<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN" "http://www.w3.org/TR/REC-html40/loose.dtd">
<html lang="en">
<head>
<meta content="text/html; charset=US-ASCII" http-equiv="Content-Type">
<title>
GitLab
</title>
<style>img {
max-width: 100%; height: auto;
}
</style>
</head>
<body>
<div class="content">
<h3>
Timo Aaltonen pushed to branch master
at <a href="https://salsa.debian.org/freeipa-team/dogtag-pki">FreeIPA packaging / dogtag-pki</a>
</h3>
<h4>
Commits:
</h4>
<ul>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/769d4866bdc36540a3ad42d49a16a4576462da5d">769d4866</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2020-10-28T18:16:35-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Fix JNA build dependency
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/8f288e2082beb17876818661eded542bd2618327">8f288e20</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2020-10-29T11:14:00-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Add workaround for missing capture_output in Python 3.6
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/5d674aef1d37b724213270984062fba79e6a519a">5d674aef</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2020-10-29T11:16:58-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Fix JSS initialization in pki-server <subsystem>-user-cert-add
The pki-server <subsystem>-user-cert-add failed with
NoSuchProviderException when importing a certificate with
RSA/PSS algorithm. It turns out the JSS has to be initialized
before parsing the certificate using X509CertImpl.
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/263739df16f7517244c700af706e4153639887d1">263739df</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2020-10-29T21:45:45-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Fix ACME doc
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/c073c85d5a43411bff576b72f0cc58a514687555">c073c85d</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2020-11-02T12:30:41-06:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Clean up pki-server <subsystem>-user-show
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/5d0dae1207dd01bf30bc642e6bdb797debd32405">5d0dae12</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2020-11-02T19:54:46-06:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Fix invalid attribute syntax during installation
Recently the pki.convert_x509_name_to_dn() was used to convert
the subsystem cert's subject name into a DN during installation.
However, the original code did not escape attributes in the DN
properly, so if the subject name contained a special character
(e.g. comma), the syntax of the DN could become invalid.
To fix the problem the pki.convert_x509_name_to_dn() has been
modified to escape attributes in the DN properly.
https://github.com/dogtagpki/pki/issues/3367
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/6989a2ff6070fd8697d6b73604639c53e240fefc">6989a2ff</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2020-11-03T21:21:04-06:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Clean up log messages in CAService
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/0f74e07b4bf6be697df5add2ed3c74b93a4c313f">0f74e07b</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2020-11-03T21:21:06-06:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Clean up log messages in EnrollProfile
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/bb939bcd02e804aa84fc198615ba7e24e29c8692">bb939bcd</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2020-11-04T09:08:34-06:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Clean up log messages in AuditService
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/749c2d94f16fa418a8ee211b3d632bd40a23fe9d">749c2d94</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2020-11-04T09:08:35-06:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Fix NPE in UGSubsystem.findUsersByKeyword()
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/c9eb3d5ec7ffb2fa1a36c7a887ead0e005f80b2e">c9eb3d5e</a></strong>
<div>
<span>by fdelehay</span>
<i>at 2020-11-05T01:05:29+01:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Update PKI_Health_Check_Tool.md
typos</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/602a53c69b83e543253d45b9e7bb54aad3c2d25e">602a53c6</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2020-11-04T18:10:33-06:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Update links in docs
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/9a2cf4f16023bc86c53e56e032c0997417aa9550">9a2cf4f1</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2020-11-04T19:01:42-06:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Add FQDN configuration doc
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/4c322622bb608124d71303aeccf5525d83f62533">4c322622</a></strong>
<div>
<span>by cpinjani</span>
<i>at 2020-11-05T12:55:52+05:30</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Check 'man pkispawn' having reference of setup-ds.pl (#3371)
Signed-off-by: Chandan Pinjani <cpinjani@redhat.com>
Co-authored-by: Chandan Pinjani <cpinjani@redhat.com></pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/9e450c26232b65c8dd0f0e2c625432ec3aaf7d92">9e450c26</a></strong>
<div>
<span>by gswami90</span>
<i>at 2020-11-05T17:56:32+05:30</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Test_automation_for_RFE_Need_Method_to_copy_SKI_from_CSR_to_Certifica… (#3351)
* Test_automation_for_RFE_Need_Method_to_copy_SKI_from_CSR_to_Certificate_signed
Signed-off-by: Gaurav Swami <gswami@redhat.com>
* Test_automation_for_RFE_Need_Method_to_copy_SKI_from_CSR_to_Certificate_signed
Signed-off-by: Gaurav Swami <gswami@redhat.com></pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/1b6b426ad4724e2f9595340027482a0a36fc3655">1b6b426a</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2020-11-06T15:16:38-06:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Fix concurrency issue in ACME PKIIssuer
The PKIIssuer has been modified to create a new PKIClient
instance for each request to avoid concurrency issue when
handling multiple clients.
The PKIIssuer.issueCertificate() has been modified to no
longer call CAClient.login() since the login operation will
actually be performed automatically by the PKIConnection
if required by the server. The CAClient.login() is mainly
used to get the account info (e.g. user roles) which is not
needed in this case.
https://bugzilla.redhat.com/show_bug.cgi?id=1889691
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/09ca2e4ef5a12c9ba13de4f9cf8aa7fc86f07dee">09ca2e4e</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2020-11-06T16:33:17-06:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Fix pki <subsystem>-audit-mod
The AuditService.updateAuditConfig() has been modified to
no longer throw an exception when it encounters a disabled
event. Instead, it will ignore the disabled event and not
add it into the list of enabled events.
https://bugzilla.redhat.com/show_bug.cgi?id=1843416
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/fa8612779b32e447fb6817b3a840911b165b9a0a">fa861277</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2020-11-06T20:19:48-06:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Add upgrade docs
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/5dcdd5efd721a373b22f201e97a12ef6f23a28bd">5dcdd5ef</a></strong>
<div>
<span>by dpuniaredhat</span>
<i>at 2020-11-11T13:24:24+05:30</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Bugzilla automation 1843416 kra-audit-mod fail (#3375)
Bug 1843416 - kra-audit-mod fail with Invalid event configuration if we have disabled entry in input file
Signed-off-by: Deepak Punia <dpunia@redhat.com></pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/8e9c247c4fcd2ac02ae6f07a9354c5d86e87f26d">8e9c247c</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2020-11-11T08:55:23-06:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Update DS instance name in CI tests
The CI tests have been updated to use a more generic
DS instance name.
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/357d7363067ec4349144851f14778e4f8f257b62">357d7363</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2020-11-11T12:00:59-06:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Update PKI instance name in CI tests
The CI tests have been updated to use the default
PKI instance name.
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/ae8dba6d59d66b5b6e38c72fc8afbedfb7818ed6">ae8dba6d</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2020-11-11T13:51:05-06:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Update LDAP suffixes in CI tests
The CI tests have been updated to use example LDAP suffixes.
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/c436eb9ef939aef68022d9260c59066cc1a29406">c436eb9e</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2020-11-11T13:51:05-06:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Update security domain name in CI tests
The CI tests have been updated to use example security
domain name.
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/4c74ba7a7ced5c5c18a7633fadc2ba85041b998a">4c74ba7a</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2020-11-11T13:51:05-06:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Update network domain name in CI tests
The CI tests have been updated to use example network
domain name.
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/90f7e320c6f75c9b49916ebdf1f76c8e67e50220">90f7e320</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2020-11-11T13:51:05-06:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Update container names in CI tests
The CI tests have been updated to use more descriptive
container names.
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/292d20d8c3ca26d37710a70304039469b604f027">292d20d8</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2020-11-11T16:44:56-06:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Update pki pkcs12-cert-mod
The pki pkcs12-cert-mod has been modified to search
for the cert to modify in a PKCS #12 file by its ID
in addition to its nickname. If a cert ID is provided,
there will be at most one cert matching the ID. If a
nickname is provided, there could be multiple certs
matching the nickname, but only the first one will
be processed.
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/481632ebc9d9db1c5219fb81bfac6152a1a598be">481632eb</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2020-11-11T16:44:56-06:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Add --friendly-name option for pki pkcs12-cert-mod
The pki pkcs12-cert-mod has been modified to provide
a --friendly-name option to change the nickname of a
cert in PKCS #12 file.
The --trust-flags option has been changed to become
optional.
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/36c209e1e8f65d900bc88fc39025e64631b2db6b">36c209e1</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2020-11-11T16:47:28-06:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Move IPA tests into separate workflow
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/68d6cb36d588659316c35ce1b4ff86f21153db95">68d6cb36</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2020-11-11T16:47:28-06:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Simplified build task in IPA tests
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/382e18f277ffc1d4105c899d0865d23871d7d564">382e18f2</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2020-11-11T16:47:28-06:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Rename Required Tests to Installation Tests
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/9396a54aa1f27d6fd7ada099977d549ff2084406">9396a54a</a></strong>
<div>
<span>by Alexander Scheel</span>
<i>at 2020-11-12T11:16:32-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Document how to debug QE pipeline failures
Signed-off-by: Alexander Scheel <ascheel@redhat.com>
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/b45f7a8e4eeecfb38872ade1ff34a9a01793ce2a">b45f7a8e</a></strong>
<div>
<span>by Alexander Scheel</span>
<i>at 2020-11-12T11:16:32-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Update Debugging_Pipeline.md</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/5689e79292a80c6aaa134da5292525b57ebb7cb2">5689e792</a></strong>
<div>
<span>by Alexander Scheel</span>
<i>at 2020-11-12T11:16:32-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Fix spelling of Ansible</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/e11e7014eb7c76e6acbbd7df0fa58893c0e209d4">e11e7014</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2020-11-12T11:23:49-06:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Use hostnames as container names in CI tests
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/ef41bc5352240c72187719b61c20687cc7b60de5">ef41bc53</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2020-11-12T12:23:59-06:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Refactor CAConfigurator.createLocalCert()
The CAConfigurator.createLocalCert() has been modified
to take a list of DNS names for SAN extension.
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/056e8cf0d64ff5e65f01d2d42b830e0a9007349f">056e8cf0</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2020-11-12T12:34:44-06:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Refactor Configurator.createCert()
The Configurator.createCert() has been modified to take
a profile ID and a list of DNS names for SAN extension.
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/bdfbc3ea0e96d06e64760e0de8cc4fe5fc4a436e">bdfbc3ea</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2020-11-12T12:44:01-06:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Refactor Configurator.loadCert()
The Configurator.loadCert() has been modified to take
a profile ID and a list of DNS names for SAN extension.
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/68162f1845b3be086202240c0e3ef180104673e8">68162f18</a></strong>
<div>
<span>by Timo Aaltonen</span>
<i>at 2020-11-13T18:40:50+02:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">control: Pki-tools should depend on pki-base-java instead of just pki-base.
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/e2d28ec5a412cba990c614f2e681ca378d225bac">e2d28ec5</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2020-11-13T11:24:31-06:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Update log messages in LDAPConfigurator.importLDIFRecord()
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/2338cc58a7859533498928d57f32d79ad1bbfc05">2338cc58</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2020-11-13T11:24:31-06:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Update log messages in LDAPConfigurator.createSystemContainer()
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/e10d7829804e326cadfa96b81acf99b60e2580da">e10d7829</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2020-11-13T11:24:31-06:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Update log messages in PKIInstance.load()
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/26d89ac95e64bb47c3761b741737c6a008a5923a">26d89ac9</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2020-11-13T11:24:31-06:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Update log messages in PluginRegistry
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/aeec176e61fdd7dcf73997bb1310b93120d6dec4">aeec176e</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2020-11-13T11:34:40-06:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Update log messages in UGSubsystem.addUser()
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/026e1c1733d887eb266f73b7ad76ce6c5add77de">026e1c17</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2020-11-13T12:33:35-06:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Convert deployment configs in CI tests into examples
The pki.cfg in CI tests has been split into separate
deployment configs for each subsystem and moved into a
new examples folder. The installation docs have been
updated to point to these examples.
The create and remove scripts have been removed since
they contain only a single command. The CI tests have
been modified to call pkispawn and pkidestroy directly.
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/e3a9e57be7576474465b9f4e5c8e8586ff5a3535">e3a9e57b</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2020-11-13T12:35:08-06:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Update log messages in Configurator.createRemoteCert()
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/3f58ee571317675882934b6a20779d0f7012c519">3f58ee57</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2020-11-13T15:25:01-06:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Fix ACME Dockerfile
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/9c10e652b588ac44cad3e8a4546858047d0a1115">9c10e652</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2020-11-13T20:24:53-06:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Clean up installation tests
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/bae0609f3cfe424e8171680dcceae48b5d577154">bae0609f</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2020-11-13T20:24:53-06:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Fix LDAPConfigurator.importLDIFRecord()
The LDAPConfigurator.importLDIFRecord() has been updated
to ignore modification error due to missing entry.
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/d8bcc48902a98bf9844073f17a4e7b87acce0508">d8bcc489</a></strong>
<div>
<span>by Timo Aaltonen</span>
<i>at 2020-11-14T13:05:40+02:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">fix-runuser-path.diff: Fix path to /sbin/runuser.
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/525968e1235667896cd4a080b15e59a12780f4ce">525968e1</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2020-11-16T10:15:27-06:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Fix cloning issue on F33
Since Fedora 33 the DS changelog has moved and will be
created automatically when the replication is enabled. Also,
the operation to add the old changelog will fail with LDAP
error 53. However, in older DS versions the old changelog
still needs to be added manually. To support all DS versions
the code will now ignore LDAP error 53.
https://github.com/dogtagpki/pki/issues/3379
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/51db62f90085848f3d0ea71f932f7d85198cad52">51db62f9</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2020-11-16T10:15:27-06:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Updated CA cloning doc
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/e12a078b1dd1ab1eb16395bf5f0ab107e14f1c32">e12a078b</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2020-11-16T11:03:32-06:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Fix NPE during subordinate CA installation
Due to recent changes, the CAConfigurator.createCert()
incorrectly tried to issue the subordinate CA cert locally,
which failed since there was no local CA signing cert yet
on the new subordinate CA being installed.
To fix the problem, the CAConfigurator.createCert() has
been modified to call the Configurator.createCert() to
obtain the subordinate CA cert from the remote root CA.
https://bugzilla.redhat.com/show_bug.cgi?id=1891577
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/64cf25ea3d91b7293a233c923a5383c18a05c89c">64cf25ea</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2020-11-16T11:03:32-06:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Add pki_cert_chain_path validation
The PKIDeployer.sd_connect() has been modified to validate
that the cert chain file exists if it's specified in the
pki_cert_chain_path parameter.
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/9e5138d949b549eebc97d7e4ca843a4049573295">9e5138d9</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2020-11-16T11:03:32-06:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Add subordinate CA installation doc
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/4c705de853e4c0f0ebfdeceb41012e6ff8039d9e">4c705de8</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2020-11-16T15:57:30-06:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Update status badges
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/1906afbeb3c8b7140601be7f9bee2f7fef5b0a5e">1906afbe</a></strong>
<div>
<span>by Alexander Scheel</span>
<i>at 2020-11-17T13:25:14-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Introduce IPv4 and IPv6-specific AJP adapters
In order to facilitate IPv4-only and IPv6-onyly stacks, begin binding
separately to IPv4 and IPv6. If a Connector fails to bind, Tomcat will
continue running, but won't listen on that address. This allows both
127.0.0.1 and ::1 to function on new Dogtag installs.
Note that the limitation here comes not from Tomcat but from JDK: it
only allows binding to a single (IPv4 or IPv6) stack with a given
address.
Resolves: rh-bz#1780082
Signed-off-by: Alexander Scheel <ascheel@redhat.com>
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/f685919e04b3ba0f85dfa1ae9726d85d4b91bfea">f685919e</a></strong>
<div>
<span>by Alexander Scheel</span>
<i>at 2020-11-17T13:25:14-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Add new AJP adapter upgrade script
This lets us migrate "localhost"-only adapters to localhost4/localhost6
split adapters.
Signed-off-by: Alexander Scheel <ascheel@redhat.com>
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/e544a3c7ca1dffb4de8e6de67f610583a297cb16">e544a3c7</a></strong>
<div>
<span>by Alexander Scheel</span>
<i>at 2020-11-17T13:25:14-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Mark pki_ajp_host as deprecated
Signed-off-by: Alexander Scheel <ascheel@redhat.com>
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/51cdc1f606761362fa6cb6b3e9d98b9f480dda06">51cdc1f6</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2020-11-17T14:34:29-06:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Replace TomcatJSS.loadTomcatConfig() with loadConfig()
The TomcatJSS.loadTomcatConfig() invocations have been
replaced with loadConfig() such that the config file
doesn't need to be specified explicitly.
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/c5f961cdaaa7bca075f31ad4d953d5e1022585c3">c5f961cd</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2020-11-17T14:35:32-06:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Update version number to 10.10.1
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/40a2af930a238e42b0722f27deab58046255956f">40a2af93</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2020-11-17T19:17:54-06:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Replace cryptography.x509.name._escape_dn_value()
The cryptography.x509.name._escape_dn_value() has been
replaced with a more standard ldap.dn.escape_dn_chars().
https://github.com/dogtagpki/pki/issues/3367
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/067ab904de8a11cf7ee9df17471121358474203c">067ab904</a></strong>
<div>
<span>by Timo Aaltonen</span>
<i>at 2020-11-23T07:54:49+02:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">control: Add python3-pki-base to pki-tools depends.
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/7bc2d645bd257959596ae42112fc5ec39014f0dc">7bc2d645</a></strong>
<div>
<span>by Timo Aaltonen</span>
<i>at 2020-11-23T19:14:20+02:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Merge branch 'upstream'
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/0d3740b0c37a45c6bc61d41fb57b28183cd4acfa">0d3740b0</a></strong>
<div>
<span>by Timo Aaltonen</span>
<i>at 2020-11-23T19:15:45+02:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">bump the version
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/9d30b081df3f43ebf1e617b2fdba5c2d8c4242cf">9d30b081</a></strong>
<div>
<span>by Timo Aaltonen</span>
<i>at 2020-12-03T17:51:39+02:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">control: Bump libtomcatjss-java dependencies.
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/fa44f05b2d5f46ed1550bf470c4380929c76c6cb">fa44f05b</a></strong>
<div>
<span>by Timo Aaltonen</span>
<i>at 2020-12-06T10:12:14+02:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">control: Add python3-ldap to build-depends.
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/f3cf51b2fb18b071cfff0424e0808e02833234ec">f3cf51b2</a></strong>
<div>
<span>by Timo Aaltonen</span>
<i>at 2020-12-06T10:13:38+02:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">releasing package dogtag-pki version 10.10.1-1
</pre>
</li>
</ul>
<h4>30 changed files:</h4>
<ul>
<li class="file-stats">
<a href="#91695bf5b8a0ce2da7eeb20d31c708eb25b2cf34">
.github/workflows/required-tests.yml
→
.github/workflows/installation-tests.yml
</a>
</li>
<li class="file-stats">
<a href="#1ef4ca516abc68d9dded3e330ec5c9a546d313f4">
<span class="new-file">
+
.github/workflows/ipa-tests.yml
</span>
</a>
</li>
<li class="file-stats">
<a href="#366cdbd6e405218760f06f85df3039b2809dcb64">
.github/workflows/qe-tests.yml
</a>
</li>
<li class="file-stats">
<a href="#8ec9a00bfd09b3190ac6b22251dbb1aa95a0579d">
README.md
</a>
</li>
<li class="file-stats">
<a href="#63ffd8e45cfcae6135a76ec084286fce4acc3a2f">
base/acme/Dockerfile
</a>
</li>
<li class="file-stats">
<a href="#d3eb5bfa7996cf73eeea98e5b31d1713bda24dca">
base/acme/src/main/java/org/dogtagpki/acme/issuer/PKIIssuer.java
</a>
</li>
<li class="file-stats">
<a href="#f68c931b334f03ab391b10fcc5a34da333595314">
base/ca/src/com/netscape/ca/CAService.java
</a>
</li>
<li class="file-stats">
<a href="#81f2dc7bcd6df5b9560616301bdba7048017fd0d">
base/ca/src/org/dogtagpki/server/ca/CAConfigurator.java
</a>
</li>
<li class="file-stats">
<a href="#7614d83a2002cfb764607eee70e4b42367cb16db">
base/common/python/pki/__init__.py
</a>
</li>
<li class="file-stats">
<a href="#1987739672fc03dcb113de8baefe4e18f1e1677f">
base/kra/functional/drmtest.readme.txt
</a>
</li>
<li class="file-stats">
<a href="#d3188af33f626497aa80ec3ce2cb4a3258878383">
base/server/CMakeLists.txt
</a>
</li>
<li class="file-stats">
<a href="#9dbbf1b1ccfaa03cd2ed6bcb8d8658f7f1fa5612">
base/server/cmsbundle/src/LogMessages.properties
</a>
</li>
<li class="file-stats">
<a href="#56b81ee6bb039b3ea2129777017d782f0c8b8d0e">
base/server/config/pkislots.cfg
</a>
</li>
<li class="file-stats">
<a href="#6df4dc323cec9ab0c56cd136da0ccbbbac2c67a0">
base/server/etc/default.cfg
</a>
</li>
<li class="file-stats">
<a href="#f52ee9801414ece96562b39293fd8c78dab2cdc0">
<span class="new-file">
+
base/server/examples/installation/ca-clone.cfg
</span>
</a>
</li>
<li class="file-stats">
<a href="#43d467e00699cdddd6b0ef516efe4dd828bc8006">
<span class="new-file">
+
base/server/examples/installation/ca.cfg
</span>
</a>
</li>
<li class="file-stats">
<a href="#fa07ed69fbe02e74647543ef3f0f2d17f091acf1">
<span class="new-file">
+
base/server/examples/installation/kra.cfg
</span>
</a>
</li>
<li class="file-stats">
<a href="#78de46b7b3bc18b94273263a6c5e5b8d7d005046">
<span class="new-file">
+
base/server/examples/installation/ocsp.cfg
</span>
</a>
</li>
<li class="file-stats">
<a href="#815d025c8783d6d750e205e84d3036f8aea88710">
<span class="new-file">
+
base/server/examples/installation/subca.cfg
</span>
</a>
</li>
<li class="file-stats">
<a href="#a38c88a6212ac07e78a19ac11b21a2e3ce06bcf3">
<span class="new-file">
+
base/server/examples/installation/tks.cfg
</span>
</a>
</li>
<li class="file-stats">
<a href="#9e25ee202b9244b4de05d196300c83ae16f4f641">
<span class="new-file">
+
base/server/examples/installation/tps.cfg
</span>
</a>
</li>
<li class="file-stats">
<a href="#04b750dfab9a26851423fcd4a149c4836bdfb5ba">
base/server/python/pki/server/deployment/__init__.py
</a>
</li>
<li class="file-stats">
<a href="#8769165ce523711f625954c227e76115a1a0c46e">
base/server/python/pki/server/deployment/pkiparser.py
</a>
</li>
<li class="file-stats">
<a href="#2bac7f5475cdbe0ea2f6af694ba958f2c8559611">
base/server/python/pki/server/instance.py
</a>
</li>
<li class="file-stats">
<a href="#0fe1556ddfbf7261ec96e5c193f6b038cfd9e337">
base/server/python/pki/server/subsystem.py
</a>
</li>
<li class="file-stats">
<a href="#e66602df8f2e0461dfe3e660f83e1439dd8ca1ce">
base/server/src/com/netscape/cms/profile/common/EnrollProfile.java
</a>
</li>
<li class="file-stats">
<a href="#5e24bd6e18798bbc11002c100c616f98dc76ccba">
base/server/src/com/netscape/cms/servlet/csadmin/Configurator.java
</a>
</li>
<li class="file-stats">
<a href="#8e0554146d2e922924530f9dcd97c4f7f8875d41">
base/server/src/com/netscape/cms/servlet/csadmin/LDAPConfigurator.java
</a>
</li>
<li class="file-stats">
<a href="#af0e90729a1478fb32ff9bbd21895c247792e883">
base/server/src/com/netscape/cmscore/dbs/DBSSession.java
</a>
</li>
<li class="file-stats">
<a href="#8b312e7dfba6b0d4c5cdca0766cff8989b3c5954">
base/server/src/com/netscape/cmscore/registry/PluginRegistry.java
</a>
</li>
</ul>
<h5>The diff was not included because it is too large.</h5>
</div>
<div class="footer" style="margin-top: 10px;">
<p style="font-size: small; color: #666;">
—
<br>
<a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/compare/00a2c828318e46e973e02ddd3f742e5d634e6dba...f3cf51b2fb18b071cfff0424e0808e02833234ec">View it on GitLab</a>.
<br>
You're receiving this email because of your account on salsa.debian.org.
If you'd like to receive fewer emails, you can
adjust your notification settings.
</p>
</div>
</body>
</html>