

</pre>

</li>

<li>

<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/85a88309bbf1b63445c31db1291c80972a1758a6">85a88309</a></strong>

<div>

<span>by Endi S. Dewata</span>

<i>at 2020-09-21T21:36:47-05:00</i>

</div>

<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Add response type to Client.get() and post()

</pre>

</li>

<li>

<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/f751540226ca937d129808dfcdc1644f1110397a">f7515402</a></strong>

<div>

<span>by Endi S. Dewata</span>

<i>at 2020-09-21T21:39:50-05:00</i>

</div>

<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Update AccountClient

The AccountClient has been modified to use get() instead

of AccountResource.

</pre>

</li>

<li>

<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/f5864246b478f3413052129ef7e44dfa55f647a3">f5864246</a></strong>

<div>

<span>by Endi S. Dewata</span>

<i>at 2020-09-21T21:40:08-05:00</i>

</div>

<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Merge AccountResource into AccountService

</pre>

</li>

<li>

<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/e680746ac4926367aef5c3ae3404dbb23c07eb19">e680746a</a></strong>

<div>

<span>by Endi S. Dewata</span>

<i>at 2020-09-22T08:51:08-05:00</i>

</div>

<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Clean up JSON mapping in ResourceMessage

</pre>

</li>

<li>

<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/8b5eb770a93fd5399e7212ccaaf2dc9931a04545">8b5eb770</a></strong>

<div>

<span>by Endi S. Dewata</span>

<i>at 2020-09-22T08:51:09-05:00</i>

</div>

<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Move ACME.randomAlphanumeric() into ACMEEngine

</pre>

</li>

<li>

<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/2797b6bfcba412362c96b5e72d5d248b64795247">2797b6bf</a></strong>

<div>

<span>by Endi S. Dewata</span>

<i>at 2020-09-22T09:11:46-05:00</i>

</div>

<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Add ACMEEngine.setEnabled()

</pre>

</li>

<li>

<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/29b191e6f5391c574ec12db95f15e948ea54f017">29b191e6</a></strong>

<div>

<span>by Endi S. Dewata</span>

<i>at 2020-09-22T18:24:32-05:00</i>

</div>

<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Fix typos in ACME docs

</pre>

</li>

<li>

<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/e37ac8134c19e246c59ae5fab5585a0038c37ce4">e37ac813</a></strong>

<div>

<span>by Alexander Scheel</span>

<i>at 2020-09-23T05:46:19-04:00</i>

</div>

<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Remove SSL configuration; rely on crypto-policies

When TLSv1.3 support landed in Fedora and RHEL, crypto-policies enabled

it everywhere including in FIPS mode. However, because we bounded the

range above by TLSv1.2, we wouldn't negotiate TLSv1.3 when communicating

with CA instances. crypto-policies should be the single source of truth

for these values, and we shouldn't limit ourselves artificially.

Instead, users should change crypto-policies to the correct policy for

their needs.

Signed-off-by: Alexander Scheel <ascheel@redhat.com>

</pre>

</li>

<li>

<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/8400f54a16a0e47c93faf9f26afcdeac692980c7">8400f54a</a></strong>

<div>

<span>by Alexander Scheel</span>

<i>at 2020-09-23T05:46:19-04:00</i>

</div>

<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Align server.xml with crypto-policies

We shouldn't set custom ciphers in server.xml as they'll override the

default NSS values. These values already align with crypto-policies, and

these legacy configuration options result in global values which apply

to all parts (client and server) of the PKI configuration. Instead,

server-specific values should be chosen by using standard Tomcat

parameters:

https://tomcat.apache.org/tomcat-9.0-doc/config/http.html#SSL_Support

These are:

 protocols="<values>"

 ciphers="<values>"

See the tomcat documentation for more information.

Signed-off-by: Alexander Scheel <ascheel@redhat.com>

</pre>

</li>

<li>

<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/b21ac386cdafda0beec995d9cd388b30f6b081e3">b21ac386</a></strong>

<div>

<span>by Alexander Scheel</span>

<i>at 2020-09-23T05:46:19-04:00</i>

</div>

<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Remove unused SSLVersionRange code

This code shouldn't be used as it affects global NSS configuration; we

should leave these at the default values and only change individual

SSL-backed PRFileDesc instances instead.

Signed-off-by: Alexander Scheel <ascheel@redhat.com>

</pre>

</li>

<li>

<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/3dec5afa358adf49cc1698411d6a247f54681c87">3dec5afa</a></strong>

<div>

<span>by Alexander Scheel</span>

<i>at 2020-09-23T05:46:19-04:00</i>

</div>

<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Enable PHA in legacy SSLSocket

Signed-off-by: Alexander Scheel <ascheel@redhat.com>

</pre>

</li>

<li>

<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/0615fb891a6d5c8bc165b2ff6c4ae20c84efdda0">0615fb89</a></strong>

<div>

<span>by Alexander Scheel</span>

<i>at 2020-09-23T05:46:19-04:00</i>

</div>

<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Add migration script to remove legacy config

Signed-off-by: Alexander Scheel <ascheel@redhat.com>

</pre>

</li>

<li>

<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/71d70af8d80585941d0389a6bf38788a5c3f74e7">71d70af8</a></strong>

<div>

<span>by Alexander Scheel</span>

<i>at 2020-09-23T05:46:19-04:00</i>

</div>

<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Bump JSS to reflect PHA dependency

This commit never made it to v10.9 branch, but it has the same

dependency. SSLSocket.enablePostHandshakeAuthDefault was added in JSS

v4.7.3, hence the JSS version bump.

Signed-off-by: Alexander Scheel <ascheel@redhat.com>

</pre>

</li>

<li>

<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/9bd1c6a0597d081c6444c065237151967aac7c90">9bd1c6a0</a></strong>

<div>

<span>by Endi S. Dewata</span>

<i>at 2020-09-23T08:36:47-05:00</i>

</div>

<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Fix PKI_JAVA_PATH

</pre>

</li>

<li>

<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/4a45608246d5191d7de389d33a78d3d56ad2fb8f">4a456082</a></strong>

<div>

<span>by Endi S. Dewata</span>

<i>at 2020-09-23T08:46:17-05:00</i>

</div>

<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Remove duplicate ldapjdk.jar in ACME

</pre>

</li>

<li>

<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/96fd9e001ab3d7d63dee15751f46281cffdda5e2">96fd9e00</a></strong>

<div>

<span>by Endi S. Dewata</span>

<i>at 2020-09-23T08:57:18-05:00</i>

</div>

<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Rename LDAPDatabase.basedn to baseDN

</pre>

</li>

<li>

<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/b578706dbddc36335f65fc13eb2c8a43463a939f">b578706d</a></strong>

<div>

<span>by Endi S. Dewata</span>

<i>at 2020-09-23T18:27:02-05:00</i>

</div>

<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Update links to project website

</pre>

</li>

<li>

<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/9fc36ca54d4f97bafb596ae391124ab7fd0289fb">9fc36ca5</a></strong>

<div>

<span>by Endi S. Dewata</span>

<i>at 2020-09-24T12:52:32-05:00</i>

</div>

<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Move ACME common classes to pki-certsrv

The ACME common classes have been moved into pki-certsrv

package since they will be needed by ACME clients.

</pre>

</li>

<li>

<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/9ec48ef9d5615a6365a05600d8622415ed05444b">9ec48ef9</a></strong>

<div>

<span>by Endi S. Dewata</span>

<i>at 2020-09-25T11:55:37-05:00</i>

</div>

<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Update reqId in CertUtils.updateLocalRequest()

</pre>

</li>

<li>

<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/12bae6139240e18fc8321e21f6770c6b7525b6a6">12bae613</a></strong>

<div>

<span>by Endi S. Dewata</span>

<i>at 2020-09-25T11:55:38-05:00</i>

</div>

<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Clean up preop.cert.<tag>.reqId

</pre>

</li>

<li>

<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/fe9e75a836e30aa1aae72994a3280a613c113351">fe9e75a8</a></strong>

<div>

<span>by Endi S. Dewata</span>

<i>at 2020-09-25T11:55:39-05:00</i>

</div>

<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Move CertUtils.updateLocalRequest() to CAConfigurator

</pre>

</li>

<li>

<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/180bee977b8b6034230331b181e998f2f09c8645">180bee97</a></strong>

<div>

<span>by Endi S. Dewata</span>

<i>at 2020-09-25T11:55:41-05:00</i>

</div>

<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Merge Configurator.handleCert() into processCert()

</pre>

</li>

<li>

<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/4a5029e4bf4b75c477858f2955effe148e8178d2">4a5029e4</a></strong>

<div>

<span>by Endi S. Dewata</span>

<i>at 2020-09-25T11:55:42-05:00</i>

</div>

<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Merge Configurator.importCert() into processCert()

</pre>

</li>

<li>

<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/a10ec92fa7d33835d107948d12547d6e77953c61">a10ec92f</a></strong>

<div>

<span>by Endi S. Dewata</span>

<i>at 2020-09-25T11:55:43-05:00</i>

</div>

<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Move TKSKnownSessionKey to pki-tks

</pre>

</li>

<li>

<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/78faaf369e798f6071383840a5bfe9ed4b95994f">78faaf36</a></strong>

<div>

<span>by Endi S. Dewata</span>

<i>at 2020-09-25T11:55:44-05:00</i>

</div>

<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Clean up log messages in PluginRegistry

</pre>

</li>

<li>

<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/c1ef9ce337969b6c3d1833da6d59a878a42f4d27">c1ef9ce3</a></strong>

<div>

<span>by Endi S. Dewata</span>

<i>at 2020-09-25T14:04:23-05:00</i>

</div>

<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Remove unused CertUtil.findCertificate()

</pre>

</li>

<li>

<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/06eecf766b2a79adf211ad8f6111c1e1dd72725f">06eecf76</a></strong>

<div>

<span>by Endi S. Dewata</span>

<i>at 2020-09-25T14:24:12-05:00</i>

</div>

<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Replace CMSEngine with CAEngine in pki-ca

</pre>

</li>

<li>

<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/0ce630d0c64cbf191ad835ebe8fa01bb50e00609">0ce630d0</a></strong>

<div>

<span>by Endi S. Dewata</span>

<i>at 2020-09-25T14:24:13-05:00</i>

</div>

<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Replace CMSEngine with KRAEngine in pki-kra

</pre>

</li>

<li>

<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/7e380ea94e21ad84874ade82714cfddd9922581f">7e380ea9</a></strong>

<div>

<span>by Endi S. Dewata</span>

<i>at 2020-09-25T14:24:14-05:00</i>

</div>

<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Replace CMSEngine with OCSPEngine in pki-ocsp

</pre>

</li>

<li>

<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/a4d29a9b82e6862e36e575006524f700442f0455">a4d29a9b</a></strong>

<div>

<span>by Endi S. Dewata</span>

<i>at 2020-09-25T14:24:15-05:00</i>

</div>

<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Replace CMSEngine with TKSEngine in pki-tks

</pre>

</li>

<li>

<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/4a3b2729fdfeafe39abd5eb97ca33ef5e9475107">4a3b2729</a></strong>

<div>

<span>by Endi S. Dewata</span>

<i>at 2020-09-25T14:24:15-05:00</i>

</div>

<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Replace CMSEngine with TPSEngine in pki-tps

</pre>

</li>

<li>

<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/a34ac929e66e217715e6759a0116a2aece525b34">a34ac929</a></strong>

<div>

<span>by Endi S. Dewata</span>

<i>at 2020-09-25T15:18:41-05:00</i>

</div>

<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Replace EngineConfig with TKSEngineConfig in pki-tks

</pre>

</li>

<li>

<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/989cbe642cf1e55a23707cc54bdb649045b950f9">989cbe64</a></strong>

<div>

<span>by Endi S. Dewata</span>

<i>at 2020-09-25T15:18:42-05:00</i>

</div>

<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Add setter/getter for tps.list

</pre>

</li>

<li>

<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/b8bb2e9df120b325e6fb44da9c767a705fc28832">b8bb2e9d</a></strong>

<div>

<span>by Endi S. Dewata</span>

<i>at 2020-09-25T15:18:43-05:00</i>

</div>

<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Add TPSConnectorConfig

</pre>

</li>

<li>

<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/040b5657b90768a434a9b9b083be335d44080b7b">040b5657</a></strong>

<div>

<span>by Endi S. Dewata</span>

<i>at 2020-09-25T15:18:44-05:00</i>

</div>

<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Add setters/getters for TPSConnectorConfig

</pre>

</li>

<li>

<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/061078527e38992d10ea7e3bafb3c7c4f513b306">06107852</a></strong>

<div>

<span>by Endi S. Dewata</span>

<i>at 2020-09-28T14:48:36-05:00</i>

</div>

<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Update NPM package files

</pre>

</li>

<li>

<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/ddb373451e94e8ff142519d64c523df7aecfe17f">ddb37345</a></strong>

<div>

<span>by Endi S. Dewata</span>

<i>at 2020-09-28T20:52:08-05:00</i>

</div>

<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Clean up SAN parameters handling

</pre>

</li>

<li>

<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/d6677b13ea99c29bd0020d259932e1de1bd65036">d6677b13</a></strong>

<div>

<span>by Endi S. Dewata</span>

<i>at 2020-09-28T20:52:08-05:00</i>

</div>

<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Remove UGSubsystem.getCertUserLocator()

</pre>

</li>

<li>

<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/e51a3f40d8e7a8e96dfe84638d470e1c9c86d329">e51a3f40</a></strong>

<div>

<span>by Endi S. Dewata</span>

<i>at 2020-09-28T20:52:08-05:00</i>

</div>

<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Remove unused User.mBase

</pre>

</li>

<li>

<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/ea6c1fc1956ef15d01cb7272b399ca407c299c18">ea6c1fc1</a></strong>

<div>

<span>by Endi S. Dewata</span>

<i>at 2020-09-28T20:52:08-05:00</i>

</div>

<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Remove unused Group.mBase

</pre>

</li>

<li>

<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/10dc5005b4eb6c49e9f9036a187ae860f6f400fc">10dc5005</a></strong>

<div>

<span>by Endi S. Dewata</span>

<i>at 2020-09-28T20:52:08-05:00</i>

</div>

<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Remove unused IUsrGrp

</pre>

</li>

<li>

<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/c0f09c5e1c71da5559106ac290ff1d1137ed4b03">c0f09c5e</a></strong>

<div>

<span>by Endi S. Dewata</span>

<i>at 2020-09-28T20:52:08-05:00</i>

</div>

<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Remove unused IIdEvaluator

</pre>

</li>

<li>

<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/3176ae6c2017df667461905048269e628c5eb2a7">3176ae6c</a></strong>

<div>

<span>by Dinesh Prasanth M K</span>

<i>at 2020-09-29T13:24:05-04:00</i>

</div>

<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Fix brackets in revocation performance test

Signed-off-by: Dinesh Prasanth M K <dmoluguw@redhat.com>

</pre>

</li>

<li>

<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/3bf4240254c51966e48a9b7406573e0434c3f7f5">3bf42402</a></strong>

<div>

<span>by Endi S. Dewata</span>

<i>at 2020-09-29T14:29:15-05:00</i>

</div>

<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Add AppService

The AppService has been added to provide a list of subsystems

deployed on the instance. The list is generated by checking each

subfolder under <instance>/conf to see if it has a corresponding

deployed web application. The /pki/ui page has been modified to

use the AppService to provide links to all subsystems on the

instance.

</pre>

</li>

<li>

<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/4e10ad78013f0d6c9fc1a737a056a7110a9bae84">4e10ad78</a></strong>

<div>

<span>by Endi S. Dewata</span>

<i>at 2020-09-29T15:39:34-05:00</i>

</div>

<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Add ACMEManagedService

The ACMEManagedService annotation has been added to apply the

ACMERequestFilter to certain services only rather than the

entire ACME responder.

</pre>

</li>

<li>

<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/df7c5b23c80fd5e6a2702a8fecd68b49cbaa8933">df7c5b23</a></strong>

<div>

<span>by Endi S. Dewata</span>

<i>at 2020-09-29T15:39:34-05:00</i>

</div>

<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Add ACMERealm

The ACMERealm has been added to define the users and groups

allowed to access certain services in the ACME responder.

</pre>

</li>

<li>

<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/1d46b9cdb5182862286a8b94e2efa11e9fe72cbd">1d46b9cd</a></strong>

<div>

<span>by Endi S. Dewata</span>

<i>at 2020-09-29T15:39:34-05:00</i>

</div>

<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Add LDAPRealm and DSRealm for ACME

The DSRealm (which extends LDAPRealm) has been added to

define the ACME realm using users and groups in DS.

</pre>

</li>

<li>

<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/8fea902e98c79519e93f755cba3529c4d0a860de">8fea902e</a></strong>

<div>

<span>by Endi S. Dewata</span>

<i>at 2020-09-29T15:39:34-05:00</i>

</div>

<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Add pki-server acme-realm-show/mod commands

The pki-server acme-realm-show/mod commands have been

added to display and configure the ACME realm.

</pre>

</li>

<li>

<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/10e3870105624ffcc5f0798480be8b4213c4c0ad">10e38701</a></strong>

<div>

<span>by Endi S. Dewata</span>

<i>at 2020-09-29T15:39:34-05:00</i>

</div>

<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Add ACMELoginService and ACMELogoutService

The ACMELoginService and ACMELogoutService have been added

to authenticate into the ACME responder.

</pre>

</li>

<li>

<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/361d1227d25cd337451871b8f41db377e7d38fd5">361d1227</a></strong>

<div>

<span>by Endi S. Dewata</span>

<i>at 2020-09-29T15:39:34-05:00</i>

</div>

<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Add ACMEEnableService and ACMEDisableService

The ACMEEnableService and ACMEDisableService have been

added to enable/disable services in the ACME responder.

</pre>

</li>

<li>

<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/69eaf22ba0efef9a314a86fc07375f16cd3d0257">69eaf22b</a></strong>

<div>

<span>by Endi S. Dewata</span>

<i>at 2020-09-29T15:39:34-05:00</i>

</div>

<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Add pki acme-info command

The pki acme-info command has been added to show

some information about the ACME responder.

</pre>

</li>

<li>

<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/65a3ea2352785a70ed97600871d7fbd9739f0021">65a3ea23</a></strong>

<div>

<span>by Endi S. Dewata</span>

<i>at 2020-09-29T15:39:34-05:00</i>

</div>

<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Add pki acme-enable/disable commands

The pki acme-enable/disable commands have been added to

enable/disable services in the ACME responder.

</pre>

</li>

<li>

<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/3b5a26e60755417d71f86dd4ea34a529b52a03f1">3b5a26e6</a></strong>

<div>

<span>by Endi S. Dewata</span>

<i>at 2020-09-29T15:39:34-05:00</i>

</div>

<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Update ACME docs

</pre>

</li>

<li>

<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/c863e587a8e63bf218608899435851262f3ff4a1">c863e587</a></strong>

<div>

<span>by Endi S. Dewata</span>

<i>at 2020-09-29T17:21:31-05:00</i>

</div>

<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Move base/common/src to base/common/src/main/java

</pre>

</li>

<li>

<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/64caba59f1c0ca9b8b4154b51979216c4c7fef2f">64caba59</a></strong>

<div>

<span>by Endi S. Dewata</span>

<i>at 2020-09-29T18:18:34-05:00</i>

</div>

<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Move base/common/functional/src to base/common/src/test/java

</pre>

</li>

<li>

<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/1caad924f318e548220a10519191ce08993f2973">1caad924</a></strong>

<div>

<span>by Endi S. Dewata</span>

<i>at 2020-09-29T19:01:49-05:00</i>

</div>

<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Add UGSubsystemConfig

</pre>

</li>

<li>

<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/0acf647c302ce45b2c2a63bb68142fcc2d346860">0acf647c</a></strong>

<div>

<span>by Endi S. Dewata</span>

<i>at 2020-09-29T19:01:50-05:00</i>

</div>

<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Clean up UGSubsystem.init()

</pre>

</li>

<li>

<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/823c84057ea0852d16d1f6fc65273e17f246c05f">823c8405</a></strong>

<div>

<span>by Endi S. Dewata</span>

<i>at 2020-09-29T19:01:51-05:00</i>

</div>

<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Remove unused UGSubsystem.mId

</pre>

</li>

<li>

<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/8fe1284e7e22b42a8027bc983d5b1e5bbd3c85ee">8fe1284e</a></strong>

<div>

<span>by Endi S. Dewata</span>

<i>at 2020-09-29T19:01:52-05:00</i>

</div>

<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Remove unused UGSubsystem.getDescription()

</pre>

</li>

<li>

<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/c69f970c15683a4fe14a24518c965ed21a140dfe">c69f970c</a></strong>

<div>

<span>by Endi S. Dewata</span>

<i>at 2020-09-29T19:01:53-05:00</i>

</div>

<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Clean up log messages in UGSubsystem

</pre>

</li>

<li>

<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/3d41b645b5790e1b88e852fc99ca82871c197fea">3d41b645</a></strong>

<div>

<span>by Alexander Scheel</span>

<i>at 2020-09-30T09:19:15-04:00</i>

</div>

<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Remove net-tools as dependency

As far as I can tell, this package isn't required by the new

pkispawn installer. As people are asking for it to be removed from

Fedora ELN, we should drop our dependency on it.

Signed-off-by: Alexander Scheel <ascheel@redhat.com>

</pre>

</li>

<li>

<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/4df4769e60ccd04a68a247621133c37217e990a1">4df4769e</a></strong>

<div>

<span>by Endi S. Dewata</span>

<i>at 2020-09-30T10:56:27-05:00</i>

</div>

<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Replace CMSEngine.getEEHost() with EngineConfig.getHostname()

</pre>

</li>

<li>

<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/b9567d0b18b09f1e128afb9a04e966e9407453c8">b9567d0b</a></strong>

<div>

<span>by Endi S. Dewata</span>

<i>at 2020-09-30T10:56:29-05:00</i>

</div>

<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Replace CMSEngine.getEESSLHost() with EngineConfig.getHostname()

</pre>

</li>

<li>

<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/e2a49f6611407346495dfa6485775d632d2be65e">e2a49f66</a></strong>

<div>

<span>by Endi S. Dewata</span>

<i>at 2020-09-30T10:56:31-05:00</i>

</div>

<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Replace CMSEngine.getEENonSSLHost() with EngineConfig.getHostname()

</pre>

</li>

<li>

<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/4e8443b894c429e167d1a954606980288360e932">4e8443b8</a></strong>

<div>

<span>by Endi S. Dewata</span>

<i>at 2020-09-30T10:56:33-05:00</i>

</div>

<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Replace CMSEngine.getAgentHost() with EngineConfig.getHostname()

</pre>

</li>

<li>

<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/ee755d9f4191fc073c645bcee535922fcd83d919">ee755d9f</a></strong>

<div>

<span>by Endi S. Dewata</span>

<i>at 2020-09-30T10:56:34-05:00</i>

</div>

<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Remove unused CMSEngine.getAdminHost()

</pre>

</li>

<li>

<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/78ffb9c9d575df8d2477a497bceff9f882e0c8a8">78ffb9c9</a></strong>

<div>

<span>by Endi S. Dewata</span>

<i>at 2020-09-30T10:56:35-05:00</i>

</div>

<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Remove unused CMSEngine.hostname

</pre>

</li>

<li>

<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/a7ea9abf83a60741ec1532a0ae6a1480c38d2d53">a7ea9abf</a></strong>

<div>

<span>by jmagne</span>

<i>at 2020-09-30T10:36:40-07:00</i>

</div>

<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Resolve: Bug 1710978 - TPS - Add logging to tdbAddCertificatesForCUID if adding or searching for cert record fails (#560)

Submitted by RHCS-maint.

This fix provides better logging when the update to the token db sufferes a partial or complete failure.

Due to the unlikelyness of this happening in practice, this fix provides a simple config based way to simulate

the issue, such that the log activity can be easily observed just as if had happened during an actual failure.

Set the following in the TPS's CS.cfg:

op.enroll.testAddCertsToDBFailure=true.

The setting is false by default.

Co-authored-by: Jack Magne <jmagne@localhost.localdomain></pre>

</li>

<li>

<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/49d9d4ad92de6b7ba9225c9a2888b0ca6e8f0fd0">49d9d4ad</a></strong>

<div>

<span>by jmagne</span>

<i>at 2020-09-30T10:39:36-07:00</i>

</div>

<pre class="commit-message" style="white-space: pre-wrap; margin: 0;"> Resolve: Bug 1858860 - TPS - Update Error Codes returned to client (CIW/ESC) to Match CS8. (#565)

This is simply the addition to one very simple patch to the pin reset procedure, that provides

    the proper error code back to the client in 2 very unlikely error scenarios.

RHCS-maint.</pre>

</li>

<li>

<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/40d6412d927c6a491059dbd6dee1185f85029c43">40d6412d</a></strong>

<div>

<span>by Endi S. Dewata</span>

<i>at 2020-09-30T14:17:15-05:00</i>

</div>

<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Move base/native-tools to base/tools

The base/native-tools folder has been renamed into base/tools.

The files in pki-tools package will be unchanged except that

the /usr/share/pki/native-tools/setpin.conf will now be in

/usr/share/pki/tools.

https://bugzilla.redhat.com/show_bug.cgi?id=1883996

</pre>

</li>

<li>

<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/782fc3693e0d55877c6f071f77da25318ebd75c0">782fc369</a></strong>

<div>

<span>by Endi S. Dewata</span>

<i>at 2020-09-30T15:43:46-05:00</i>

</div>

<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Move base/acme/sbin to base/acme/bin

</pre>

</li>

<li>

<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/ddc2e6ba7cb8608383f84bf59ac9ea67613ef6e3">ddc2e6ba</a></strong>

<div>

<span>by Endi S. Dewata</span>

<i>at 2020-09-30T15:43:46-05:00</i>

</div>

<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Clean up pki.spec

</pre>

</li>

<li>

<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/97e415f0e3e508cf55f29d7a4f160c49bd678685">97e415f0</a></strong>

<div>

<span>by Endi S. Dewata</span>

<i>at 2020-10-01T13:34:43-05:00</i>

</div>

<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Clean up Instance.wait_for_startup()

</pre>

</li>

<li>

<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/e8df0e764f6d82c006e0924484f15616ed3b5ba1">e8df0e76</a></strong>

<div>

<span>by Endi S. Dewata</span>

<i>at 2020-10-01T13:34:43-05:00</i>

</div>

<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Add PasswordStoreConfig

</pre>

</li>

<li>

<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/e93543cdc1a2bc3fcb8f96e75a173e85271527fb">e93543cd</a></strong>

<div>

<span>by Endi S. Dewata</span>

<i>at 2020-10-01T13:34:43-05:00</i>

</div>

<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Add JssSubsystemConfig

</pre>

</li>

<li>

<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/d0e8b1af38e2b389864ce3dfec4e25f1131d196c">d0e8b1af</a></strong>

<div>

<span>by Endi S. Dewata</span>

<i>at 2020-10-01T13:34:43-05:00</i>

</div>

<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Add JssSubsystemConfig.isEnabled()

</pre>

</li>

<li>

<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/a8499e4a8368e98b588ef9cbdec2cc6aa41f4b44">a8499e4a</a></strong>

<div>

<span>by Endi S. Dewata</span>

<i>at 2020-10-01T13:34:43-05:00</i>

</div>

<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Add JssSubsystemConfig.getNSSDatabaseDir()

</pre>

</li>

<li>

<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/87ba1bf77ffa1db72e36e198599599801724f13e">87ba1bf7</a></strong>

<div>

<span>by Endi S. Dewata</span>

<i>at 2020-10-01T13:34:43-05:00</i>

</div>

<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Add JssSubsystemConfig.getObscureMethod()

</pre>

</li>

<li>

<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/e702a1744f1e8cbee92fc6570dd556b98651e912">e702a174</a></strong>

<div>

<span>by Endi S. Dewata</span>

<i>at 2020-10-01T13:34:43-05:00</i>

</div>

<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Add JssSubsystemConfig.getCloseNSSDatabase()

</pre>

</li>

<li>

<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/e78e357c686c041c58b7f01fe9006038adf433c3">e78e357c</a></strong>

<div>

<span>by Endi S. Dewata</span>

<i>at 2020-10-01T13:47:37-05:00</i>

</div>

<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Add RandomConfig

</pre>

</li>

<li>

<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/5433cc927bdf076fb613e7cc1c27a24ac2129201">5433cc92</a></strong>

<div>

<span>by Endi S. Dewata</span>

<i>at 2020-10-01T13:47:39-05:00</i>

</div>

<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Add SSLConfig

</pre>

</li>

<li>

<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/e6076319fd894b2839033d03c7462c6e58dd5dfa">e6076319</a></strong>

<div>

<span>by Endi S. Dewata</span>

<i>at 2020-10-01T13:47:40-05:00</i>

</div>

<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Add SSLConfig.getCipherPreferences()

</pre>

</li>

<li>

<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/2cc2d2322c3a646b9b50839f8be6a65adcd08d51">2cc2d232</a></strong>

<div>

<span>by Endi S. Dewata</span>

<i>at 2020-10-01T13:47:42-05:00</i>

</div>

<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Add SSLConfig.getECType()

</pre>

</li>

<li>

<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/2d89b87350a5b4aa72a284084b9c0e1083aca5b7">2d89b873</a></strong>

<div>

<span>by Endi S. Dewata</span>

<i>at 2020-10-01T13:47:44-05:00</i>

</div>

<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Clean up CAConfigurator.createLocalAdminCert()

The CAConfigurator.createLocalAdminCert() has been modified

to return the newly created certificate object so it's not

necessary to retrieve the certificate from the repository.

</pre>

</li>

<li>

<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/df7557838a0c26ca18c18dc13334de333346c601">df755783</a></strong>

<div>

<span>by Endi S. Dewata</span>

<i>at 2020-10-01T13:47:45-05:00</i>

</div>

<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Remove unused preop.admincert properties

</pre>

</li>

<li>

<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/67625856ac5381cefd7703a9f72613a1303d2c31">67625856</a></strong>

<div>

<span>by Endi S. Dewata</span>

<i>at 2020-10-01T15:07:40-05:00</i>

</div>

<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Move base/tools/src to base/tools/src/main/native

The native tools sources have been moved from base/tools/src

to base/tools/src/main/native to separate it from Java tools

sources.

https://bugzilla.redhat.com/show_bug.cgi?id=1883996

</pre>

</li>

<li>

<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/e4f73cefae2049ec31b82a5ce3300f1638bbc8bb">e4f73cef</a></strong>

<div>

<span>by Endi S. Dewata</span>

<i>at 2020-10-01T15:54:21-05:00</i>

</div>

<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Fix Java source paths

</pre>

</li>

<li>

<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/5e80fc0f8b2520badd856b138b10512f63c90d01">5e80fc0f</a></strong>

<div>

<span>by Alexander Scheel</span>

<i>at 2020-10-05T12:47:40-04:00</i>

</div>

<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Update links to bug trackers to point to GitHub

Signed-off-by: Alexander Scheel <ascheel@redhat.com>

</pre>

</li>

<li>

<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/389d34a50552a7579460ead2e6101bb0b40492bb">389d34a5</a></strong>

<div>

<span>by Endi S. Dewata</span>

<i>at 2020-10-05T12:28:14-05:00</i>

</div>

<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Merge base/java-tools into base/tools

The Java tools sources have been moved from base/java-tools

to base/tools.

https://bugzilla.redhat.com/show_bug.cgi?id=1883996

</pre>

</li>

<li>

<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/8b9242ca4f7df660e2bc30e9bcd89a4eb8dd3567">8b9242ca</a></strong>

<div>

<span>by Alexander Scheel</span>

<i>at 2020-10-05T14:40:08-04:00</i>

</div>

<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Limit requiredSecret character set

This adds new parameters `charset` and `length` to

`generate_password(...)`, letting us limit the character set when

required without modifying PUNCTUATION, while also extending the

length of the generated password when required.

Resolves: #3342

Signed-off-by: Alexander Scheel <ascheel@redhat.com>

</pre>

</li>

<li>

<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/29f8189b3356cd7224009dad80c295573c12eb50">29f8189b</a></strong>

<div>

<span>by Endi S. Dewata</span>

<i>at 2020-10-05T15:02:43-05:00</i>

</div>

<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Move IEnrollmentPolicy to pki-server

</pre>

</li>

<li>

<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/26d86e9efd5e8ee4b991d1e1fc7a3da2c6fa182b">26d86e9e</a></strong>

<div>

<span>by Endi S. Dewata</span>

<i>at 2020-10-05T15:02:43-05:00</i>

</div>

<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Move IKeyArchivalPolicy to pki-server

</pre>

</li>

<li>

<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/9b9727340a351d0895b06911a77a37173df6ae6c">9b972734</a></strong>

<div>

<span>by Endi S. Dewata</span>

<i>at 2020-10-05T15:02:43-05:00</i>

</div>

<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Move IKeyRecoveryPolicy to pki-server

</pre>

</li>

<li>

<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/6458133872f2d92e718bc7c1216c1891590c5795">64581338</a></strong>

<div>

<span>by Endi S. Dewata</span>

<i>at 2020-10-05T15:02:43-05:00</i>

</div>

<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Move IRenewalPolicy to pki-server

</pre>

</li>

<li>

<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/6d9cdc6243014707dd8188da27e4cd42adb49ea0">6d9cdc62</a></strong>

<div>

<span>by Endi S. Dewata</span>

<i>at 2020-10-05T15:02:43-05:00</i>

</div>

<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Move IRevocationPolicy to pki-server

</pre>

</li>

<li>

<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/81e967d7b1144d263a49c0d9795a81180ba8b740">81e967d7</a></strong>

<div>

<span>by Endi S. Dewata</span>

<i>at 2020-10-05T15:02:43-05:00</i>

</div>

<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Move IPolicySet to pki-server

</pre>

</li>

<li>

<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/faed9e6c86b5a076a8b9dbee58183aff11c956f2">faed9e6c</a></strong>

<div>

<span>by Endi S. Dewata</span>

<i>at 2020-10-05T15:04:17-05:00</i>

</div>

<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Merge ICertificateRepository to CertificateRepository

</pre>

</li>

<li>

<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/c74a8763f621878186bb22c4aa61be9ea8374685">c74a8763</a></strong>

<div>

<span>by Endi S. Dewata</span>

<i>at 2020-10-05T16:39:08-05:00</i>

</div>

<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Clean up Configurator.updateNextRanges()

</pre>

</li>

<li>

<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/0ac70565912286f5c4a0927f16880b52e64b3796">0ac70565</a></strong>

<div>

<span>by Endi S. Dewata</span>

<i>at 2020-10-05T17:48:39-05:00</i>

</div>

<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Clean up TPSInstaller.configureCAConnector()

The unused cainfo.select has been removed.

</pre>

</li>

<li>

<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/8a7dff2c23d90505a3762b1083058e7a3fc7d35f">8a7dff2c</a></strong>

<div>

<span>by Endi S. Dewata</span>

<i>at 2020-10-05T17:48:49-05:00</i>

</div>

<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Clean up TPSInstaller.configureTKSConnector()

The unused tksinfo.select has been removed.

</pre>

</li>

<li>

<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/1780884e6b96ac0bb518bd3b37b66f06aa693cf8">1780884e</a></strong>

<div>

<span>by Endi S. Dewata</span>

<i>at 2020-10-05T17:49:09-05:00</i>

</div>

<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Clean up TPSInstaller.configureKRAConnector()

The unused krainfo.select has been removed.

</pre>

</li>

<li>

<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/faf0f928418bab6dee9fceb83817069116154742">faf0f928</a></strong>

<div>

<span>by Endi S. Dewata</span>

<i>at 2020-10-05T18:29:39-05:00</i>

</div>

<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Remove unused subsystem.count

</pre>

</li>

<li>

<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/c5edf12e5c9076cb574db144df8f18563960235f">c5edf12e</a></strong>

<div>

<span>by Endi S. Dewata</span>

<i>at 2020-10-05T19:33:41-05:00</i>

</div>

<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Clean up Configurator.loadKeyPair()

The Configurator.loadKeyPair() has been modified to take

an existing X509Certificate object.

</pre>

</li>

<li>

<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/ec0491639865b73a7a82387ca26ad5c196c5559f">ec049163</a></strong>

<div>

<span>by Endi S. Dewata</span>

<i>at 2020-10-05T19:36:00-05:00</i>

</div>

<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Clean up Configurator.createECCKeyPair()

The Configurator.createECCKeyPair() has been modified to

use the default curve name if not provided.

</pre>

</li>

<li>

<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/b687119d803e45305c7af5b6b7bdaf4e1937c9c6">b687119d</a></strong>

<div>

<span>by Endi S. Dewata</span>

<i>at 2020-10-05T19:36:42-05:00</i>

</div>

<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Clean up Configurator.createRSAKeyPair()

The Configurator.createRSAKeyPair() has been modified to

use the default key size if not provided.

</pre>

</li>

<li>

<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/e711488a4ce22490738e4d14f1d7b2b81f39d9e5">e711488a</a></strong>

<div>

<span>by Endi S. Dewata</span>

<i>at 2020-10-05T19:37:45-05:00</i>

</div>

<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Replace Configurator.processKeyPair()

The Configurator.processKeyPair() has been replaced with a

direct call to loadKeyPair() or createKeyPair() depending

on the availability of the certificate.

</pre>

</li>

<li>

<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/c54f111367a9d3cdcd09110a46717058390fb9ea">c54f1113</a></strong>

<div>

<span>by 06shalini</span>

<i>at 2020-10-06T12:06:55+05:30</i>

</div>

<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Fixed nighly pipeline run by fixing stable package versions (#3344)

Signed-off-by: Shalini Khandelwal <skhandel@redhat.com>

Co-authored-by: Shalini Khandelwal <skhandel@redhat.com></pre>

</li>

<li>

<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/bd2a76543107212331d4dc7eeb6a5d723831f001">bd2a7654</a></strong>

<div>

<span>by Endi S. Dewata</span>

<i>at 2020-10-06T08:48:51-05:00</i>

</div>

<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Remove redundant Cert.mSubsystem

</pre>

</li>

<li>

<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/1147bc6edfa2c96887fa51780fdb00102f30bbd8">1147bc6e</a></strong>

<div>

<span>by Endi S. Dewata</span>

<i>at 2020-10-06T08:48:52-05:00</i>

</div>

<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Refactor Configurator.generateCertRequest()

The Configurator.generateCertRequest() has been converted

into createCertRequest() which returns the certificate request

data.

</pre>

</li>

<li>

<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/8b31aa718077bcfce2a6416329f934119a2734f6">8b31aa71</a></strong>

<div>

<span>by Endi S. Dewata</span>

<i>at 2020-10-06T08:48:53-05:00</i>

</div>

<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Refactor Configurator.configRemoteCert()

The Configurator.configRemoteCert() has been converted into

createRemoteCert() that takes a list of DNS names for SAN

extension.

</pre>

</li>

<li>

<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/a426b8001a0a7a4d141e3ff056134e05f2df5009">a426b800</a></strong>

<div>

<span>by Endi S. Dewata</span>

<i>at 2020-10-06T08:48:54-05:00</i>

</div>

<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Replace Configurator.generateRemoteCert()

The Configurator.generateRemoteCert() has been replaced with

a direct call to createRemoteCert().

</pre>

</li>

<li>

<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/2f00efb66e8d610c0485bf9131a6840c52d1b208">2f00efb6</a></strong>

<div>

<span>by Endi S. Dewata</span>

<i>at 2020-10-06T08:48:55-05:00</i>

</div>

<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Refactor CAConfigurator.generateLocalCert()

The CAConfigurator.generateLocalCert() has been converted

into createLocalCert() that returns an X509CertImpl object.

</pre>

</li>

<li>

<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/2ed9adb51dc3a11b6c6963a8ffb6a208f6f62aab">2ed9adb5</a></strong>

<div>

<span>by Endi S. Dewata</span>

<i>at 2020-10-06T08:48:56-05:00</i>

</div>

<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Refactor Configurator.generateCert()

The Configurator.generateCert() has been converted into

createCert() that returns an X509CertImpl object.

</pre>

</li>

<li>

<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/74f4897ea931429fdeed56967a7ca9b4472d71cc">74f4897e</a></strong>

<div>

<span>by Endi S. Dewata</span>

<i>at 2020-10-06T08:48:58-05:00</i>

</div>

<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Remove unused Cert.mType

</pre>

</li>

<li>

<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/78d8f1152b15eb38fae5d62c08f6eaf0376a132a">78d8f115</a></strong>

<div>

<span>by Endi S. Dewata</span>

<i>at 2020-10-06T08:48:59-05:00</i>

</div>

<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Refactor Configurator.loadCert()

The code that loads the cert and request data from CS.cfg

has been moved out of Configurator.loadCert().

</pre>

</li>

<li>

<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/2b165d8e6606cf2687b9a91a13d95d408afedd24">2b165d8e</a></strong>

<div>

<span>by Endi S. Dewata</span>

<i>at 2020-10-06T08:49:00-05:00</i>

</div>

<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Refactor Configurator.processCert()

The Configurator.processCert() has been modified to take

an X509Certificate object.

</pre>

</li>

<li>

<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/838b1f5e2ca61ec51f66fc2f40f374e350abf5bb">838b1f5e</a></strong>

<div>

<span>by Endi S. Dewata</span>

<i>at 2020-10-06T08:58:43-05:00</i>

</div>

<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Refactor CAConfigurator.updateLocalRequest()

The CAConfigurator.updateLocalRequest() has been modified to

take an IRequest object instead of a RequestId object such

that it doesn't need to search for the request object in the

request queue.

</pre>

</li>

<li>

<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/5fb0b660b6a4493ad91e19e493710c02cd8b9f72">5fb0b660</a></strong>

<div>

<span>by Endi S. Dewata</span>

<i>at 2020-10-06T08:58:43-05:00</i>

</div>

<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Replace CertUtils.createLocalCert()

The CertUtils.createLocalCert() has been replaced with

a direct call to createCertRecord().

</pre>

</li>

<li>

<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/e22143e248735c0f573a747351dce32eeda35198">e22143e2</a></strong>

<div>

<span>by Endi S. Dewata</span>

<i>at 2020-10-06T08:58:44-05:00</i>

</div>

<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Clean up CAConfigurator.updateLocalRequest()

</pre>

</li>

<li>

<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/090c2a66fee40cad1c9a7d07c520c2f39960d975">090c2a66</a></strong>

<div>

<span>by Endi S. Dewata</span>

<i>at 2020-10-06T08:58:45-05:00</i>

</div>

<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Refactored CertUtils.createLocalRequest()

The CertUtils.createLocalRequest() has been converted

into initLocalRequest() that takes an IRequest object.

</pre>

</li>

<li>

<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/2ec60d4a15316fecb2fb4c865cf55e5415a2c79f">2ec60d4a</a></strong>

<div>

<span>by Endi S. Dewata</span>

<i>at 2020-10-06T08:58:46-05:00</i>

</div>

<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Replace CAConfigurator.createRequest()

The CAConfigurator.createRequest() has been replaced

with direct calls to IRequestQueue.newRequest() and

CertUtils.initLocalRequest().

</pre>

</li>

<li>

<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/51a2d0782f78e864828bb1f0ba65a04cf094b2e8">51a2d078</a></strong>

<div>

<span>by Dinesh Prasanth M K</span>

<i>at 2020-10-07T11:33:01-04:00</i>

</div>

<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">GH issues migration cleanup 1

This patch cleansup code, that refers to pagure tickets,

to point to the new GH issue.

Signed-off-by: Dinesh Prasanth M K <dmoluguw@redhat.com>

</pre>

</li>

<li>

<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/8e16088f486b0e16d6633b8266834f81c8f16ef7">8e16088f</a></strong>

<div>

<span>by Dinesh Prasanth M K</span>

<i>at 2020-10-07T13:24:52-04:00</i>

</div>

<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Update pkispawn man page with instructions to dscreate

This patch updates pkispawn's man page with instructions

to install a DS instance using dscreate.

Partly resolves: bz#1656772

Signed-off-by: Dinesh Prasanth M K <dmoluguw@redhat.com>

</pre>

</li>

<li>

<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/15e78c27aa023dd9515eb2c680b459dc297f1f70">15e78c27</a></strong>

<div>

<span>by Dinesh Prasanth M K</span>

<i>at 2020-10-07T13:24:52-04:00</i>

</div>

<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Fix angle brackets in pkispawn man page

This patch:

- Fixes issue with angle brackets in pkispawn man page

- Removes obsolete DS specific information from pkispawn man page

Signed-off-by: Dinesh Prasanth M K <dmoluguw@redhat.com>

</pre>

</li>

<li>

<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/67ac57cd6eef19e765b46a589f39f77b65bbd16b">67ac57cd</a></strong>

<div>

<span>by Endi S. Dewata</span>

<i>at 2020-10-07T14:10:42-05:00</i>

</div>

<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Refactor Configurator.processCert()

The Configurator.processCert() has been modified to

take a Cert object that contains the cert info.

</pre>

</li>

<li>

<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/2a95560b722fe03215defb20f7f2ab520507ea5d">2a95560b</a></strong>

<div>

<span>by Endi S. Dewata</span>

<i>at 2020-10-07T14:10:42-05:00</i>

</div>

<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Add PKIDeployer.finalize_subsystem()

The code that finalizes the configuration parameters in

Configurator.finalizeConfiguration() has been moved into

PKIDeployer.finalize_subsystem().

</pre>

</li>

<li>

<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/b991a22549a189fe3d7af88bf22d087462cf869c">b991a225</a></strong>

<div>

<span>by Endi S. Dewata</span>

<i>at 2020-10-07T14:10:42-05:00</i>

</div>

<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Remove unused FinalizeConfigRequest.importSharedSecret

</pre>

</li>

<li>

<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/c279c652445793f76f5f5b13935be1cfe03c7926">c279c652</a></strong>

<div>

<span>by Endi S. Dewata</span>

<i>at 2020-10-07T14:10:42-05:00</i>

</div>

<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Remove TPSConfigurator.getSharedSecret()

The code that configures conn.tks1.tksSharedSymKeyName

in TPSConfigurator.getSharedSecret() has been moved into

PKIDeployer.import_shared_secret().

</pre>

</li>

<li>

<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/53e305c134e3838a12a6d034bfe188ab7e2e1b3f">53e305c1</a></strong>

<div>

<span>by Christina Fu</span>

<i>at 2020-10-08T09:20:33-07:00</i>

</div>

<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Bug1875563-add profile caAuditSigningCert

This patch will revert the previously added IPA specific KRA storage

and transport cert prorfiles, as it turned out that they just need

generic KRA storage and transport cert profiles, which could be

fulfilled by using the following two existing profiles

  caStorageCert.cfg

  caTransportCert.cfg

In addition, a caAuditSigningCert profile is added, although I find

a misleading profile named caSignedLogCert.cfg  that was intended for

the use.  I disabled caSignedLogCert.cfg instead.

I also removed the SHA1 algorithms from all the *storage* and *audit*

profiles while I'm at it.

The upgrade scripts only adds the new profile caAuditSigningCert.  It

does not modify existing profiles or remove those two IPA specific

ones.

fixes https://bugzilla.redhat.com/show_bug.cgi?id=1875563

</pre>

</li>

<li>

<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/ec1765649d6dc354d2e51abc72c3aa5651e16f4c">ec176564</a></strong>

<div>

<span>by Endi S. Dewata</span>

<i>at 2020-10-08T11:42:30-05:00</i>

</div>

<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Merge IPublisherProcessor into PublisherProcessor

</pre>

</li>

<li>

<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/3e923404bccf71773a92e833dd062736ef1b0b50">3e923404</a></strong>

<div>

<span>by Endi S. Dewata</span>

<i>at 2020-10-08T11:42:30-05:00</i>

</div>

<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Remove unused CMSEngine.upgradeConfig()

</pre>

</li>

<li>

<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/293c5e8aac9e866d0caedb2f9d0c5983e1e94ab7">293c5e8a</a></strong>

<div>

<span>by Endi S. Dewata</span>

<i>at 2020-10-08T11:42:30-05:00</i>

</div>

<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Remove unused Upgrade class

</pre>

</li>

<li>

<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/4fba2d34134985ee7c1648d52eeea0244669caa4">4fba2d34</a></strong>

<div>

<span>by Endi S. Dewata</span>

<i>at 2020-10-08T11:42:30-05:00</i>

</div>

<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Move GetCRL to pki-ca

</pre>

</li>

<li>

<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/9fdad1cb8e81440736bf05e6eb65c6eb03c50a64">9fdad1cb</a></strong>

<div>

<span>by Endi S. Dewata</span>

<i>at 2020-10-08T11:42:30-05:00</i>

</div>

<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Move DisplayCRL to pki-ca

</pre>

</li>

<li>

<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/9d5c48508a67d7a97fff226e4a71dba8ee805a93">9d5c4850</a></strong>

<div>

<span>by Endi S. Dewata</span>

<i>at 2020-10-08T11:42:30-05:00</i>

</div>

<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Move GetInfo to pki-ca

</pre>

</li>

<li>

<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/eb9b36e5c19511648212b01b8b8ba36ee3738465">eb9b36e5</a></strong>

<div>

<span>by Endi S. Dewata</span>

<i>at 2020-10-08T11:42:30-05:00</i>

</div>

<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Move UpdateDir to pki-ca

</pre>

</li>

<li>

<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/23f7f9bd395b52b022c88c28430ecfb5a1395652">23f7f9bd</a></strong>

<div>

<span>by Endi S. Dewata</span>

<i>at 2020-10-08T11:42:30-05:00</i>

</div>

<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Move CrlCachePrettyPrint to pki-ca

</pre>

</li>

<li>

<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/5fc92a21cccb6698e6ad290154f9c53710a4deb3">5fc92a21</a></strong>

<div>

<span>by Endi S. Dewata</span>

<i>at 2020-10-08T11:42:30-05:00</i>

</div>

<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Move CMSAuthorityKeyIdentifierExtension to pki-ca

</pre>

</li>

<li>

<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/7366502e5f5b0be0fae2956fe21ab31425d4b1a9">7366502e</a></strong>

<div>

<span>by Endi S. Dewata</span>

<i>at 2020-10-08T11:42:30-05:00</i>

</div>

<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Move CMSCRLNumberExtension to pki-ca

</pre>

</li>

<li>

<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/a38d11e53462001ac525ad5bd11207a9cb23da4c">a38d11e5</a></strong>

<div>

<span>by Endi S. Dewata</span>

<i>at 2020-10-08T11:42:30-05:00</i>

</div>

<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Move CMSDeltaCRLIndicatorExtension to pki-ca

</pre>

</li>

<li>

<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/10bad6ab4b3f3bf13b914a76e4e9fdcd27405f3e">10bad6ab</a></strong>

<div>

<span>by Endi S. Dewata</span>

<i>at 2020-10-08T11:44:32-05:00</i>

</div>

<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Rename pki-server <subsystem>-range-update to <subsystem>-range-request

</pre>

</li>

<li>

<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/ac7174557ea5aa3d1e6638612fdb343c1e95fb82">ac717455</a></strong>

<div>

<span>by Endi S. Dewata</span>

<i>at 2020-10-08T11:46:23-05:00</i>

</div>

<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Add SubsystemRangeUpdateCLI

The code that updates ranges in Configurator.updateNextRanges()

has been copied into SubsystemRangeUpdateCLI.

</pre>

</li>

<li>

<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/a6da401c3ad7530c58bbd60a04659b24804f39ce">a6da401c</a></strong>

<div>

<span>by Endi S. Dewata</span>

<i>at 2020-10-08T11:47:10-05:00</i>

</div>

<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Add pki-server <subsystem>-range-update

The pki-server <subsystem>-range-update has been added to

call SubsystemRangeUpdateCLI from command line.

</pre>

</li>

<li>

<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/2c24f572e00e83a262f74d2187aac26e28a85636">2c24f572</a></strong>

<div>

<span>by Endi S. Dewata</span>

<i>at 2020-10-08T11:47:32-05:00</i>

</div>

<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Add CACertRemoveCLI

The code that removes the CA signing cert record in

Configurator.deleteSigningRecord() has been copied

into CACertRemoveCLI.

</pre>

</li>

<li>

<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/e72efb3a07ffec1b9c9e2d0d89173dfb025b984f">e72efb3a</a></strong>

<div>

<span>by Endi S. Dewata</span>

<i>at 2020-10-08T11:47:32-05:00</i>

</div>

<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Add pki-server ca-cert-del

The pki-server ca-cert-del has been added to call

CACertRemoveCLI from command line.

</pre>

</li>

<li>

<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/f5e688063a3553a398f1d315da561346f646707c">f5e68806</a></strong>

<div>

<span>by Endi S. Dewata</span>

<i>at 2020-10-08T14:14:57-05:00</i>

</div>

<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Add LDAPConfigMonitor

The LDAPConfigMonitor has been added for LDAPDatabase

to monitor ACME config properties stored in the database

using persistent search.

The ACMEEnableService and ACMEDisableService have been

modified to update the 'enabled' config property in the

database.

The ACMERequestFilter has been modified to use the `enabled`

config property from the database. However, if the property

is not set in the database, the filter will use the property

from the config file instead.

</pre>

</li>

<li>

<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/2ef15dc8aad01b51b893ff62c996a43666e45a90">2ef15dc8</a></strong>

<div>

<span>by Endi S. Dewata</span>

<i>at 2020-10-08T18:13:03-05:00</i>

</div>

<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Clean up CAConfigurator.finalizeConfiguration() (part 1)

The code that removes the CA signing cert record in

CAConfigurator.finalizeConfiguration() has been moved

into configuration.py.

</pre>

</li>

<li>

<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/d739fac23a0b7e8f1d501a59211cdafe59fa1152">d739fac2</a></strong>

<div>

<span>by Endi S. Dewata</span>

<i>at 2020-10-08T18:13:03-05:00</i>

</div>

<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Clean up CAConfigurator.finalizeConfiguration() (part 2)

The code that enables the profile subsystem in

CAConfigurator.finalizeConfiguration() has been moved

into configuration.py.

</pre>

</li>

<li>

<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/ab091c5a5d8f5ae1e2736f2b73760d3d3513baaa">ab091c5a</a></strong>

<div>

<span>by Endi S. Dewata</span>

<i>at 2020-10-08T18:13:03-05:00</i>

</div>

<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Clean up CAConfigurator.finalizeConfiguration() (part 3)

The code that configures ca.crl.MasterCRL.startingCrlNumber

in CAConfigurator.finalizeConfiguration() has been moved into

configuration.py.

</pre>

</li>

<li>

<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/3faa3866056f744c1568835953c5494e7c2b90f2">3faa3866</a></strong>

<div>

<span>by Endi S. Dewata</span>

<i>at 2020-10-08T18:13:03-05:00</i>

</div>

<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Clean up CAConfigurator.finalizeConfiguration() (part 4)

The code that disables CRL caching and generation in

CAConfigurator.finalizeConfiguration() has been moved

into configuration.py.

</pre>

</li>

<li>

<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/49c120960a198c79360ec24aeb6d99d965830057">49c12096</a></strong>

<div>

<span>by Endi S. Dewata</span>

<i>at 2020-10-08T18:13:03-05:00</i>

</div>

<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Clean up CAConfigurator.finalizeConfiguration() (part 5)

The code that configures security domain master in

CAConfigurator.finalizeConfiguration() has been moved

into configuration.py.

</pre>

</li>

<li>

<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/26c347a856a258746c46061b5b3dcecf3d7b1bf7">26c347a8</a></strong>

<div>

<span>by Endi S. Dewata</span>

<i>at 2020-10-08T18:13:03-05:00</i>

</div>

<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Clean up CAConfigurator.finalizeConfiguration() (part 6)

The code that updates the range numbers in CAConfigurator and

KRAConfigurator.finalizeConfiguration() has been moved into

configuration.py.

</pre>

</li>

<li>

<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/a175d38544cb412fdf2a9c58f6f6d11f4160df52">a175d385</a></strong>

<div>

<span>by Christina Fu</span>

<i>at 2020-10-09T09:20:45-07:00</i>

</div>

<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Bug1874595-(add missing patch for) TPS Server-side keygen support for id only tokens

This patch relates to Bug 1494591, where the fix was missing a patch.

It makes it so that as long as one keyType has serverKeyGen enabled then

all key tyes under the same tps profile are consideered server-side

keygen.

Code submitted by RHCS-MAINT

fixes https://bugzilla.redhat.com/show_bug.cgi?id=1874595

</pre>

</li>

<li>

<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/101c5b765cb4f3983b9cc199dd03771e75cf56c0">101c5b76</a></strong>

<div>

<span>by Endi S. Dewata</span>

<i>at 2020-10-09T11:34:39-05:00</i>

</div>

<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Move ListCerts to pki-ca

</pre>

</li>

<li>

<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/bf2b7b4058f1865dae13fa9b99f478f3a6be974d">bf2b7b40</a></strong>

<div>

<span>by Endi S. Dewata</span>

<i>at 2020-10-09T11:34:39-05:00</i>

</div>

<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Move SrchCerts to pki-ca

</pre>

</li>

<li>

<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/32960d12a0dd694d506a5fe79345b17b0ab6f202">32960d12</a></strong>

<div>

<span>by Endi S. Dewata</span>

<i>at 2020-10-09T11:34:39-05:00</i>

</div>

<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Move Monitor to pki-ca

</pre>

</li>

<li>

<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/a1095befc504ff11994e2d94d6632df98cc03f38">a1095bef</a></strong>

<div>

<span>by Endi S. Dewata</span>

<i>at 2020-10-09T11:34:39-05:00</i>

</div>

<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Move CRLRepository to pki-ca

</pre>

</li>

<li>

<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/80d49141e3db448b1e2aae0451141b828b9aa935">80d49141</a></strong>

<div>

<span>by Endi S. Dewata</span>

<i>at 2020-10-09T11:34:39-05:00</i>

</div>

<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Move UniqueSubjectName to pki-ca

</pre>

</li>

<li>

<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/74de65a9c1800342d80e1c6ac7db29c5ad432c75">74de65a9</a></strong>

<div>

<span>by Endi S. Dewata</span>

<i>at 2020-10-09T11:34:39-05:00</i>

</div>

<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Move UniqueSubjectNameConstraints to pki-ca

</pre>

</li>

<li>

<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/3c5df519f2658504abbd493959da19615a713e2c">3c5df519</a></strong>

<div>

<span>by Endi S. Dewata</span>

<i>at 2020-10-09T11:34:39-05:00</i>

</div>

<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Move org.dogtagpki.legacy.server.policy.extensions to pki-ca

</pre>

</li>

<li>

<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/d7776c456d7bc2d0071852037a07e0a799c8ec49">d7776c45</a></strong>

<div>

<span>by Endi S. Dewata</span>

<i>at 2020-10-09T11:34:39-05:00</i>

</div>

<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Move org.dogtagpki.legacy.server.policy.constraints to pki-ca

</pre>

</li>

<li>

<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/f09342d55a161a3b91a2dd59ce313be42fa48681">f09342d5</a></strong>

<div>

<span>by Endi S. Dewata</span>

<i>at 2020-10-09T11:36:13-05:00</i>

</div>

<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Remove ICertificateAuthority.getCRLRepository()

The ICertificateAuthority.getCRLRepository() has been replaced

with direct calls to CAEngine.getCRLRepository().

</pre>

</li>

<li>

<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/abeed4220840cb6bacf4d046bf6e8da1e8328e26">abeed422</a></strong>

<div>

<span>by Endi S. Dewata</span>

<i>at 2020-10-09T11:36:15-05:00</i>

</div>

<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Merge ICRLRepository into CRLRepository

</pre>

</li>

<li>

<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/e6588ad4393d7f4e307774b05f0efabfa0a6b98f">e6588ad4</a></strong>

<div>

<span>by Endi S. Dewata</span>

<i>at 2020-10-09T11:36:17-05:00</i>

</div>

<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Remove ICertificateAuthority.getCRLIssuingPoints()

The ICertificateAuthority.getCRLIssuingPoints() has been

replaced with direct calls to CAEngine.getCRLIssuingPoints().

</pre>

</li>

<li>

<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/98d33c5b51263a0e1c017de8027b871228f6b022">98d33c5b</a></strong>

<div>

<span>by Endi S. Dewata</span>

<i>at 2020-10-09T11:36:18-05:00</i>

</div>

<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Remove ICertificateAuthority.getCRLIssuingPoint()

The ICertificateAuthority.getCRLIssuingPoint() has been

replaced with direct calls to CAEngine.getCRLIssuingPoint().

</pre>

</li>

<li>

<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/cb3b51f1931c8683cd1ba76e788e5b4f801a0abe">cb3b51f1</a></strong>

<div>

<span>by Endi S. Dewata</span>

<i>at 2020-10-09T11:36:20-05:00</i>

</div>

<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Replace ICertificateAuthority.getCertificateRepository()

Some of the ICertificateAuthority.getCertificateRepository()

invocations have been replaced with direct calls to

CAEngine.getCertificateRepository().

</pre>

</li>

<li>

<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/1ba298dcc2889d715f41d78cb8a5dfa0eb844ef4">1ba298dc</a></strong>

<div>

<span>by Endi S. Dewata</span>

<i>at 2020-10-09T12:34:14-05:00</i>

</div>

<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Move AddCAServlet to pki-ocsp

</pre>

</li>

<li>

<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/47ab2a1ec0bcffd06e977ea8aabbe804e496aa31">47ab2a1e</a></strong>

<div>

<span>by Endi S. Dewata</span>

<i>at 2020-10-09T12:34:16-05:00</i>

</div>

<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Move AddCRLServlet to pki-ocsp

</pre>

</li>

<li>

<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/96a7c8a72b7af7fe931cee40518df4b0d3870ec0">96a7c8a7</a></strong>

<div>

<span>by Endi S. Dewata</span>

<i>at 2020-10-09T12:34:17-05:00</i>

</div>

<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Move CheckCertServlet to pki-ocsp

</pre>

</li>

<li>

<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/bdef9580707423f11b8e8db38981b421029453f4">bdef9580</a></strong>

<div>

<span>by Endi S. Dewata</span>

<i>at 2020-10-09T12:34:18-05:00</i>

</div>

<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Move ListCAServlet to pki-ocsp

</pre>

</li>

<li>

<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/329468b62a879046e748ba4a83e40c816e98c491">329468b6</a></strong>

<div>

<span>by Endi S. Dewata</span>

<i>at 2020-10-09T12:34:19-05:00</i>

</div>

<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Move RemoveCAServlet to pki-ocsp

</pre>

</li>

<li>

<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/c834e3723cb29f0b9f527dabda8f4738b92a982d">c834e372</a></strong>

<div>

<span>by Endi S. Dewata</span>

<i>at 2020-10-09T12:34:20-05:00</i>

</div>

<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Move com.netscape.certsrv.logging.event to pki-server

</pre>

</li>

<li>

<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/020ccefb39e6e0b483a44ef1f37a4844691c8c35">020ccefb</a></strong>

<div>

<span>by Endi S. Dewata</span>

<i>at 2020-10-09T12:34:22-05:00</i>

</div>

<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Move org.dogtagpki.legacy.policy to pki-server

</pre>

</li>

<li>

<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/9db1146a7249ec1363b72effaa73e39364a74962">9db1146a</a></strong>

<div>

<span>by Endi S. Dewata</span>

<i>at 2020-10-09T12:34:23-05:00</i>

</div>

<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Move IConnector to pki-server

</pre>

</li>

<li>

<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/f99b426de69ca98bb498e537553424de2d1ad9eb">f99b426d</a></strong>

<div>

<span>by Endi S. Dewata</span>

<i>at 2020-10-09T12:34:25-05:00</i>

</div>

<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Move IService to pki-server

</pre>

</li>

<li>

<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/410e1c60dd9f2e5be251d212cc58d930043ccbb0">410e1c60</a></strong>

<div>

<span>by Endi S. Dewata</span>

<i>at 2020-10-09T12:34:26-05:00</i>

</div>

<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Move request interfaces to pki-server

</pre>

</li>

<li>

<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/50333404a03d912ebb0ed5172f8d3cec3a279f9e">50333404</a></strong>

<div>

<span>by Endi S. Dewata</span>

<i>at 2020-10-09T13:06:55-05:00</i>

</div>

<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Move GeneralNamesAsConstraintsConfig to a new file

</pre>

</li>

<li>

<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/47a1d84b8a42bc6ab33cb575aaf6bc225419d663">47a1d84b</a></strong>

<div>

<span>by Endi S. Dewata</span>

<i>at 2020-10-09T13:06:57-05:00</i>

</div>

<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Move GeneralNamesConfig to a new file

</pre>

</li>

<li>

<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/6f1ea9efc1bbc113a029b221d1da41924a40ce6d">6f1ea9ef</a></strong>

<div>

<span>by Endi S. Dewata</span>

<i>at 2020-10-09T13:06:58-05:00</i>

</div>

<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Move GeneralNameConfig to a new file

</pre>

</li>

<li>

<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/872ab4f8515e21b85483a0df80d071da3d7b9861">872ab4f8</a></strong>

<div>

<span>by Endi S. Dewata</span>

<i>at 2020-10-09T13:07:00-05:00</i>

</div>

<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Move GeneralNameAsConstraintsConfig to a new file

</pre>

</li>

<li>

<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/413d70cc14aeb718fca8e7530b841107a1ddcc7c">413d70cc</a></strong>

<div>

<span>by Endi S. Dewata</span>

<i>at 2020-10-09T13:07:02-05:00</i>

</div>

<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Move SubjAltNameGN to a new file

</pre>

</li>

<li>

<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/f9c4bb933930f5fc7c03de3034dff094c16dc3d1">f9c4bb93</a></strong>

<div>

<span>by Endi S. Dewata</span>

<i>at 2020-10-09T13:07:03-05:00</i>

</div>

<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Move PolicyInstance to a new file

</pre>

</li>

<li>

<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/752cf6489e73242f7f89b846aa3c9cd6bcea22ce">752cf648</a></strong>

<div>

<span>by Endi S. Dewata</span>

<i>at 2020-10-09T13:07:05-05:00</i>

</div>

<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Move RegisteredPolicy to a new file

</pre>

</li>

<li>

<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/7963fdfe58994d393f0311654ca156e1addd2f94">7963fdfe</a></strong>

<div>

<span>by Endi S. Dewata</span>

<i>at 2020-10-09T13:07:07-05:00</i>

</div>

<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Move PredicateTokenizer to a new file

</pre>

</li>

<li>

<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/bd646873f48e88378891738cb63beae9e651cdac">bd646873</a></strong>

<div>

<span>by Endi S. Dewata</span>

<i>at 2020-10-09T13:07:09-05:00</i>

</div>

<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Move ExpressionComps to a new file

</pre>

</li>

<li>

<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/9332e4f64f3895edcabc428a5f28ed06dfc6a1c1">9332e4f6</a></strong>

<div>

<span>by Endi S. Dewata</span>

<i>at 2020-10-09T13:07:10-05:00</i>

</div>

<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Rename ICRLPublisher to CRLPublisher

</pre>

</li>

<li>

<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/e6e2a1e44bf108422d3f0029555d63242e3b711b">e6e2a1e4</a></strong>

<div>

<span>by Endi S. Dewata</span>

<i>at 2020-10-13T11:15:32-05:00</i>

</div>

<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Remove CryptoUtil.sortCertificateChain()

The CryptoUtil.sortCertificateChain() has been replaced with

Cert.sortCertificateChain().

</pre>

</li>

<li>

<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/aa480286a469559878a45cdb44ccd42fba42cf2d">aa480286</a></strong>

<div>

<span>by Endi S. Dewata</span>

<i>at 2020-10-13T11:15:37-05:00</i>

</div>

<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Merge ICertUserDBAuthentication into CertUserDBAuthentication

</pre>

</li>

<li>

<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/e0d5d37a070a1d653cec7de8f2436cb8d0fe2b51">e0d5d37a</a></strong>

<div>

<span>by Endi S. Dewata</span>

<i>at 2020-10-13T11:15:42-05:00</i>

</div>

<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Merge IGroup to Group

</pre>

</li>

<li>

<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/2df76f4849cab2b3b888fcc0443d4b53a443d286">2df76f48</a></strong>

<div>

<span>by Endi S. Dewata</span>

<i>at 2020-10-13T11:15:43-05:00</i>

</div>

<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Merge IGroupConstants into Group

</pre>

</li>

<li>

<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/c4042744a6857a9714817758613402ce556663d7">c4042744</a></strong>

<div>

<span>by Endi S. Dewata</span>

<i>at 2020-10-13T11:15:46-05:00</i>

</div>

<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Merge IUser into User

</pre>

</li>

<li>

<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/ad8bd463999ac7c938e7c4686c8b5c154b1c78ea">ad8bd463</a></strong>

<div>

<span>by Endi S. Dewata</span>

<i>at 2020-10-13T11:18:39-05:00</i>

</div>

<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Merge IUserConstants into User

</pre>

</li>

<li>

<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/7ebf8d786067634c231dd6fb5efcc007d54614b1">7ebf8d78</a></strong>

<div>

<span>by Endi S. Dewata</span>

<i>at 2020-10-13T16:06:40-05:00</i>

</div>

<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Clean up LDAPDatabase

</pre>

</li>

<li>

<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/0619f5a1b5092d3176163e52e55970bb8cd48052">0619f5a1</a></strong>

<div>

<span>by Endi S. Dewata</span>

<i>at 2020-10-13T16:06:41-05:00</i>

</div>

<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Clean up LDAPRealm

</pre>

</li>

<li>

<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/f589afad4c0623010b5a6d53e83fc788aecc92b2">f589afad</a></strong>

<div>

<span>by Endi S. Dewata</span>

<i>at 2020-10-13T16:06:42-05:00</i>

</div>

<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Clean up LDAPConfigMonitor

</pre>

</li>

<li>

<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/304040d5feac191316bbddf3ff86152ca945aa5c">304040d5</a></strong>

<div>

<span>by Endi S. Dewata</span>

<i>at 2020-10-13T16:06:43-05:00</i>

</div>

<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Clean up create.ldif for DS realm

</pre>

</li>

<li>

<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/4f4e5a29879badcf8f501966806a290fd5139075">4f4e5a29</a></strong>

<div>

<span>by dpuniaredhat</span>

<i>at 2020-10-14T17:37:41+05:30</i>

</div>

<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">acme mvp test (#3352)

Adding automation to Deploy acme container on podman and openshift

1. Update existing acme test cases and add test cases

2. Adding test to deploy acme using podman with Persistent Database and run test cases

3. Adding acme deployment with nss_issuer

4. Adding test to delopy acme on openshift with Persistent Database

Signed-off-by: Deepak Punia <dpunia@redhat.com></pre>

</li>

<li>

<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/d765cd87fdab24576b422f8100f38bd6fb9ac00e">d765cd87</a></strong>

<div>

<span>by dpuniaredhat</span>

<i>at 2020-10-15T19:00:15+05:30</i>

</div>

<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Bugzilla 1874595 automation (#3355)

TPS - Server side key generation is not working for Identity only tokens

Signed-off-by: Deepak Punia <dpunia@redhat.com></pre>

</li>

<li>

<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/cb3f19b86f3d5e7632a0e8342bd548cc2de3f111">cb3f19b8</a></strong>

<div>

<span>by Endi S. Dewata</span>

<i>at 2020-10-15T09:53:40-05:00</i>

</div>

<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Add patternfly.min.css.map into ACME UI

</pre>

</li>

<li>

<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/8d96b89f03f59167356483164774d3b6c5bca564">8d96b89f</a></strong>

<div>

<span>by Endi S. Dewata</span>

<i>at 2020-10-15T09:54:12-05:00</i>

</div>

<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Clean up ACME UI

</pre>

</li>

<li>

<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/eb501630e0549a7720a9a84aa97bc148a224939b">eb501630</a></strong>

<div>

<span>by Endi S. Dewata</span>

<i>at 2020-10-15T09:54:13-05:00</i>

</div>

<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Add JSON encoder/decoder for User

</pre>

</li>

<li>

<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/8883e23d3df167d51536e62bb2c06ede0adb87de">8883e23d</a></strong>

<div>

<span>by Endi S. Dewata</span>

<i>at 2020-10-15T09:54:14-05:00</i>

</div>

<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Update LDAPRealm to generate PKIPrincipal

The LDAPRealm has been updated generate a PKIPrincipal

instead of a GenericPrincipal such that it can store

the User object.

</pre>

</li>

<li>

<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/d9607c2b4b7b14e3c183bd49d0944bcb17830bce">d9607c2b</a></strong>

<div>

<span>by Christina Fu</span>

<i>at 2020-10-15T17:02:24-07:00</i>

</div>

<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Bug1874600-TPS does not check token cuid on the user externalReg record during PIN reset

  RHCS-MAINT contribution

  This patch makes sure that if "tokenCUID" exists for the user reg record,

  pinReset operation would make sure that it mathes with the current

  tokne cuid;

  If the "tokenCUID" does not exisst in the user registration record

  then any token can be used for pinReset;

  fixes https://bugzilla.redhat.com/show_bug.cgi?id=1874600

</pre>

</li>

<li>

<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/b9edb38dd397f20ca35ef784709041be5df10d96">b9edb38d</a></strong>

<div>

<span>by Endi S. Dewata</span>

<i>at 2020-10-19T13:16:48-05:00</i>

</div>

<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Remove unused UGSubsystem.startup()

</pre>

</li>

<li>

<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/26e16da18957502469e95a7749a2eb8ce9cb40f6">26e16da1</a></strong>

<div>

<span>by Endi S. Dewata</span>

<i>at 2020-10-19T13:16:56-05:00</i>

</div>

<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Add hashCode() and equals() for DataCollection

</pre>

</li>

<li>

<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/aa6d7b086ac58e782862218e2710f204faed8e45">aa6d7b08</a></strong>

<div>

<span>by Endi S. Dewata</span>

<i>at 2020-10-19T13:19:15-05:00</i>

</div>

<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Add pki-server <subsystem>-group-find

The pki-server <subsystem>-group-find has been added to

list all groups directly from the database.

</pre>

</li>

<li>

<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/14244b72f7e26a797e422c308e76a0a19527cd04">14244b72</a></strong>

<div>

<span>by Endi S. Dewata</span>

<i>at 2020-10-19T14:43:47-05:00</i>

</div>

<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Add pki-server <subsystem>-group-member-find

The pki-server <subsystem>-group-member-find has been added

to list all members of a group directly from the database.

</pre>

</li>

<li>

<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/2c114ff26535143a20007a91f00468ad660efbbd">2c114ff2</a></strong>

<div>

<span>by Endi S. Dewata</span>

<i>at 2020-10-19T14:43:50-05:00</i>

</div>

<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Add pki-server <subsystem>-group-member-add

The pki-server <subsystem>-group-member-add has been added

to add a member into a group directly into the database.

</pre>

</li>

<li>

<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/033d320046a5c6e95600564a1476708b5ff1cd9e">033d3200</a></strong>

<div>

<span>by Endi S. Dewata</span>

<i>at 2020-10-19T14:43:50-05:00</i>

</div>

<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Move pkidbuser group configuration

The code that configures pkidbuser groups have been moved

into configuration.py.

</pre>

</li>

<li>

<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/2defedfdeae08c2481e7e06c542ea9a99db7856a">2defedfd</a></strong>

<div>

<span>by Endi S. Dewata</span>

<i>at 2020-10-19T15:28:00-05:00</i>

</div>

<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Fix cert validation in LDAPRealm

The LDAPRealm has been modified to validate the cert data

in addition to the cert ID.

</pre>

</li>

<li>

<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/5f4ed745bd456ee87df78b20e953bc82b91b1443">5f4ed745</a></strong>

<div>

<span>by Endi S. Dewata</span>

<i>at 2020-10-19T15:28:00-05:00</i>

</div>

<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Add PostgreSQLRealm

The PostgreSQLRealm has been added to define the ACME realm

using users and groups in PostgreSQL database.

</pre>

</li>

<li>

<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/fbf94d38410a3a448b15591c724d016b738f0284">fbf94d38</a></strong>

<div>

<span>by Endi S. Dewata</span>

<i>at 2020-10-19T15:28:00-05:00</i>

</div>

<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Update pki-server acme-realm

</pre>

</li>

<li>

<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/7f43a7120a68e6f8fb4a127adf76726deb0a253e">7f43a712</a></strong>

<div>

<span>by Endi S. Dewata</span>

<i>at 2020-10-19T15:28:00-05:00</i>

</div>

<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Add docs for PostgreSQLRealm

</pre>

</li>

<li>

<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/f1ce33fb774ccf2748b5b8b35098802ae4d56b34">f1ce33fb</a></strong>

<div>

<span>by Endi S. Dewata</span>

<i>at 2020-10-19T16:03:34-05:00</i>

</div>

<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Clean up realm doc

</pre>

</li>

<li>

<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/4d8520c74cbd4ef051bda789f163227a2f13f789">4d8520c7</a></strong>

<div>

<span>by Endi S. Dewata</span>

<i>at 2020-10-19T16:04:31-05:00</i>

</div>

<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Refactor UGSubsystem.addCertSubjectDN()

The UGSubsystem.addCertSubjectDN() has been converted into

addSeeAlso() which takes a user ID and the value of the

seeAlso attribute.

</pre>

</li>

<li>

<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/9badc0c0d05c16c5ebb8206fad3ec1c4f5de46db">9badc0c0</a></strong>

<div>

<span>by Endi S. Dewata</span>

<i>at 2020-10-19T16:06:34-05:00</i>

</div>

<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Refactor UGSubsystem.removeCertSubjectDN()

The UGSubsystem.removeCertSubjectDN() has been converted

into removeSeeAlso() that takes the user ID and the value

of the seeAlso attribute.

</pre>

</li>

<li>

<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/ea148d61048043980bdac4218ffaff8ea59d75a0">ea148d61</a></strong>

<div>

<span>by Endi S. Dewata</span>

<i>at 2020-10-19T16:14:10-05:00</i>

</div>

<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Add UGSubsystem.findUsersByKeyword()

The code that generates an LDAP filter to search users by

keyword has been moved into UGSubsystem.findUsersByKeyword().

</pre>

</li>

<li>

<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/a664613137b245e4d9ba38c91fff1aa8bb26d151">a6646131</a></strong>

<div>

<span>by Endi S. Dewata</span>

<i>at 2020-10-19T16:14:17-05:00</i>

</div>

<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Add JSON converter for UserData

</pre>

</li>

<li>

<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/d23b45b3d32a22461c134f7f2300b544d4dea972">d23b45b3</a></strong>

<div>

<span>by Endi S. Dewata</span>

<i>at 2020-10-19T16:14:17-05:00</i>

</div>

<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Add JSON converter for UserCollection

</pre>

</li>

<li>

<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/93b892a155bf9ac85c60dbd27a867565d9e24af8">93b892a1</a></strong>

<div>

<span>by Endi S. Dewata</span>

<i>at 2020-10-19T19:35:18-05:00</i>

</div>

<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Update PostgreSQLRealm to create PKIPrincipal

The PostgreSQLRealm has been modified to create a PKIPrincipal

which stores the User object instead of a GenericPrincipal which

stores only the username.

</pre>

</li>

<li>

<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/6c62d4b81db6fa04f95cc5a37037edfc94092660">6c62d4b8</a></strong>

<div>

<span>by Fraser Tweedale</span>

<i>at 2020-10-20T11:09:28+10:00</i>

</div>

<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">startup notification: add StartupNotifier interface

Add the StartupNotifier interface.  Update CMSEngine to invoke

.notifyReady() for each configured notifier when startup is

completed.

Loading of notifiers and a systemd notifier instance will be

implemented in subsequent commits.

Part of: https://pagure.io/dogtagpki/issue/1233

</pre>

</li>

<li>

<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/c452bdec6ac9a565edfe0e67f8ec02f219001ba7">c452bdec</a></strong>

<div>

<span>by Fraser Tweedale</span>

<i>at 2020-10-20T11:09:28+10:00</i>

</div>

<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">startup notification: initialise from CS.cfg

Initialise StartupNotifier instances configured in CS.cfg.  The

configuration scheme is:

  startupNotifiers.list=systemd,foo

  startupNotifiers.systemd.class=package.and.ClassName

  startupNotifiers.foo.class=com.netscape.cmscore.apps.FooNotifier

  startupNotifiers.foo.paramA=valueA

  startupNotifiers.foo.paramB=valueB

`startupNotifiers.list' gives a list of substore names, one for each

StartupNotifier instance.  The 'class' parameter of each substore

specifies the Java class name.  The config substore is passed to the

StartupNotifier.init() method.

Part of: https://pagure.io/dogtagpki/issue/1233

</pre>

</li>

<li>

<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/5c0a0c9da257253e628ad2f30d08b2909dac520b">5c0a0c9d</a></strong>

<div>

<span>by Fraser Tweedale</span>

<i>at 2020-10-20T11:09:28+10:00</i>

</div>

<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">startup notification: add pki-systemd jar

Implement SystemdStartupNotifier, which does not actually notify

systemd yet (this will be implemented in a subsequent commit).

Ship this class in its own jar.  The inclusion of this jar in the

pki-server package will be made conditional on an RPM macro in the

next commit.

Part of: https://pagure.io/dogtagpki/issue/1233

</pre>

</li>

<li>

<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/4f106e2be351a976fe4a5e04eb06aceb42026089">4f106e2b</a></strong>

<div>

<span>by Fraser Tweedale</span>

<i>at 2020-10-20T11:09:28+10:00</i>

</div>

<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">startup notification: make the systemd class optional

Add the `sdnotify` RPM bcond to make the SystemdStartupNotifier

class optional.  When enabled, it is supplied in a separate JAR

(part of the pki-server package), and the webapp symlink is added in

the pki-ca package.  It is enabled by default.

Note that on Fedora and presumably RHEL also, libsystemd.so is

always present.  sd_booted(3) can be used to determine whether pid 1

is systemd or not, so having a systemd notifier implementation

present doesn't imply that systemd must be used.

Nevertheless, it was requested to make this component optional.  So

here we are.

Part of: https://pagure.io/dogtagpki/issue/1233

</pre>

</li>

<li>

<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/1bc6a40cd1842046e4760137abb110be4d62d2ee">1bc6a40c</a></strong>

<div>

<span>by Fraser Tweedale</span>

<i>at 2020-10-20T11:09:28+10:00</i>

</div>

<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">startup notification: complete systemd notifier

Complete the implementation of SystemdStartupNotifier.  We use JNA

to bind to libsystemd.  The dependency on 'jna' package only occurs

when %{with sdnotify}.

The systemd unit template file is left alone, retaining Type=simple.

In order to enable systemd startup notification, you can override

the Type in the "drop-in" directory. For example, if the instance

name is 'pki-tomcat', write to the file:

  /etc/systemd/system/pki-tomcatd@pki-tomcat.service.d/notify.conf

the content:

  [Service]

  Type=notify

See systemd.unit(5) for more details.

Fixes: https://pagure.io/dogtagpki/issue/1233

</pre>

</li>

<li>

<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/ef08897797763bea86f656fb7cbc3c1de6cf7286">ef088977</a></strong>

<div>

<span>by Fraser Tweedale</span>

<i>at 2020-10-20T11:09:28+10:00</i>

</div>

<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">startup notification: load libsystemd in init()

In the SystemdStartupNotifier, in order to better handle errors load

the library in init() rather than as static class configuration.

This gives better control over when Dogtag attempts to load the

library, and how it can handle errors.

Part of: https://pagure.io/dogtagpki/issue/1233

</pre>

</li>

<li>

<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/592f412e762b3d88e9509691050cc865bd1d75cd">592f412e</a></strong>

<div>

<span>by Fraser Tweedale</span>

<i>at 2020-10-20T11:09:28+10:00</i>

</div>

<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">startup notification: return result to caller

Update the StartupNotifier interface to return a NotifyResult to the

caller.  The NotifyResult contains a success/failure enum and a

string message.  Update CMSEngine to interpret the NotifyResult and

log a message if appropriate.

The SystemdStartupNotifier no longer writes to stderr/stdout.  As a

result, there is no longer any ambiguity about which CMS subsystem a

failure occurred in.

Part of: https://pagure.io/dogtagpki/issue/1233

</pre>

</li>

<li>

<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/6f573ee1298d5d177bd912babdb205d5bef9a631">6f573ee1</a></strong>

<div>

<span>by jmagne</span>

<i>at 2020-10-19T18:26:57-07:00</i>

</div>

<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Enhancment to Bug 1858860 - TPS - Update Error Codes returned to client (CIW/ESC) to Match CS8. (#3361)

This enhancement allows config values to be used to test the unlikely error conditions addressed in the original bug:

To test one two scenarios, use these settings one at a time:

op.pinReset.testNoBeginMsg=false

op.pinReset.testUpdateDBFailure=false

The first one will test the error code returned when the beginOp message is missing when atempting

a pin Reset operation. The error returned should be error "4".

The second one will test if the update of the db for the token does not complete properly.

The error returned in this scenario should be "41".

The tpsclient utility can be used to test these two scenarios. Once again try them separately

because the first error will stop the pin reset procedure before the second scenario can even happen.</pre>

</li>

<li>

<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/8529ebe27ce349996a00ffa01c69cfbe6942c4ec">8529ebe2</a></strong>

<div>

<span>by Endi S. Dewata</span>

<i>at 2020-10-20T09:22:50-05:00</i>

</div>

<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Add PostgreSQLConfigMonitor

The PostgreSQLConfigMonitor has been added to periodically

monitor ACME config properties stored in PostgreSQL database.

</pre>

</li>

<li>

<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/885136fb7d4fa95b15de32b3add36c9d703c50a0">885136fb</a></strong>

<div>

<span>by Endi S. Dewata</span>

<i>at 2020-10-20T09:22:50-05:00</i>

</div>

<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Add docs for PostgreSQLConfigMonitor

</pre>

</li>

<li>

<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/c7be1f9b298236eb7b0813e5b207493ce480f7b5">c7be1f9b</a></strong>

<div>

<span>by Endi S. Dewata</span>

<i>at 2020-10-20T09:26:55-05:00</i>

</div>

<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Fix pki-server acme-realm-show

</pre>

</li>

<li>

<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/4f12d13eee7cc1817622dbc37d2fe0e20893dbc2">4f12d13e</a></strong>

<div>

<span>by Endi S. Dewata</span>

<i>at 2020-10-20T11:26:48-05:00</i>

</div>

<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Update version number to 10.10.0-beta1

</pre>

</li>

<li>

<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/3df7a23c2f3f0e4e42c94c10feb62ecc161f5182">3df7a23c</a></strong>

<div>

<span>by Endi S. Dewata</span>

<i>at 2020-10-20T16:54:54-05:00</i>

</div>

<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Update JSS dependency

</pre>

</li>

<li>

<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/9b6247dce0f4d830d64cffb19d5b60ba3c6236fa">9b6247dc</a></strong>

<div>

<span>by Fraser Tweedale</span>

<i>at 2020-10-21T10:47:27+10:00</i>

</div>

<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">CommonNameToSANDefault: allow label starting with digit

https://tools.ietf.org/html/rfc1123#section-2 relaxes the grammar

specified in https://tools.ietf.org/html/rfc1034#section-3.5,

allowing a DNS label to start with a number.  RFC 5280 explicitly

adopts the modifications of RFC 1123, so the current check that

requires a label to start with a letter is too strict.  Update the

check to allow labels to start with number or letter.

Fixes: https://github.com/dogtagpki/pki/issues/3339

</pre>

</li>

<li>

<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/2e1a0cfdb640e24c5badce436ef402392abb4587">2e1a0cfd</a></strong>

<div>

<span>by Endi S. Dewata</span>

<i>at 2020-10-21T08:38:27-05:00</i>

</div>

<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Update TomcatJSS dependency

</pre>

</li>

<li>

<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/8449667ddf68edb9e67db30f194fab28a857b219">8449667d</a></strong>

<div>

<span>by Endi S. Dewata</span>

<i>at 2020-10-21T16:55:20-05:00</i>

</div>

<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Add pki-acme.js

The JavaScript code in ACME's index.jsp has been moved

into pki-acme.js.

</pre>

</li>

<li>

<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/defadf1af4d94d6606c3b97cb42a5bfad6a2b478">defadf1a</a></strong>

<div>

<span>by Endi S. Dewata</span>

<i>at 2020-10-21T19:18:10-05:00</i>

</div>

<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Add pki-server <subsystem>-user-find

The pki-server <subsystem>-user-find has been added to

find users linked to a certificate.

</pre>

</li>

<li>

<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/6c322670d1065c43b69c92ff8e9cca7b9ff33b32">6c322670</a></strong>

<div>

<span>by Endi S. Dewata</span>

<i>at 2020-10-21T19:27:02-05:00</i>

</div>

<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Add pki-server <subsystem>-user-mod

The pki-server <subsystem>-user-mod has been added to

link/unlink a user to a certificate.

</pre>

</li>

<li>

<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/27e272374e1f178aa69c5b0cbde3dd46224e58b2">27e27237</a></strong>

<div>

<span>by Endi S. Dewata</span>

<i>at 2020-10-21T20:25:03-05:00</i>

</div>

<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Remove Configurator.removeOldDBUsers()

The code that links/unlinks users to/from subsystem cert

has been moved into configuration.py.

</pre>

</li>

<li>

<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/fb0ed6406ad04f469ca8bf032e75a41d03816f6e">fb0ed640</a></strong>

<div>

<span>by Endi S. Dewata</span>

<i>at 2020-10-22T15:06:36-05:00</i>

</div>

<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Add InMemoryRealm

The InMemoryRealm has been added to provide a simple realm

that contains just the admin user.

</pre>

</li>

<li>

<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/0b73ae1b3f5b62d58b7ed6a9ca3c554ffff20462">0b73ae1b</a></strong>

<div>

<span>by Endi S. Dewata</span>

<i>at 2020-10-22T15:06:36-05:00</i>

</div>

<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Update ACME deployment for Podman

The Dockerfile and the pki-acme-run script have been modified

to use the InMemoryRealm by default and provide a mechanism

to change it.

</pre>

</li>

<li>

<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/6157d43134947add442350c9137157e6005c0d6c">6157d431</a></strong>

<div>

<span>by Endi S. Dewata</span>

<i>at 2020-10-22T15:06:36-05:00</i>

</div>

<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Update ACME deployment for OpenShift

The OpenShift deployment files have been modified to use

the InMemoryRealm by default and provide a mechanism to

change it.

</pre>

</li>

<li>

<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/ad6d9fadc8cc1bb80a933aa448d15299cabc450b">ad6d9fad</a></strong>

<div>

<span>by Endi S. Dewata</span>

<i>at 2020-10-23T10:01:39-05:00</i>

</div>

<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Clean up exception handling in pki-server

The pki-server has been modified to show better error messages.

</pre>

</li>

<li>

<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/b0047db2f856b1f917dc69adedaf1b7b66f1d7d5">b0047db2</a></strong>

<div>

<span>by Endi S. Dewata</span>

<i>at 2020-10-23T10:01:39-05:00</i>

</div>

<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Add log messages for Password.get_password()

</pre>

</li>

<li>

<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/84696756e30769470bc5a5906c15dbdce7ee5d02">84696756</a></strong>

<div>

<span>by Endi S. Dewata</span>

<i>at 2020-10-23T10:01:39-05:00</i>

</div>

<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Refactor UGSubsystem.addUserCert()

The UGSubsystem.addUserCert() has been modified to take

a user ID and a certificate object.

</pre>

</li>

<li>

<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/f093ae97300dd50d627c49a41f89f3c5f5f27b53">f093ae97</a></strong>

<div>

<span>by Endi S. Dewata</span>

<i>at 2020-10-23T10:01:39-05:00</i>

</div>

<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Add pki-server <subsystem>-user-cert-add

The pki-server <subsystem>-user-cert-add has been added to

add a cert to a user for client cert authentication.

</pre>

</li>

<li>

<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/d49310da6a114fd668c97672c93a0e8b07f721b1">d49310da</a></strong>

<div>

<span>by Endi S. Dewata</span>

<i>at 2020-10-23T10:01:39-05:00</i>

</div>

<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Refactor pkidbuser cert configuration

The code that configures pkidbuser cert has been moved

into configuration.py.

</pre>

</li>

<li>

<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/6ad73713f653c2bf983a1065b94e7d561b203ae0">6ad73713</a></strong>

<div>

<span>by Endi S. Dewata</span>

<i>at 2020-10-23T10:01:39-05:00</i>

</div>

<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Clean up UGSubsystem.addUser()

The UGSubsystem.addUser() has been modified to allow

optional attributes according to the LDAP schema.

</pre>

</li>

<li>

<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/438eff69008a83166ad1a517602500fe602a40f7">438eff69</a></strong>

<div>

<span>by Endi S. Dewata</span>

<i>at 2020-10-23T10:01:39-05:00</i>

</div>

<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Add pki-server <subsystem>-user-show

The pki-server <subsystem>-user-show has been added to

retrieve a user directly from the database.

</pre>

</li>

<li>

<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/4f9e4d956f9e4a3bd1a4c4ce5cfc237b47cb5eeb">4f9e4d95</a></strong>

<div>

<span>by Endi S. Dewata</span>

<i>at 2020-10-23T10:01:39-05:00</i>

</div>

<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Add pki-server <subsystem>-user-add

The pki-server <subsystem>-user-add has been added to

add a user directly into the database.

</pre>

</li>

<li>

<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/4078259a1e1b3ceea406c893f92d3dfbd3c408dd">4078259a</a></strong>

<div>

<span>by Endi S. Dewata</span>

<i>at 2020-10-23T10:01:39-05:00</i>

</div>

<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Refactor pkidbuser creation

The code that creates pkidbuser has been moved into

configuration.py.

</pre>

</li>

<li>

<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/89f178adc87e41c6926a1eaa7dd971e764673e5f">89f178ad</a></strong>

<div>

<span>by Endi S. Dewata</span>

<i>at 2020-10-23T11:09:59-05:00</i>

</div>

<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Add PKIDeployer.setup_database_user()

The code that configures pkidbuser has been moved into

PKIDeployer.setup_database_user().

</pre>

</li>

<li>

<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/61744481ed346d16649359dbbdd13c52b1d893a5">61744481</a></strong>

<div>

<span>by Endi S. Dewata</span>

<i>at 2020-10-23T13:44:06-05:00</i>

</div>

<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Fix cloning issue

Due to recent changes pkispawn tried to add a duplicate

pkidbuser during cloning so it failed. The code has been

modified to no longer add pkidbuser during cloning.

</pre>

</li>

<li>

<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/42ab987a3f2963aa3064a78174789b8e1e7fc351">42ab987a</a></strong>

<div>

<span>by Endi S. Dewata</span>

<i>at 2020-10-23T14:43:08-05:00</i>

</div>

<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Remove unused SystemConfigService.setupDatabaseUser()

</pre>

</li>

<li>

<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/ab918bf7210ee67400a386181985499c63e2ec8c">ab918bf7</a></strong>

<div>

<span>by Endi S. Dewata</span>

<i>at 2020-10-26T15:13:53-05:00</i>

</div>

<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Fix error handling in pki-server

</pre>

</li>

<li>

<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/355f265595d184cb66e63eeac24fa9de3c68745a">355f2655</a></strong>

<div>

<span>by Endi S. Dewata</span>

<i>at 2020-10-26T15:14:00-05:00</i>

</div>

<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Fix Password.get_password()

The Password.get_password() has been modified to use

pki.util.load_properties() to load the password file.

</pre>

</li>

<li>

<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/2648cc6e2433540798627f49a5805bc5eb0706ab">2648cc6e</a></strong>

<div>

<span>by Endi S. Dewata</span>

<i>at 2020-10-26T15:29:52-05:00</i>

</div>

<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Add pki securitydomain-join

The code that registers the new subsystem into the security

domain has been moved into pki securitydomain-join.

</pre>

</li>

<li>

<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/657819599dd34cfac30faca9fb9c67995b03cdfa">65781959</a></strong>

<div>

<span>by Endi S. Dewata</span>

<i>at 2020-10-26T21:48:32-05:00</i>

</div>

<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Clean up PKISubsystem.join_security_domain()

</pre>

</li>

<li>

<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/25f6ecd491a33317b9de3530ac6e520523afab09">25f6ecd4</a></strong>

<div>

<span>by Endi S. Dewata</span>

<i>at 2020-10-26T21:49:16-05:00</i>

</div>

<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Add pki-server sd-host-add

The code that adds the security domain manager has been

moved into pki-server sd-host-add.

</pre>

</li>

<li>

<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/26450226ef39611ac8344b5a23ec1f5c0d4c7c0a">26450226</a></strong>

<div>

<span>by Endi S. Dewata</span>

<i>at 2020-10-26T23:01:00-05:00</i>

</div>

<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Add pki-server sd-create

The code that creates the security domain has been moved into

pki-server sd-create.

</pre>

</li>

<li>

<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/b4a33e3340d616dfef694d0f0761520fd1c3b1c5">b4a33e33</a></strong>

<div>

<span>by Endi S. Dewata</span>

<i>at 2020-10-26T23:01:06-05:00</i>

</div>

<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Remove unused SystemConfigService.setupSecurityDomain()

</pre>

</li>

<li>

<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/b24f6b166de9151229cfe104cd2f305d67133831">b24f6b16</a></strong>

<div>

<span>by Endi S. Dewata</span>

<i>at 2020-10-26T23:01:06-05:00</i>

</div>

<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Remove unused SecurityDomainSetupRequest

</pre>

</li>

<li>

<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/f74a6bd29176bb57d1653f5451b817cc54db1409">f74a6bd2</a></strong>

<div>

<span>by Endi S. Dewata</span>

<i>at 2020-10-27T13:10:41-05:00</i>

</div>

<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Clean up group configuration for pkidbuser

</pre>

</li>

<li>

<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/73d0e6e4caa199ddad409762a6be97ebd5d13d05">73d0e6e4</a></strong>

<div>

<span>by Endi S. Dewata</span>

<i>at 2020-10-27T13:10:44-05:00</i>

</div>

<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Add --output-format for pki-server <subsystem>-group-member-find

</pre>

</li>

<li>

<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/53706d43c2660736fb57c16b8764dbe116213a85">53706d43</a></strong>

<div>

<span>by Endi S. Dewata</span>

<i>at 2020-10-27T13:10:45-05:00</i>

</div>

<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Add --tps-profiles for pki-server <subsystem>-add-user

</pre>

</li>

<li>

<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/f26500c1c2b0b4aeea2d18a94a6d1e6b2871d346">f26500c1</a></strong>

<div>

<span>by Endi S. Dewata</span>

<i>at 2020-10-27T13:10:47-05:00</i>

</div>

<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Refactor admin certificate configuration

The code that configures the admin certificate in

Configurator.updateAdminUserCert() has been moved into

PKIDeployer.setup_admin().

</pre>

</li>

<li>

<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/9e3db0971a39d60358b2fc9916e61b960fd6ff6c">9e3db097</a></strong>

<div>

<span>by Endi S. Dewata</span>

<i>at 2020-10-27T13:10:49-05:00</i>

</div>

<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Refactor admin group configuration

The code that configures the admin groups in

Configurator.createAdminUser() has been moved into

PKIDeployment.setup_admin().

</pre>

</li>

<li>

<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/63c7434b62adcc0b9a6885be41bff9f1bdb1a969">63c7434b</a></strong>

<div>

<span>by Endi S. Dewata</span>

<i>at 2020-10-27T13:10:50-05:00</i>

</div>

<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Refactor admin user creation

The code that creates the admin user in

Configurator.createAdminUser() has been moved into

PKIDeployer.setup_admin().

</pre>

</li>

<li>

<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/d4ed7a86756292246c1f7f4d5a3ad50e78e20292">d4ed7a86</a></strong>

<div>

<span>by Endi S. Dewata</span>

<i>at 2020-10-27T13:10:52-05:00</i>

</div>

<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Remove ACME tech preview notifications

</pre>

</li>

<li>

<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/d7cd710436fb0615dea5aee637449056946f7756">d7cd7104</a></strong>

<div>

<span>by Fraser Tweedale</span>

<i>at 2020-10-27T17:53:57-05:00</i>

</div>

<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">acme: refactor validation retry behaviour into ACMEChallengeProcessor

Challenge retry behaviour was duplicated across validators.

Refactor this behaviour into the ACMEChallengeProcessor class.

The validateChallenge method can now no longer raise (arbitrary)

exceptions.  Instead it returns a value of the ValidationResult

type.  As a consequence, more exceptions need to be handled, but the

upshot is that such failures are now captured and get represented

properly in the challenge object's error field.

</pre>

</li>

<li>

<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/cc566b63e11b71a335002839868eca88c0700799">cc566b63</a></strong>

<div>

<span>by Fraser Tweedale</span>

<i>at 2020-10-27T17:53:57-05:00</i>

</div>

<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">acme: add ACMEIdentifierValidator class

Add a class and methods for validating the syntax of an identifier.

This will allow the newOrder service to reject orders with malformed

identifiers (a subsquent commit will implement this behaviour).

</pre>

</li>

<li>

<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/2cfa3c6359ba39699b6aa2b8577e67264c41288c">2cfa3c63</a></strong>

<div>

<span>by Fraser Tweedale</span>

<i>at 2020-10-27T17:53:57-05:00</i>

</div>

<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">acme: validate identifier syntax

Update ACMENewOrderService to validate identifier syntax and respond

with an error object if it finds a malformed identifier.

Also add a service base class providing the "respond with ACMEError

object".  Other service classes should be updated over time to use

it, so that we (a) return proper error objects in conformance with

RFC 8555 and (b) avoid code duplication through use of the base

class.

</pre>

</li>

<li>

<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/e63ff6295e8a60809b1fd25e273257f2a9777a3c">e63ff629</a></strong>

<div>

<span>by Endi S. Dewata</span>

<i>at 2020-10-28T11:08:21-05:00</i>

</div>

<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Clean up ACME docs

</pre>

</li>

<li>

<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/113a86341e6a7fe3bd40c0e20357dee0b524a137">113a8634</a></strong>

<div>

<span>by Endi S. Dewata</span>

<i>at 2020-10-28T11:11:59-05:00</i>

</div>

<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Clean up ACME docs (part 2)

</pre>

</li>

<li>

<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/927f6662f49212d320becdb949a1e3a3c185e4c3">927f6662</a></strong>

<div>

<span>by Endi S. Dewata</span>

<i>at 2020-10-28T14:09:48-05:00</i>

</div>

<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Update ACME login and logout services

The ACME login service has been modified to allow anybody

to retrieve the login information from the current session.

The ACME logout service has been modified to allow anybody

to clear the current session.

</pre>

</li>

<li>

<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/373f5c5c88d674a99379e8ea0bc9d43e1cc7e072">373f5c5c</a></strong>

<div>

<span>by Endi S. Dewata</span>

<i>at 2020-10-28T14:09:48-05:00</i>

</div>

<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Add avatar and user's full name for ACME UI

The ACME UI has been modified to display an avatar and

user's full name.

</pre>

</li>

<li>

<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/9db5355f5033e306575edccc589d6bec76ad7895">9db5355f</a></strong>

<div>

<span>by Endi S. Dewata</span>

<i>at 2020-10-28T14:09:48-05:00</i>

</div>

<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Add profile menu for ACME UI

The ACME UI has been modified to provide a profile menu

which initially contains the login and logout menu items.

</pre>

</li>

<li>

<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/38616b5a1e89a75601f6a6de63f79136dd1239ef">38616b5a</a></strong>

<div>

<span>by Endi S. Dewata</span>

<i>at 2020-10-28T14:09:48-05:00</i>

</div>

<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Add sidebar menu for ACME UI

A sidebar menu has been added into the ACME UI. The main page

has been split into home.jsp and help.jsp.

</pre>

</li>

<li>

<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/2cd562a585b3b2822092b2596a4bc019ff730d95">2cd562a5</a></strong>

<div>

<span>by Endi S. Dewata</span>

<i>at 2020-10-28T14:09:48-05:00</i>

</div>

<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Add sidebar toggle in ACME UI

A toggle has been added to show/hide the sidebar in the ACME UI.

</pre>

</li>

<li>

<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/15962317d7815161d810727f55702220cb980c12">15962317</a></strong>

<div>

<span>by Endi S. Dewata</span>

<i>at 2020-10-28T14:09:48-05:00</i>

</div>

<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Add configuration page in ACME UI

A configuration page has been added in ACME UI to show the

current service status and links to enable/disable the service.

</pre>

</li>

<li>

<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/181487b3d770138a8d38166b7ce65a509008f765">181487b3</a></strong>

<div>

<span>by Endi S. Dewata</span>

<i>at 2020-10-28T14:09:48-05:00</i>

</div>

<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Add login/logout sidebar menu

</pre>

</li>

<li>

<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/5e06d8069fb8d3279ac317b682fa86b13da3c562">5e06d806</a></strong>

<div>

<span>by Endi S. Dewata</span>

<i>at 2020-10-28T14:09:48-05:00</i>

</div>

<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Fix ACME UI logout

</pre>

</li>

<li>

<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/61297c6f97cb0e850a76307d1200b4a7c63f001c">61297c6f</a></strong>

<div>

<span>by Endi S. Dewata</span>

<i>at 2020-10-28T14:42:31-05:00</i>

</div>

<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Update version number to 10.0.0

</pre>

</li>

</ul>

<h4>30 changed files:</h4>

<ul>

<li class="file-stats">

<a href="#354079a72b91a4280407c16a36f47d1986fd85a5">

.classpath

</a>

</li>

<li class="file-stats">

<a href="#366cdbd6e405218760f06f85df3039b2809dcb64">

<span class="new-file">

+

.github/workflows/qe-tests.yml

</span>

</a>

</li>

<li class="file-stats">

<a href="#4b905b3ce8db4f70f4829d47fb4b4f852ff810a2">

.github/workflows/required-tests.yml

</a>

</li>

<li class="file-stats">

<a href="#a5cc2925ca8258af241be7e5b0381edf30266302">

.gitignore

</a>

</li>

<li class="file-stats">

<a href="#9a2aa4db38d3115ed60da621e012c0efc0172aae">

CMakeLists.txt

</a>

</li>

<li class="file-stats">

<a href="#3f454a98e586d1aa0d322e19afd5e67e08f2d3c8">

<span class="new-file">

+

CONTRIBUTING.md

</span>

</a>

</li>

<li class="file-stats">

<a href="#8ec9a00bfd09b3190ac6b22251dbb1aa95a0579d">

README.md

</a>

</li>

<li class="file-stats">

<a href="#d0f22e8bdff03f4e5a1fd1bf9ce97db437323959">

base/CMakeLists.txt

</a>

</li>

<li class="file-stats">

<a href="#0b3cc8b828fd333d07b22c8f8cd7923f0bf75ea9">

base/acme/CMakeLists.txt

</a>

</li>

<li class="file-stats">

<a href="#63ffd8e45cfcae6135a76ec084286fce4acc3a2f">

base/acme/Dockerfile

</a>

</li>

<li class="file-stats">

<a href="#b79bea530cf82a6344c73a270b0661da2e16c814">

<span class="new-file">

+

base/acme/bin/pki-acme-run

</span>

</a>

</li>

<li class="file-stats">

<a href="#dae87b076f6402e65d0171d8133267a7bff8d60a">

<span class="new-file">

+

base/acme/conf/realm.conf

</span>

</a>

</li>

<li class="file-stats">

<a href="#a7ec5ab6fc297858bd5ccb9a00d419b75be65599">

<span class="new-file">

+

base/acme/database/ds/create.ldif

</span>

</a>

</li>

<li class="file-stats">

<a href="#fd73bba9cc2bca4eb32cef8f8439f234af883b52">

<span class="new-file">

+

base/acme/database/ds/database.conf

</span>

</a>

</li>

<li class="file-stats">

<a href="#07f9cab9f15e558f2286ffe243dd0a5fb7b7d8c4">

<span class="new-file">

+

base/acme/database/ds/schema.ldif

</span>

</a>

</li>

<li class="file-stats">

<a href="#cd414bf01c797d3be6764d5c5d7c98cf9de39ac0">

base/acme/database/ldap/create.ldif

</a>

</li>

<li class="file-stats">

<a href="#2b90e8da42abde5c1605767936beb0e202a3e02f">

base/acme/database/ldap/schema.ldif

</a>

</li>

<li class="file-stats">

<a href="#09b7032f11b42098dd6eb90c11de16a6fcab4163">

<span class="new-file">

+

base/acme/database/openldap/create.ldif

</span>

</a>

</li>

<li class="file-stats">

<a href="#5957e541ca44b0d2a468fdb82081373d735bc49a">

<span class="new-file">

+

base/acme/database/openldap/database.conf

</span>

</a>

</li>

<li class="file-stats">

<a href="#909caa755a5d4a80ccc80f77a25b946eaabd77ff">

<span class="new-file">

+

base/acme/database/openldap/schema.ldif

</span>

</a>

</li>

<li class="file-stats">

<a href="#09e2e7949ea81561c8eec8bd61d7b74d4a27392a">

base/acme/database/postgresql/create.sql

</a>

</li>

<li class="file-stats">

<a href="#6f049b0c092ff159fd4e1ebd30f0939fb652ec1b">

base/acme/database/postgresql/drop.sql

</a>

</li>

<li class="file-stats">

<a href="#f88eee053fb2ebc8ec64730ea2a26bf82714ecc3">

base/acme/database/postgresql/statements.conf

</a>

</li>

<li class="file-stats">

<a href="#df4212ae2676b8911805ff064b4a156f39bfd859">

base/acme/issuer/nss/ca_signing.conf

</a>

</li>

<li class="file-stats">

<a href="#b0d06e9530190f72cc266eae534b58c1b4fe3528">

base/acme/issuer/nss/sslserver.conf

</a>

</li>

<li class="file-stats">

<a href="#c565b1970758217a97cb948e724f423c9f0ad719">

base/acme/openshift/pki-acme-deployment.yaml

</a>

</li>

<li class="file-stats">

<a href="#5405a968792d622fbc5985369f5351a2271afe58">

<span class="new-file">

+

base/acme/openshift/pki-acme-realm.yaml

</span>

</a>

</li>

<li class="file-stats">

<a href="#ed9ffcb1571185ee44ed9eea34726aa2b09845ad">

<span class="new-file">

+

base/acme/realm/ds/create.ldif

</span>

</a>

</li>

<li class="file-stats">

<a href="#87f12dd2ae826b70a678390aba6a6df81a81209a">

<span class="new-file">

+

base/acme/realm/ds/realm.conf

</span>

</a>

</li>

<li class="file-stats">

<a href="#9f47f5094d519f06b9f20e0c3d2b495b306317ba">

<span class="new-file">

+

base/acme/realm/in-memory/realm.conf

</span>

</a>

</li>

</ul>

<h5>The diff was not included because it is too large.</h5>

</div>

<div class="footer" style="margin-top: 10px;">

<p style="font-size: small; color: #666;">

—

<br>

<a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/compare/29b7d32146a7bafa2fbcafe5630e140a359f98d2...61297c6f97cb0e850a76307d1200b4a7c63f001c">View it on GitLab</a>.

<br>

You're receiving this email because of your account on salsa.debian.org.

If you'd like to receive fewer emails, you can

adjust your notification settings.

</p>

</div>

</body>

</html>