<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN" "http://www.w3.org/TR/REC-html40/loose.dtd">
<html lang="en">
<head>
<meta content="text/html; charset=US-ASCII" http-equiv="Content-Type">
<title>
GitLab
</title>
<style>img {
max-width: 100%; height: auto;
}
</style>
</head>
<body>
<div class="content">
<h3>
Timo Aaltonen pushed to branch upstream
at <a href="https://salsa.debian.org/freeipa-team/dogtag-pki">FreeIPA packaging / dogtag-pki</a>
</h3>
<h4>
Commits:
</h4>
<ul>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/a40cfac8dac30c59458b8f78f44ec4f8dc29a26d">a40cfac8</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2020-12-09T16:59:52-06:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Fix CA install doc
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/7c2b99b8d51ac59ca735c1c8ef215d50a4b56593">7c2b99b8</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2020-12-14T20:30:29-06:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Fix SystemCertClient creation
The calls to SystemCertClient constructor have been modified
to provide the subsystem name. This is required to run the
healthcheck tool on a KRA installed separately from the CA.
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/dee48bdaf4f799e917a2e25bb7994db8fb32ffaf">dee48bda</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2020-12-14T20:30:29-06:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Add test for installing KRA on separate instance
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/aa34aaf4994becaae4c2c71e32cb8705a025d697">aa34aaf4</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2020-12-16T08:56:35-06:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Revert SystemCertClient changes
The commit c25b438024e4a0f3b6e91e359bd0aa34c25ea4e9 broke
IPA vault, so it has been reverted. The test for installing
KRA on a separate instance has been modified to disable the
healthcheck test.
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/3c894354dd949c93382ac123b392c80e058983dc">3c894354</a></strong>
<div>
<span>by Christina Fu</span>
<i>at 2020-12-21T16:18:32-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Bug1664435-SCEP ChallengePassword Class not found
This patch, together with the fix for "Bug1908541 jss broke SCEP - missing PasswordChallenge class", addresses the issue where the class PasswordChallenge cannot be loaded due to Class Loader differences.
jss is installed in the common CL (/usr/share/pki/server/common/lib/jss4.jar)
the servlet classes are in webapp CL (/usr/share/pki/server/webapps/pki/WEB-INF/lib/pki-cms.jar)
In addition, this patch adds the upgrade sscript for the new path of ChallengePassword class which has been moved from pki into JSS.
fixes https://bugzilla.redhat.com/show_bug.cgi?id=1664435
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/a2b9a4b49e40ee8afa1d1da51075fc38a8241143">a2b9a4b4</a></strong>
<div>
<span>by Pritam Singh</span>
<i>at 2021-01-05T18:35:15+05:30</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Added_boolean_fix_for_fips_check
Signed-off-by: Pritam Singh <prisingh@redhat.com>
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/cc5840a74217845f98150ba57d588a5e9cfaf3dc">cc5840a7</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2021-01-06T17:42:56-06:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Refactor NSSDatabase.addExtensions()
The NSSDatabase.addExtensions() has been modified to take
a temporary directory to store files containing the data
for the new extension being added.
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/deb2eb8c74cc272cb01a6070a4d53bfdb9785d41">deb2eb8c</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2021-01-06T17:43:04-06:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Add support for OCSPNoCheckExtension in pki nss-cert
The NSSDatabase and NSSExtensionGenerator have been modified
to support OCSPNoCheckExtension such that pki nss-cert commands
can generate requests and certificates with this extension.
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/b88185e7abe76a0c565c8119e8a3dbec85600efd">b88185e7</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2021-01-06T17:43:26-06:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Add support for ocspResponder extended key usage in pki nss-cert
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/924d2d045589bd53ef22e1180b46ad28aad8fc7e">924d2d04</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2021-01-06T17:43:35-06:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Add --serial parameter for pki nss-cert-issue
The pki nss-cert-issue has been modified to provide an
optional parameter to specify a serial number for the
new certificate.
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/a0883837abe40cd339fa648110595aad069851c1">a0883837</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2021-01-06T17:43:45-06:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Add cert extension configs for CA certs
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/ea3c907c9b2975772b7672934ac89fefb724d2f7">ea3c907c</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2021-01-06T17:43:55-06:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Add test for installing CA with existing certs
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/c2b2267669518343ad401761712d089c38a5529f">c2b22676</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2021-01-06T17:45:12-06:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Clean up CI tests
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/b0298def61ca81532254da1f2d70d4f33681210b">b0298def</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2021-01-06T17:45:48-06:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Fix python3-pki dependency
The python3-pki package has been modified to depend on
python3-ldap since it is needed by pki Python module.
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/d75d0152b5217be428bf20bb10e1b858b5e13f74">d75d0152</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2021-01-06T17:47:37-06:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Disable ipa-healtcheck test
The ipa-healthcheck has been failing due to this issue:
https://github.com/freeipa/freeipa-healthcheck/issues/163
The ipa-healthcheck test has temporarily been disabled to
allow other IPA tests to pass.
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/a20ba28d1afd019d12a224ac01001fd29fe59116">a20ba28d</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2021-01-06T17:47:48-06:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Clean up ipa-tests.yml
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/c9d46c06784f5c84f39185169fe96cf7f0280cef">c9d46c06</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2021-01-06T17:48:14-06:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Fix issuing CA configuration during installation
The configuration.py has been modified to store the issuing CA
parameters in all cases except when installing CA with external
certs and standalone KRA/OCSP. This is necessary to fix KRA
installation with external certs.
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/1f70a0ac5fda9055bdbcc2348243e755fae9d21d">1f70a0ac</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2021-01-06T17:49:44-06:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Add support for emailProtection extended key usage in pki nss-cert
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/57c5318fdba87f7f24511730462358ec065bdc01">57c5318f</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2021-01-06T17:49:55-06:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Add cert extension configs for KRA certs
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/4382948e978a4ee465b7e9564226e18f9a7746d4">4382948e</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2021-01-06T17:50:03-06:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Add test for installing KRA with external certs
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/0459b00dedb6d6feed936524cb9a2741eb903b02">0459b00d</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2021-01-06T17:50:13-06:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Add test for installing IPA clone
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/49207adfbe350a325a05bf7c773de54c10f0b170">49207adf</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2021-01-06T17:50:33-06:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Fix preop.ca.pkcs7 for external and standalone installations
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/337d8a95dec25361f3c9fde8f7875c3f47f7a97c">337d8a95</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2021-01-06T17:50:53-06:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Disable GPG check in CI
The GPG check has been disabled due to the following issue
during build dependency installation on F32:
Package libuv-1.40.0-1.fc32.x86_64.rpm is not signed
The downloaded packages were saved in cache until the next successful transaction.
You can remove cached packages by executing 'dnf clean packages'.
Error: GPG check FAILED
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/387f99685eb63949f20fa21d1dc9b59e9ced709d">387f9968</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2021-01-06T18:18:08-06:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Fix KRA/OCSP installation with external certs on HSM
Previously pkispawn did not update serverCertNick.conf during
KRA or OCSP installation with external certs or standalone
installation. If the SSL server cert was stored in HSM the file
would not have the token name so the installation would fail.
To fix the problem the deployment scriptlet has been modified
to store the SSL server cert nickname and token name in
serverCertNick.conf in all installation cases.
https://bugzilla.redhat.com/show_bug.cgi?id=1890639
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/da395ab90da75fbdb5fa16ec213b13030cd3f954">da395ab9</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2021-01-06T21:40:29-06:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Fix COPR repository for PKI 10.10
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/ef8ee5f9dd2db0458be5b6372dba05322aae3912">ef8ee5f9</a></strong>
<div>
<span>by Alexander Scheel</span>
<i>at 2021-01-11T11:37:21-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Update usage for CRMFPopClient -y option
Signed-off-by: Alexander Scheel <ascheel@redhat.com>
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/62ebb7025b95164cb8864fc2109165313446860a">62ebb702</a></strong>
<div>
<span>by Alexander Scheel</span>
<i>at 2021-01-11T11:37:21-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Fix usage for CMCResponse -d
Signed-off-by: Alexander Scheel <ascheel@redhat.com>
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/567aa651dd73d3a6b42d6ba9317be9e4b670798f">567aa651</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2021-01-13T14:13:12-06:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Clean up CA clone test
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/062df9fb8c647801cf78ed9ac333e936ad88eebf">062df9fb</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2021-01-13T14:15:04-06:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Add HSM support for pki nss-cert-request
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/fd3e0d8e52805b2f49dde58c402c14cbc0da6bf7">fd3e0d8e</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2021-01-13T14:15:04-06:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Add HSM support for pki nss-cert-issue
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/8e39e0eb7dda420b9efcf97855230d55ca56ea74">8e39e0eb</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2021-01-13T14:15:04-06:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Add HSM support for pki nss-cert-import
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/155ac655ac6afa7199a0dd14198ce2093f2d4e12">155ac655</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2021-01-13T14:15:04-06:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Add test for PKI NSS CLI with and without HSM
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/2cbf67157a6789f018c2db80cb5976511d173a06">2cbf6715</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2021-01-13T14:15:04-06:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Add test for installing OCSP with external certs
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/3e81e61b7be42a317cb8619a9c6a4d79c0413da1">3e81e61b</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2021-01-13T14:15:04-06:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Add test for installing ACME
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/11156292ebf806326c811ecb21563d10661ca1dd">11156292</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2021-01-13T14:15:04-06:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Add test for installing KRA clone
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/0d6b3207c2847bb04b24ab4b02949e4067cbbcdd">0d6b3207</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2021-01-13T16:26:05-06:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Fix COPR repository for PKI 10.10
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/ef0f79dab0709f41e837a2e9657ad9d978881bb6">ef0f79da</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2021-01-13T18:34:56-06:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Clean up CA clone test
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/e05be3b83af483e2decbcf7de6493ecdb8a9358e">e05be3b8</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2021-01-13T18:34:56-06:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Clean up KRA clone test
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/895ab300c38445015c9ac136718ca3f690b0455d">895ab300</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2021-01-13T18:34:56-06:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Clean up IPA clone test
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/3005be0e88ad5897b4dc7e95d71c286201f3f687">3005be0e</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2021-01-14T09:29:23-06:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Update version number to 10.10.3
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/eff1d9cdc7d98300591a2a2b84b12978dd643966">eff1d9cd</a></strong>
<div>
<span>by root</span>
<i>at 2021-01-14T10:35:12-06:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Modify PKI to use RSA-OAEP wrapping alg for RSA keys.
This first cut is a simple reworking any instances of
RSA wrapping in the code to use RSA-OAEP.
Code tested to work in software. Using an hsm, several
issues occur with respect to wrapping using AES sym keys
to wrap and unwrap RSA private keys.
This first attempt is to get the basic code out for review.
Subsequently, we can refine some of this code to allow things
to work better with the hardware hsm.
Make oeap configurable.
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/6e3ad8768fa855416a1ba402ee5aab47956192c5">6e3ad876</a></strong>
<div>
<span>by Alexander Scheel</span>
<i>at 2021-01-14T10:35:12-06:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Remove additional lines from CRMFPopClient usage
Resolves: rh-bz#1584550
Signed-off-by: Alexander Scheel <ascheel@redhat.com>
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/3148d31c45f844c7a413ae615a1c1a0a1b563051">3148d31c</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2021-01-19T14:50:23-06:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Fix indentations in qe-tests.yml
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/81bdb81c7a1c5b38bb7bfb9ef68c36caa923ebe1">81bdb81c</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2021-01-19T14:50:37-06:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Update upload/download actions in qe-tests.yml
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/f4ce0d401934f409c1c786af23754d1156d1c78d">f4ce0d40</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2021-01-19T18:17:10-06:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Add persistent option for ACME nonces
Previously ACME nonces were stored in ACME database, which
could generate a lot of database traffic and might not work
well in clustered environment due to replication latency.
To address the performance issue, the ACME engine has been
modified to store the nonces in memory by default, and provide
an option to store the nonces in the database if necessary.
The replication latency issue should be addressed using other
mechanisms (e.g. using static base URL in ACME directory).
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/2315c0db808975ae8a0892abb3cf5e9f35626e8b">2315c0db</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2021-01-19T18:19:26-06:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Consolidate CI runner container build
The GitHub workflows have been modified to build the CI runner
container in the build job instead of test jobs.
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/40dab3937f60e0516f9a351ba13cea4f87fdc5d6">40dab393</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2021-01-25T16:24:10-06:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Add pki-server acme-deploy/undeploy --wait option
A new option has been added to pki-server acme-deploy/undeploy
commands to wait until ACME web application is actually
deployed/undeployed on the server. This option can be used to
prevent the subsequent command from executing before the ACME
deployment/undeployment is complete. The CI test has been updated
to use this option to improve its reliability.
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/966d7d38ba7f5d3147756fe2f65db789d393c20c">966d7d38</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2021-01-25T16:24:24-06:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Add ACME test using certbot
The ACME test has been modified to perform certificate enrollment,
certificate revocation, and account management using certbot.
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/36d13fd61950f96c468d01ac7bf53e66dab2fd45">36d13fd6</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2021-01-25T16:24:36-06:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Clean up IPA test
The code that installs and uninstalls IPA server has been
moved from ipa-test.sh to ipa-tests.yml.
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/76fbee5005e4b794975c43bb3ad244de7599926a">76fbee50</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2021-01-25T16:58:51-06:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Fix security domain tools
The pki-server sd-* commands have been moved into
pki-server <ca/kra/ocsp>-* such that it can be used to
create the security domain properly in CA, KRA, and OCSP.
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/7d513eb40078e112858380baf1128a46a4709759">7d513eb4</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2021-01-25T16:58:51-06:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Fix PKIDeployer.setup_admin()
The PKIDeployer.setup_admin() has been modified to use
the proper admin groups for CA, KRA, and OCSP.
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/07d5ec9283cf28851a052ce81a928493607add8f">07d5ec92</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2021-01-25T16:58:51-06:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Add test for standalone KRA
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/15f051b3fe195daa47d66496e5a096a68eb5a9f7">15f051b3</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2021-01-25T16:58:51-06:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Add test for standalone OCSP
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/8b769282ad5354cddfba04cf38bf2233e370dc57">8b769282</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2021-01-26T15:43:22-06:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Fix profile auth in PKIIssuer.issueCertificate()
In commit 1b6b426ad4724e2f9595340027482a0a36fc3655 the
PKIClient.login() was removed from PKIIssuer.issueCertificate()
and that caused enrollments with a profile that requires
authentication to fail.
To fix the problem the PKIClient.login() has been restored.
https://bugzilla.redhat.com/show_bug.cgi?id=1919282
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/1de07c2256ebe422bfe879935b33598a0cbc05de">1de07c22</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2021-01-26T15:43:33-06:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Add ACME tests for IPA
The IPA test has been modified to perform ACME tests
using certbot.
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/5f40860218aad64838bb4dc063653c7939499b12">5f408602</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2021-01-27T10:24:50-06:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Update release number to 10.10.3-4
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/6fbbbf90e9521967959a4737ae5cc9c605cc3a09">6fbbbf90</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2021-01-29T15:57:56-06:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Add test for installing TKS clone
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/22897930148b86743883950af1c16cb999da5fa4">22897930</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2021-01-29T18:00:58-06:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Fix COPR repo for TKS test
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/c61c5ee6ab25d15ba59cf422361c18c13264beb2">c61c5ee6</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2021-01-29T18:00:58-06:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Fix clone of clone installation
In commit e0b249636e2ea24d3d0633e65bf1d6e0a3dbd35f the
CMSEngine.configurePorts() invocation was moved later
during server startup process. It's not clear how, but
apparently the cert number range assignment depends on
this code so it failed when installing a clone of an
existing clone.
To fix the problem the invocation has been moved back
into its original position.
Resolves: https://github.com/dogtagpki/pki/issues/3330
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/02a375dec1404584877a321b5d5965ba510750ed">02a375de</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2021-01-29T18:00:58-06:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Add test for installing CA clone of clone
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/bd83211d4965e71c1d76d84ba22a929929d6ffaa">bd83211d</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2021-01-29T18:00:58-06:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Add test for installing KRA clone of clone
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/f86773ab81db822a396e203cea90be1add18ecb2">f86773ab</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2021-01-29T20:47:21-06:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Clean up CA test
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/705aa5e82a451d237a1f49bba5086dd9c92be8db">705aa5e8</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2021-01-29T20:47:21-06:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Clean up KRA test
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/9900c46dd8a65defc8492e67c57b1684b2d0481c">9900c46d</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2021-02-01T11:55:06-06:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Add ACME base URL parameter
By default the ACME directory will return ACME service URLs
with the same hostname that the client uses to access the
directory. If the hostname is load-balanced, the client might
get redirected to different servers, which could trigger other
issues.
A new parameter has been added into engine.conf to override
the base URL of ACME services. This mechanism can be used to
pin the client to the current server.
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/a52e4b5c8df2492da2ca999bf1166df08d16d4a9">a52e4b5c</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2021-02-01T11:55:06-06:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Add ACME server switchover test
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/514741c27930659e27dfdc49cf93698b37c3602d">514741c2</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2021-02-01T16:17:50-06:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Fixed error handling during replica setup
Originally the LDAPConfigurator.createReplicaObject() would
return true if it managed to add a new replica object. If the
object already existed, it would only add the new replica bind
DN and return false. If an error happened it would get ignored
and the method would return false as well.
In 4abfdc77508545fb90ef127fbbf373ae1609d705 the behavior of
accidentally got changed return true if the replica object
already exists and this caused OCSP and TKS clone of clone
installation to fail.
To fix the problem the behavior has been reverted except that
now any error will be reported as an exception.
https://bugzilla.redhat.com/show_bug.cgi?id=1912418
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/5987987466e989d9aa457a881f69476cdd3434dd">59879874</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2021-02-01T16:21:35-06:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Add test for installing OCSP clone
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/09177132c206342ed05adfb3416b1209a405d9c9">09177132</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2021-02-01T16:21:35-06:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Add test for installing OCSP clone of clone
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/6d7aa2b34f90a1a219270c70f0d6c09e3257da4c">6d7aa2b3</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2021-02-01T16:21:35-06:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Add test for installing TKS clone of clone
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/0b5620b6e16e6eccc433169a5bf1da6a55f33a3c">0b5620b6</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2021-02-01T16:21:35-06:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Fix COPR repo for ACME test
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/8913e3158bbf14c2db06dafcd1003818ab74e2af">8913e315</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2021-02-01T18:29:55-06:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Update CA clone doc
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/0fc92476add5398205d737a618af4bb210cef026">0fc92476</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2021-02-01T18:30:03-06:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Update KRA clone doc
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/5ec94e61789b32913a93d3f178bc54a20b71556e">5ec94e61</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2021-02-04T17:31:01-06:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Add pki <subsystem>-range-request --install-token option
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/26b29c389669abb2e9b4b6d645a2f71765970090">26b29c38</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2021-02-04T17:31:18-06:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Add pki <subsystem>-config-export --install-token option
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/877751b91858600cc504145b46ed4ffbc08c60eb">877751b9</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2021-02-04T17:33:32-06:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Add pki securitydomain-join --install-token option
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/91f25b906f4f07e275d8bf8fdc1da8de93cc1410">91f25b90</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2021-02-04T17:34:42-06:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Fix calculation in test_cert_enrollment.py
The test_cert_enrollment.py has been modified to use float
instead of int when calculating the elapsed time for better
accuracy.
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/c57a03911d9651cdc7844a3ace1e9b40b0657dca">c57a0391</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2021-02-04T17:34:43-06:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Add default values for test_cert_enrollment.py parameters
Some parameters for test_cert_enrollment.py have been modified
to provide a default value to make it easier to use.
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/507af7bdeda181ca4b523d0e46c9b747108ee932">507af7bd</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2021-02-04T17:34:43-06:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Update log messages in test_cert_enrollment.py
The test_cert_enrollment.py has been modified to provide
a --verbose and a --debug options to show the test progress
and some debugging information.
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/5bad7101120c668eba6f3b40875c41f02bf007d3">5bad7101</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2021-02-04T17:34:43-06:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Fix calculation in test_acme_cert_enrollment.py
The test_acme_cert_enrollment.py has been modified to use
float instead of int when calculating the elapsed time for
better accuracy.
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/0475ff1b7cba84bee767077292c4159c53b41226">0475ff1b</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2021-02-04T17:34:43-06:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Add default values for test_acme_cert_enrollment.py parameters
The parameters for test_acme_cert_enrollment.py have been
modified to provide a default value to make it easier to use.
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/8d2835c68c85a29647be9991d4669c6b1b738d64">8d2835c6</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2021-02-04T17:34:43-06:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Update log messages in test_acme_cert_enrollment.py
The test_acme_cert_enrollment.py has been modified to provide
a --verbose and a --debug options to show the test progress and
some debugging information.
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/a3fa35e30a8bc5b06806f6a228e8d27a9bc68962">a3fa35e3</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2021-02-04T17:34:43-06:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Add performance tests scripts into pki-tests
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/beb615b704f07b383ca8b69656af67a53a9eaf2d">beb615b7</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2021-02-04T17:34:43-06:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Add doc for CA performance test
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/a72d8d146ed0b71fe1ed6282e2af99f2c81e3f24">a72d8d14</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2021-02-04T17:34:43-06:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Add doc for ACME performance test
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/a88a97bad4a0d65bfcae4d64f0c4d2759e585483">a88a97ba</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2021-02-04T17:35:06-06:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Fix TPS clone installation
The TPS clone installation has been fixed by adding
the GetConfigEntries servlet into TPS's web.xml.
Resolves: https://github.com/dogtagpki/pki/issues/1841
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/7ee9c4357aa0c4637b0320ade17dd71ef9a5941e">7ee9c435</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2021-02-04T17:35:14-06:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Add test for installing TPS clone
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/b2cec1cb2fdf4dd622b405aaf4079baffe94e544">b2cec1cb</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2021-02-08T13:03:11-06:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Update version number to 10.10.4
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/042e2b704d27924590b86d776fae19b4eb65fa19">042e2b70</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2021-02-08T14:13:53-06:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Move FixChallengePasswordClassPath.py
The FixChallengePasswordClassPath.py upgrade script has
been moved into base/server/upgrade/10.10.4 folder.
https://bugzilla.redhat.com/show_bug.cgi?id=1664435
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/2856e5a7d902f0b93997724eab3ac3fc06ea6552">2856e5a7</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2021-02-08T14:13:53-06:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Fix PKIClient usage in PKIIssuer
The PKIIssuer has been modified to close PKIClient objects
explicitly using try-with-resources to avoid excessive open
connections.
https://bugzilla.redhat.com/show_bug.cgi?id=1916686
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/6ee1f01dff4818d3149f89c2e1c0d9f49c2ad8cd">6ee1f01d</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2021-02-08T14:13:53-06:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Add SessionAuthentication for acmeServerCert
The acmeServerCert profile has been modified to use
SessionAuthentication instead of manual agent approval
to improve ACME cert enrollment performance.
https://bugzilla.redhat.com/show_bug.cgi?id=1916686
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/1a8de83c3c6ca0e60396c2a7e13ff9a960fe9748">1a8de83c</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2021-02-08T14:13:53-06:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Add ACME indexes for DS
Currently ACME indexes are defined in the CA's index.ldif so
when the CA is created the ACME indexes will be created as
well in the same DS backend. However, if later the ACME is
installed on a different DS backend, the ACME indexes need to
be created in that backend instead.
To simplify the installation process a new index.ldif has been
added to define the ACME indexes for DS. A new indextask.ldif
has been added as well to reindex an existing database.
In the future the ACME indexes may be removed from the CA's
index.ldif.
https://bugzilla.redhat.com/show_bug.cgi?id=1916686
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/c10d9655ffe87487477de6d04fe3f9a029c7c475">c10d9655</a></strong>
<div>
<span>by Alexander Scheel</span>
<i>at 2021-02-08T14:13:53-06:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Add RSA-OAEP support to SecurityDataProcessor
org.mozilla.jss.netscape.security.util.WrappingParams in JSS has an
shortcoming that it believes all RSA is RSA-PKCS1v1.5 and additionally,
that anything that isn't a EC key is RSA. :-)
Read the value of keyWrap.useOAEP to determine whether to override the
secret key wrapping algorithm with OAEP, prior to using and storing the
wrapping parameters.
Signed-off-by: Alexander Scheel <ascheel@redhat.com>
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/25e0dc007d0533f219fcdb16eb2be8562ffff562">25e0dc00</a></strong>
<div>
<span>by Alexander Scheel</span>
<i>at 2021-02-08T14:13:53-06:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Make CryptoUtil respect FIPS Status
Signed-off-by: Alexander Scheel <ascheel@redhat.com>
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/7ae88d5ba7918bf01dd6d5deee6109129456a77d">7ae88d5b</a></strong>
<div>
<span>by Alexander Scheel</span>
<i>at 2021-02-08T14:13:53-06:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Add OAEP support to pki client-cert-request
Signed-off-by: Alexander Scheel <ascheel@redhat.com>
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/22ab633b355c2465456e2e4080449d85c775dbc1">22ab633b</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2021-02-11T19:32:08-06:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Clean up tools tests
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/a01d3bad7807de3949d008d1f6b3724cf06473f7">a01d3bad</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2021-02-16T12:30:19-06:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Fix exception message in PKIServer.webapp_undeploy()
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/a36739aca0460d7b0502653c4c715d613376db12">a36739ac</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2021-02-16T12:30:35-06:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Add pki <subsystem>-deploy/undeploy
The ACMEDeployCLI and ACMEUndeployCLI have been converted
into generic SubsystemDeployCLI and SubsystemUndeployCLI
that can be used by all subsystems.
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/19326dddca75cec72e239dedd65ec48ac8fd9a2f">19326ddd</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2021-02-17T13:07:52-06:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Add test for tpsclient
The TPS test has been modified to verify token format and
token enrollment operations using tpsclient.
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/758b64889ad81231fe44242aa6baaf9523403f96">758b6488</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2021-02-18T12:54:44-06:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Add --no-ntp in IPA tests
NTP is not necessary for testing IPA in containers
so it has been disabled.
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/bea5ea36b00689b6932bd61dcf824eac9ebed184">bea5ea36</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2021-02-18T13:52:11-06:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Fix COPR repo for TPS cloning test
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/16e6338a63af330620908724a61cb813f2f88886">16e6338a</a></strong>
<div>
<span>by Christina Fu</span>
<i>at 2021-02-22T14:00:57-08:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">userOAEP erronously enabled in ServerKeygenUserKeyDefault.java
This patch fixes an error in ServerKeygenUserKeyDefault.java where
userOAEP is erronously enabled regardless of the CS.cfg config setting
for keyWrap.useOAEP
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/21735b429228bef5e4d56ad154685d4942e9fe25">21735b42</a></strong>
<div>
<span>by jmagne</span>
<i>at 2021-02-22T14:16:12-08:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">pkispawn fails against 389-ds 1.4.3.19 #3458 (#3465)
Add suggested patch from stanislavlevin to solve this issue.
Also add f34 to the ipa tests,this time really add the tests.
Upon further review, back out of f34 tests until the infractructure
supports it.
Also hardcode tomcat app setting in spec file for the moment to
avoid possible glitches on certain platform.
Co-authored-by: Jack Magne <jmagne@localhost.localdomain></pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/445b3816ab916275629af5b6f6537e98e65b23cf">445b3816</a></strong>
<div>
<span>by dependabot[bot]</span>
<i>at 2021-02-23T09:11:29-06:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Bump jackson-databind from 2.10.1 to 2.10.5.1
Bumps [jackson-databind](https://github.com/FasterXML/jackson) from 2.10.1 to 2.10.5.1.
- [Release notes](https://github.com/FasterXML/jackson/releases)
- [Commits](https://github.com/FasterXML/jackson/commits)
Signed-off-by: dependabot[bot] <support@github.com></pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/d9e8b3ed798f0671904d1db61eead1b5e5741bb5">d9e8b3ed</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2021-02-23T09:11:29-06:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Update doc for installing PostgreSQL JDBC driver
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/5b5ddd5d736fd719cc94a159af392fff91a734c7">5b5ddd5d</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2021-02-23T09:15:40-06:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Update version number to 10.10.5
</pre>
</li>
</ul>
<h4>8 changed files:</h4>
<ul>
<li class="file-stats">
<a href="#ecae19c77a082e8b0487ab1eb8428f56f72e4341">
<span class="new-file">
+
.github/workflows/acme-tests.yml
</span>
</a>
</li>
<li class="file-stats">
<a href="#59aa675277e0d680e6ce78ba8f1b1e1d9918a617">
.github/workflows/ca-tests.yml
</a>
</li>
<li class="file-stats">
<a href="#1ef4ca516abc68d9dded3e330ec5c9a546d313f4">
.github/workflows/ipa-tests.yml
</a>
</li>
<li class="file-stats">
<a href="#1f5479b96d388bf5ea248b689c8d27f6e6565a4f">
.github/workflows/kra-tests.yml
</a>
</li>
<li class="file-stats">
<a href="#b0c8c439fb8797a70835207888b7917a361db129">
.github/workflows/ocsp-tests.yml
</a>
</li>
<li class="file-stats">
<a href="#e917c7a1acef149c48724bffc3c116280232a0f3">
.github/workflows/python-tests.yml
</a>
</li>
<li class="file-stats">
<a href="#366cdbd6e405218760f06f85df3039b2809dcb64">
.github/workflows/qe-tests.yml
</a>
</li>
<li class="file-stats">
<a href="#c7c6f24a599351c849a0dc534d96050b8134603a">
.github/workflows/tks-tests.yml
</a>
</li>
</ul>
<h5>The diff was not included because it is too large.</h5>
</div>
<div class="footer" style="margin-top: 10px;">
<p style="font-size: small; color: #666;">
—
<br>
<a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/compare/45754068a5c44a6045f1ceea3cfef5fc9db39a01...5b5ddd5d736fd719cc94a159af392fff91a734c7">View it on GitLab</a>.
<br>
You're receiving this email because of your account on salsa.debian.org.
If you'd like to receive fewer emails, you can
adjust your notification settings.
</p>
</div>
</body>
</html>