<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN" "http://www.w3.org/TR/REC-html40/loose.dtd">
<html lang="en">
<head>
<meta content="text/html; charset=US-ASCII" http-equiv="Content-Type">
<title>
GitLab
</title>
<style>img {
max-width: 100%; height: auto;
}
</style>
</head>
<body>
<div class="content">
<h3>
Timo Aaltonen pushed to branch upstream
at <a href="https://salsa.debian.org/freeipa-team/dogtag-pki">FreeIPA packaging / dogtag-pki</a>
</h3>
<h4>
Commits:
</h4>
<ul>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/bce94aeab6e61cdecaef4b854ce398df8675faf4">bce94aea</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2020-11-20T17:32:30-06:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Update version number to 10.11.0-alpha1
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/a6a8599ef6b9fe168eff12801820d0e0486f423e">a6a8599e</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2020-11-30T09:22:10-06:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Add CA test
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/1a97606051b67bffbd1215100e53de604d4fe185">1a976060</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2020-11-30T09:22:10-06:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Add KRA test
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/91afea6170aa9dbc541b9e13306caf33625df747">91afea61</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2020-11-30T09:22:10-06:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Add OCSP test
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/9c6b1cd1851d7cd3ff14bd39129780f7cdd9d1cd">9c6b1cd1</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2020-11-30T09:22:10-06:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Add TKS test
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/587016176a4b5e856d6a4f2f9b67f7714e001337">58701617</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2020-11-30T09:22:10-06:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Add TPS test
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/a6fe0e3eb15441cecbed260e836f6acae112766c">a6fe0e3e</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2020-11-30T09:22:10-06:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Add Python test
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/c8e8ca6ba597c37184cb5215e03d88a25f7551d4">c8e8ca6b</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2020-11-30T09:22:10-06:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Update status badges in README.md
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/9dfc1f25247825b56532e7872e9a7e065c1c0c1c">9dfc1f25</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2020-11-30T19:23:42-06:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Fix pki-server cert-fix
In commit e680746ac4926367aef5c3ae3404dbb23c07eb19 the
ResourceMessage was modified to no longer include empty
attributes. Because of this in certain cases the server
might return a CertEnrollmentRequest object (which extends
ResourceMessage) without the Input or Output attributes,
which broke the pki-server cert-fix command.
To fix the problem, the CertEnrollmentRequest.from_json()
has been modified to check whether the response contains
Input and Output before parsing the attributes.
https://bugzilla.redhat.com/show_bug.cgi?id=1897120
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/62a26c84b71b90b60153b02ac161de6a9dfa4ccc">62a26c84</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2020-11-30T19:53:34-06:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Update default base dir in PKISubsystem
The PKISubsystem has been modified to use <instance>/<subsystem>
as the base directory by default.
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/d07e710d7eda58b0d02a62bb6f3757e689130e1d">d07e710d</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2020-11-30T19:53:34-06:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Refactor LDAPConfigurator.importFile()
The LDAPConfigurator.importFile() has been converted into
importLDIF() which returns the imported LDIF records.
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/53fb4ff56fbbbaa8a1e5803f77cfb62b8df693a0">53fb4ff5</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2020-11-30T19:53:34-06:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Rename LDAPConfigurator.createVLVIndexes()
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/1909fae83c44d90ec154306a6a75766b2ab6459d">1909fae8</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2020-11-30T19:53:34-06:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Refactor LDAPConfigurator.rebuildVLVIndexes()
The LDAPConfigurator.rebuildVLVIndexes() has been converted
into reindexVLVs() which utilizes the importLDIF().
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/cef8ce79dfe9fa195a7ce74d1c5133d4118d6796">cef8ce79</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2020-11-30T19:53:34-06:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Move CertUtils.createCertInfo()
The CertUtils.createCertInfo() has been moved into
CertificateAuthority.
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/bbcd0d4331449f6629a07accd3733d7530043ee8">bbcd0d43</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2020-11-30T19:53:34-06:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Clean up CertificateAuthority.init()
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/a8a9f61a099f8d9be850232eed1672e901155551">a8a9f61a</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2020-11-30T20:09:21-06:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Rename CA's SigningUnit to CASigningUnit
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/dcf6fbfab1807229f795bf2231d9cc9f4ff0107f">dcf6fbfa</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2020-11-30T20:09:22-06:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Rename OCSP's SigningUnit to OCSPSigningUnit
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/a62efcaac2ab2159e862a33a4541fe68301b3e25">a62efcaa</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2020-11-30T20:09:23-06:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Move ISigningUnit to pki-server
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/3cea062795eeed3a2808e492c0f98f41b803101c">3cea0627</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2020-11-30T20:12:28-06:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Rename ISigningUnit to SigningUnit
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/47751a924eac6674523b31979da3a479c0d41b6d">47751a92</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2020-11-30T21:46:19-06:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Convert SigningUnit into base class
The SigningUnit has been converted into a base class which
provides the common code for CASigningUnit and OCSPSigningUnit.
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/1167082c8b17a91a6d718e7369b88b07e8e5c31a">1167082c</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2020-11-30T21:46:33-06:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Merge ConsoleLog into ConsoleError
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/60bd08ba6cc23a7badfb386d7efce5b867f762d5">60bd08ba</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2020-12-01T18:13:26-06:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Clean up log messages in KRAPolicy
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/7d0940c209a57fb7e8b008a33021f10e66ee64f6">7d0940c2</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2020-12-01T18:14:12-06:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Replace SystemEvent with System.err.println()
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/7f429199ddd9454d419e95e0b769a9dd01cd5052">7f429199</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2020-12-01T18:14:25-06:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Remove unused SystemEventFactory
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/ffde646e5b98e860c4f971c4878ec55d47801b0e">ffde646e</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2020-12-01T18:14:46-06:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Remove unused SystemEvent
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/bd633512a7c78e7acee0a3816a8a4b7e4dfa36c7">bd633512</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2020-12-01T18:18:07-06:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Replace ConsoleError with System.err.println()
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/ae673db0361b03417fcab44c384c1415adf410f9">ae673db0</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2020-12-01T18:43:57-06:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Refactor CertInfoProfile constructor
The CertInfoProfile constructor has been modified to take
an IConfigStore object.
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/49599c44a35e809cfc1036f396254631fff4031c">49599c44</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2020-12-01T18:45:49-06:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Move CertUtils.createCertRecord() to CertificateAuthority
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/cd99a648d1f1db5dfdd5820ea9d4b97ac7cb166b">cd99a648</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2020-12-01T19:29:54-06:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Move CertUtils.initLocalRequest() to CertificateAuthority
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/24480717f92f1eee70eb1e3d526a1701cae84012">24480717</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2020-12-01T19:29:54-06:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Move CertInfoProfile to pki-ca
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/3d9540275dae940a4f963e486c6822f43774522a">3d954027</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2020-12-02T13:49:22-06:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Add subordinate CA test
A new CI test has been added to verify subordinate CA
installation.
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/2de91738b679c2847e229dd0fa5453f84807df87">2de91738</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2020-12-02T16:22:39-06:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Update default metadata.conf
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/b7bd0322fbfe46963066a54a79185ee20f18d170">b7bd0322</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2020-12-02T17:49:34-06:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Add CA clone test
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/257b42001f54ba44cbf08560becd077c05acc5de">257b4200</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2020-12-02T17:57:46-06:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Refactor ServerXml.load()
The ServerXml.load() has been modified to determine the
connector type based on the "scheme" attribute instead of
"name" which is not guaranteed to be available.
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/8791f5d79b267a287bd2882012e01384bbc6b198">8791f5d7</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2020-12-02T17:57:51-06:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Replace PKIInstance constructor
The PKIInstance constructor invocations have been replaced
with PKIServerFactory.create() so they will return either
a PKIServer or a PKIInstance object depending on the actual
instance.
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/19f066d0a1611d764b9d7eaef26eb2835db6e094">19f066d0</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2020-12-04T10:34:27-06:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Add admin verification
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/a00bd2350f75d1e7f8cf943c8d3956003de95eec">a00bd235</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2020-12-07T13:04:45-06:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Fix KRA/OCSP installation with external certs on HSM
The NSSDatabase.export_cert_from_db() has been modified
to use the fullname when exporting a cert from HSM.
The MigrateCLI.migrate_nssdb() has also been modified
to split the token name from the nickname properly.
https://bugzilla.redhat.com/show_bug.cgi?id=1890639
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/1cf7f72b72c49148510782bfc22ad409b8b6e1b3">1cf7f72b</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2020-12-07T15:15:07-06:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Merge usn.ldif into database.ldif
The code that enables the USN plugin has been merged into
LDAPConfigurator.initDatabase().
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/6afc2202f40b8750905018f9e63f50d130efc94d">6afc2202</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2020-12-07T15:15:07-06:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Move ou=csusers,cn=config creation
The code that creates ou=csusers,cn=config has been moved into
LDAPConfigurator.initDatabase().
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/edd3bcf6db2993c22eac7e7c3ae2259baccb936c">edd3bcf6</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2020-12-07T15:43:30-06:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Add cert extension config for CA signing cert
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/6ff7e303dd0fec64c3f2475fd85882f5d57b722e">6ff7e303</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2020-12-07T15:43:30-06:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Add test for installing CA with external signing cert
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/b0c30fddcd6f1357e6513a32725fbfa432c8523a">b0c30fdd</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2020-12-07T16:00:28-06:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Add LDAPConfigurator.params
The code that generates the customization parameters in
LDAPConfigurator.customizeFile() have been moved into the
constructor.
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/3c87a159d50f400960d47aa6e2a279cbf0ec8beb">3c87a159</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2020-12-07T16:00:28-06:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Remove unused Configurator.importLDIFS()
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/af71ed1add6dee35302095d2d0c69a0956bc24cd">af71ed1a</a></strong>
<div>
<span>by Christina Fu</span>
<i>at 2020-12-07T18:11:20-08:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Bug 1392616 - KRA key recovery cli kra-key-retrieve generates an invalid p12 file
This patch is to add back the try/catch block that was in place back in
DOGTAG_10_5_BRANCH. Initially I was going to just remove the two lines:
queue.processRequest(request);
queue.markAsServiced(request);
however, it's unclear to me if there is any scenario where they will be needed.
I'm leaving them the same as before.
Also, the reported issue might be misunderstanding due to unclear documentation.
>From the code, it seems the only way to download p12 is through the use
of a template file, which I will give example in the bug.
Man page has been updated as well in the area of PKCS12 key recovery.
fixes: https://bugzilla.redhat.com/show_bug.cgi?id=1392616
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/e966b3dab5f823d7389fc7d04247a0b265d88d3d">e966b3da</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2020-12-07T22:21:03-06:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Add SubsystemDBVLVFindCLI
The code that lists the VLV indexes in KRADBVLVFindCLI and
TPSDBVLVFindCLI has been converted into SubsystemDBVLVFindCLI.
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/7a3ec565e0e09b6085ba33e69fa0553111d1f278">7a3ec565</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2020-12-07T22:21:03-06:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Add pki-server <subsystem>-db-vlv-find
The pki-server <subsystem>-db-vlv-find has been added
to wrap SubsystemDBVLVFindCLI.
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/6b792079e95bd7791efd2f8896d3fcb879150a49">6b792079</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2020-12-07T22:21:03-06:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Replace pki-server kra-db-vlv-find
The pki-server kra-db-vlv-find has been replaced with
pki-server <subsystem>-db-vlv-find.
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/432903918d35b0f4c3ec9ed71a72f8d6b8c378bb">43290391</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2020-12-07T22:21:03-06:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Replace pki-server tps-db-vlv-find
The pki-server tps-db-vlv-find has been replaced with
pki-server <subsystem>-db-vlv-find.
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/c294327f5cec4cb3adf62d9147d46b0d6d70dc54">c294327f</a></strong>
<div>
<span>by Christina Fu</span>
<i>at 2020-12-08T10:33:21-06:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Bug1875563-part2-auditProfileUpgrade
This patch addresses the issue where when caSignedLogCert.cfg was renamed
caAuditSigningCert where
* The profileIDMapping and profileSetIDMapping params in the following
profile still contains the old names:
base/ca/shared/conf/caAuditSigningCert.profile
* at renewal time, the profile will no longer be available
The solution provided is to
* correct the two mapping param names in caAuditSigningCert.profile
* re-enable caSignedLogCert.cfg (but kept invisible)
fixes https://bugzilla.redhat.com/show_bug.cgi?id=1875563
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/b95f926215177b2fb152369f56391b4f11df7fcc">b95f9262</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2020-12-08T11:41:57-06:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Add SubsystemDBVLVAddCLI
The code that adds the VLV indexes in KRADBVLVAddCLI and
TPSDBVLVAddCLI has been converted into SubsystemDBVLVAddCLI.
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/1c403e95d281705509b4f9565ab1994543993473">1c403e95</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2020-12-08T11:42:14-06:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Add pki-server <subsystem>-db-vlv-add
The pki-server <subsystem>-db-vlv-add has been added
to wrap SubsystemDBVLVAddCLI.
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/c7051d8cbc045740c497f9b2d9f5d2d65f2426ae">c7051d8c</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2020-12-08T11:42:30-06:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Replace pki-server kra-db-vlv-add
The pki-server kra-db-vlv-add has been replaced with
pki-server <subsystem>-db-vlv-add.
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/d3761d1bae4da78fd18e4b7a15fa962585a69041">d3761d1b</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2020-12-08T11:42:50-06:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Replace pki-server tps-db-vlv-add
The pki-server tps-db-vlv-add has been replaced with
pki-server <subsystem>-db-vlv-add.
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/1dcd21aaee35da37f0cc267caa1f11129665a0f9">1dcd21aa</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2020-12-08T12:11:00-06:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Move AddProfileCaAuditSigningCert.py
The upgrade script for adding a new audit signing cert and
deprecating the old audit signing cert has been moved from
10.10.0 to 10.10.2 to ensure that the changes will be
applied properly.
https://bugzilla.redhat.com/show_bug.cgi?id=1875563
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/71487da166fbe0a6c9248c02a833c89117220e46">71487da1</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2020-12-08T14:41:59-06:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Add tools tests workflow
The PKICertImport test has been moved into a new tools
tests workflow to shorten the build time without reducing
test coverage.
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/3df33f3eb851027ec2c50fffc1b8c06151a8709b">3df33f3e</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2020-12-08T15:15:46-06:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Fix pylint issue in AddProfileCaAuditSigningCert.py
https://bugzilla.redhat.com/show_bug.cgi?id=1875563
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/95e694841ed7a42d9235ea4d1fbf865aef42ffb4">95e69484</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2020-12-08T15:16:02-06:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Add SubsystemDBVLVDeleteCLI
The code that deletes the VLV indexes in KRADBVLVDeleteCLI
and TPSDBVLVDeleteCLI has been converted into
SubsystemDBVLVDeleteCLI.
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/ceecc6dd54ab218a76054e25df2fb443a965a46f">ceecc6dd</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2020-12-08T15:16:02-06:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Add pki-server <subsystem>-db-vlv-del
The pki-server <subsystem>-db-vlv-del has been added to
wrap SubsystemDBVLVDeleteCLI.
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/8598316f1068a2cca1063bd43bd11c006576d980">8598316f</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2020-12-08T15:16:02-06:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Replace pki-server kra-db-vlv-del
The pki-server kra-db-vlv-del has been replaced with
pki-server <subsystem>-db-vlv-del.
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/ad76abbc44242e7386ed413b7ed22a176eb5625f">ad76abbc</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2020-12-08T15:16:02-06:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Replace pki-server tps-db-vlv-del
The pki-server tps-db-vlv-del has been replaced with
pki-server <subsystem>-db-vlv-del.
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/d7f3b757d2cff3ae31e9634d723dd22f8e0c07d1">d7f3b757</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2020-12-08T20:20:22-06:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Add SubsystemDBVLVReindexCLI
The code that rebuilds the VLV indexes in KRADBVLVReindexCLI
and TPSDBVLVReindexCLI has been converted into
SubsystemDBVLVReindexCLI.
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/f41614883d45bfbdb2c468d04ac3dc395f327e2c">f4161488</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2020-12-08T20:20:29-06:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Add pki-server <subsystem>-db-vlv-reindex
The pki-server <subsystem>-db-vlv-reindex has been added
to wrap SubsystemDBVLVReindexCLI.
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/94db84378e1a268b097346064df79d7b0a9f9d5b">94db8437</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2020-12-08T20:20:30-06:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Replace pki-server kra-db-vlv-reindex
The pki-server kra-db-vlv-reindex has been replaced with
pki-server <subsystem>-db-vlv-reindex.
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/52db867786d95d8bc4a7dfb87b36b98d30d7f026">52db8677</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2020-12-08T20:20:31-06:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Replace pki-server tps-db-vlv-reindex
The pki-server tps-db-vlv-reindex has been replaced with
pki-server <subsystem>-db-vlv-reindex.
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/57c1c13bbedcbfe95ff72293329a92edb7664127">57c1c13b</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2020-12-09T14:37:39-06:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Replace KRADBCLI with SubsystemDBCLI
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/0852834b307d1b7c6e63927064d6376221d385aa">0852834b</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2020-12-09T14:37:40-06:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Replace TPSDBCLI with SubsystemDBCLI
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/a341e97f6ec3394b3f8fc3737152ba25a919fe95">a341e97f</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2020-12-09T16:20:31-06:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Fix CA install doc
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/a2836b4c77fb1c1fa368c5f319514dd1ae718c81">a2836b4c</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2020-12-09T20:39:57-06:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Refactor PKISubsystem.init_database() (part 1)
The options to set up database manager and VLV indexes in
PKISubsystem.init_database() have been removed since those
operations will be executed regardless of the options.
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/24f4f0a2f587c4d893668bfdf4ab722ff727fe97">24f4f0a2</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2020-12-09T20:40:33-06:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Refactor PKISubsystem.init_database() (part 2)
The code that sets up database manager and VLV indexes
have been moved out of PKISubsystem.init_database().
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/6dbd65fae69f51fa222cab42609f332fe82cde8a">6dbd65fa</a></strong>
<div>
<span>by dpuniaredhat</span>
<i>at 2020-12-11T18:31:08+05:30</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Bugzilla automation 1392616 kra key recovery cli generates .p12 file (#3409)
Signed-off-by: Deepak Punia <dpunia@redhat.com></pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/9eee53826000bf1fcf8ac910882c1920106abdf3">9eee5382</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2020-12-14T12:04:55-06:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Refactor NSSDatabase.addExtensions()
The NSSDatabase.addExtensions() has been modified to take
a temporary directory to store files containing the data
for the new extension being added.
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/e7a50c98921f158edad17593232db14c27abbe37">e7a50c98</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2020-12-14T12:04:55-06:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Add support for OCSPNoCheckExtension in pki nss-cert
The NSSDatabase and NSSExtensionGenerator have been modified
to support OCSPNoCheckExtension such that pki nss-cert commands
can generate requests and certificates with this extension.
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/e00863f8efa6dc4587f4b0186816bc0620938b71">e00863f8</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2020-12-14T12:04:55-06:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Add support for ocspResponder extended key usage in pki nss-cert
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/e1bcc99f52f0b7a3ca54f4201f498113672cfc49">e1bcc99f</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2020-12-14T12:04:55-06:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Add --serial parameter for pki nss-cert-issue
The pki nss-cert-issue has been modified to provide an
optional parameter to specify a serial number for the
new certificate.
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/50a37f088db27381291ee70abbc5127bfd90932d">50a37f08</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2020-12-14T12:04:55-06:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Add cert extension configs for CA certs
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/4da75450659e7c03566ffce33412bed517bc3b50">4da75450</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2020-12-14T12:04:55-06:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Add test for installing CA with existing certs
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/94c82751120cf51d3b8cdabea42f3691aae52d7f">94c82751</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2020-12-14T13:29:43-06:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Add PKISubsystem.configure_security_domain()
The code that configures the security domain parameters has
been moved into PKISubsystem.configure_security_domain().
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/c25b438024e4a0f3b6e91e359bd0aa34c25ea4e9">c25b4380</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2020-12-14T20:29:01-06:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Fix SystemCertClient creation
The calls to SystemCertClient constructor have been modified
to provide the subsystem name. This is required to run the
healthcheck tool on a KRA installed separately from the CA.
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/592ad26b971213ef00cbf92062e15ef7f47d3365">592ad26b</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2020-12-14T20:29:01-06:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Add test for installing KRA on separate instance
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/1d064b25aac34eb59040cf9d3e6ee1ddcf84f95d">1d064b25</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2020-12-16T08:54:13-06:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Clean up CI tests
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/e1d79587aef0b450162010a8f5705586efe43798">e1d79587</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2020-12-16T08:55:41-06:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Revert SystemCertClient changes
The commit c25b438024e4a0f3b6e91e359bd0aa34c25ea4e9 broke
IPA vault, so it has been reverted. The test for installing
KRA on a separate instance has been modified to disable the
healthcheck test.
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/0a7cb8d03d7dada171aeb88fdda16f968d741f01">0a7cb8d0</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2020-12-17T09:46:39-06:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Fix python3-pki dependency
The python3-pki package has been modified to depend on
python3-ldap since it is needed by pki Python module.
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/a82988e6a9cd23dede0347c925e430e585d67744">a82988e6</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2020-12-17T10:16:43-06:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Add log messages in MainCLI.loadPasswordConfig()
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/ac8f64a5b2cae39680dbe31921ea06edd26fe19c">ac8f64a5</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2020-12-17T10:53:04-06:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Add log messages in PlainPasswordFile.init()
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/f667467785b1c27fe0721d8d16b72fddc331b76a">f6674677</a></strong>
<div>
<span>by Christina Fu</span>
<i>at 2020-12-21T15:40:02-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Bug1664435-SCEP ChallengePassword Class not found
This patch, together with the fix for "Bug1908541 jss broke SCEP - missing PasswordChallenge class", addresses the issue where the class PasswordChallenge cannot be loaded due to Class Loader differences.
jss is installed in the common CL (/usr/share/pki/server/common/lib/jss4.jar)
the servlet classes are in webapp CL (/usr/share/pki/server/webapps/pki/WEB-INF/lib/pki-cms.jar)
In addition, this patch adds the upgrade sscript for the new path of ChallengePassword class which has been moved from pki into JSS.
fixes https://bugzilla.redhat.com/show_bug.cgi?id=1664435
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/27ddb1db47f2154763353d8ce7839587843125ee">27ddb1db</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2021-01-04T09:31:11-06:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Fix log messages in MainCLI.loadPasswordConfig()
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/fd926efc7d8d2e2dba359eb4c94dff6f8960002a">fd926efc</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2021-01-04T09:35:01-06:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Replace sslserver variable in configuration.py
The variable that stores the SSL server cert info in configuration.py
has been replaced with a map that stores all system certs info.
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/f3070f31f1e25e22579191a966b22068f9bb7da1">f3070f31</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2021-01-04T09:37:26-06:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Refactor OCSPConfigurator.configureCloneRefresh()
The code that configures ocsp.store.defStore.refreshInSec param
in OCSPConfigurator.configureCloneRefresh() has been moved into
subsystem_layout.py.
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/1492687220331379331cdab141d3d858bcf83794">14926872</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2021-01-04T09:37:37-06:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Refactor Configurator.getSubsystemCert()
The Configurator.getSubsystemCert() has been converted into
CASystemCertClient.getSubsystemCert().
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/fbe8be02b8d514f6d6cf16fbdb3bcea4c6578f32">fbe8be02</a></strong>
<div>
<span>by Pritam Singh</span>
<i>at 2021-01-04T13:13:45-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Added_boolean_fix_for_fips_check
Signed-off-by: Pritam Singh <prisingh@redhat.com>
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/a400653b293bde5c634b340f863b4dd1b9fa3c8a">a400653b</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2021-01-04T13:04:43-06:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Add pki nss-cert-show
The pki nss-cert-show has been added to display a cert in
NSS database.
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/35308631f8e2473994d5e6e7a3f2e123a13c4f5c">35308631</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2021-01-04T13:05:15-06:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Add pki ca-cert-subsystem-show
The pki ca-cert-subsystem-show has been added to display the
subsystem cert in CA.
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/29bd3da10b46e542ab79c33ef428540f983b62d1">29bd3da1</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2021-01-04T13:05:17-06:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Add pki ca-cert-subsystem-export
The pki ca-cert-subsystem-show has been added to export the
subsystem cert in CA.
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/09a046a39564397b55980f7b5814933b8a900c8c">09a046a3</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2021-01-04T13:24:21-06:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Disable ipa-healtcheck test
The ipa-healthcheck has been failing due to this issue:
https://github.com/freeipa/freeipa-healthcheck/issues/163
The ipa-healthcheck test has temporarily been disabled to
allow other IPA tests to pass.
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/da0abd3d2c425f5702b2e0acfcb0855c6d5724b3">da0abd3d</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2021-01-04T13:24:53-06:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Refactor Configurator.setupUser() (part 1)
The code that configures the groups for subsystem user in
Configurator.setupUser() has been moved into configuration.py.
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/3dbd56d4bc9ed995de9c7388d224916bc3597e1b">3dbd56d4</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2021-01-04T13:24:53-06:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Refactor Configurator.setupUser() (part 2)
The code that configures the cert for subsystem user in
Configurator.setupUser() has been moved to configuration.py.
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/e0cd36afa88e003c76da02f35fcc4383d89aac2b">e0cd36af</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2021-01-04T13:24:53-06:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Refactor Configurator.setupUser() (part 3)
The code that creates the subsystem user in
Configurator.setupUser() has been moved into configuration.py.
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/699b0bb770320930c1a208cf18bc6a59f4985e16">699b0bb7</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2021-01-04T16:18:35-06:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Clean up ipa-tests.yml
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/6f448d9ab7eab2f46e44f7f693975a3d8d6a8b1c">6f448d9a</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2021-01-05T11:29:00-06:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Fix issuing CA configuration during installation
The configuration.py has been modified to store the issuing CA
parameters in all cases except when installing CA with external
certs and standalone KRA/OCSP. This is necessary to fix KRA
installation with external certs.
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/29d3423df3276451ea902b7a122d22a34e3c789b">29d3423d</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2021-01-05T11:29:00-06:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Add support for emailProtection extended key usage in pki nss-cert
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/cad7d4d5ce8ce35bfa2ed66b468980e87f0b2582">cad7d4d5</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2021-01-05T11:29:00-06:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Add cert extension configs for KRA certs
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/5ccfa106c4944c3f791ba2421863d26427b50c2c">5ccfa106</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2021-01-05T11:29:00-06:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Add test for installing KRA with external certs
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/7b461e5c60b22be2544a389df3b37a2c7e149141">7b461e5c</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2021-01-05T17:24:07-06:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Add test for installing IPA clone
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/cebf2a70114b00d5e91c158ca3485e18f92282af">cebf2a70</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2021-01-05T19:01:51-06:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Fix preop.ca.pkcs7 for external and standalone installations
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/d1b91cc6e484ca1665aec5513224c8d27c8fa753">d1b91cc6</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2021-01-06T19:38:08-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Disable GPG check in CI
The GPG check has been disabled due to the following issue
during build dependency installation on F32:
Package libuv-1.40.0-1.fc32.x86_64.rpm is not signed
The downloaded packages were saved in cache until the next successful transaction.
You can remove cached packages by executing 'dnf clean packages'.
Error: GPG check FAILED
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/c3c1ea111db95d70b127a72a098535021b3bd656">c3c1ea11</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2021-01-06T21:01:37-06:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Fix KRA/OCSP installation with external certs on HSM
Previously pkispawn did not update serverCertNick.conf during
KRA or OCSP installation with external certs or standalone
installation. If the SSL server cert was stored in HSM the file
would not have the token name so the installation would fail.
To fix the problem the deployment scriptlet has been modified
to store the SSL server cert nickname and token name in
serverCertNick.conf in all installation cases.
https://bugzilla.redhat.com/show_bug.cgi?id=1890639
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/41f5d031ba16e6cb74aa871d5a15e5572830d953">41f5d031</a></strong>
<div>
<span>by Alexander Scheel</span>
<i>at 2021-01-07T15:35:10-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Remove dependency on jakarta-commons-httpclient
This package has been deprecated in Fedora and isn't actually required
by our build system. Note that, while apache-commons-httpclient actually
provides the exception removed from PKIConnection. Note however, that
ConnectTimeoutException inherits from IOException and thus is redundant.
Signed-off-by: Alexander Scheel <ascheel@redhat.com>
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/c45a9407f3d1e597a17a4ccc7f60b8114ccff39e">c45a9407</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2021-01-07T20:35:57-06:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Clean up CA clone test
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/d9025c13333ff4010f9ee850a3034349e03481f4">d9025c13</a></strong>
<div>
<span>by Alexander Scheel</span>
<i>at 2021-01-11T11:36:14-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Update usage for CRMFPopClient -y option
Signed-off-by: Alexander Scheel <ascheel@redhat.com>
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/28a262c6c6b87b4111ff6c051ff6c5a4bf735b7f">28a262c6</a></strong>
<div>
<span>by Alexander Scheel</span>
<i>at 2021-01-11T11:36:23-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Fix usage for CMCResponse -d
Signed-off-by: Alexander Scheel <ascheel@redhat.com>
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/a2a5ec19aea1128cdebd3fb5378a8e19d4a0e7b1">a2a5ec19</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2021-01-11T11:32:19-06:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Move KRAAdminServlet to pki-kra
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/27d9fc82ec18d362b6aaf4dd9ef31cf20a12d0c5">27d9fc82</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2021-01-11T11:32:19-06:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Move OCSPAdminServlet to pki-ocsp
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/f5afb573a99fc212cfba9f9dfde2257cfdfaee38">f5afb573</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2021-01-11T11:32:19-06:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Move get_cert_chain() into PKIDeployer
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/91f2aad140f03a908d78d0a5a34dcc9e42291233">91f2aad1</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2021-01-11T11:32:19-06:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Move get_cert_id() into PKIDeployer
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/b4b6a17fe3b36a343b63e1a04d7f2b584bd6b11b">b4b6a17f</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2021-01-11T11:32:19-06:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Move import_system_cert_request() into PKIDeployer
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/0949ae9fd35231ec4d498c385a34038f718c3dbb">0949ae9f</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2021-01-11T11:32:19-06:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Merge import_ca_signing_csr()
The import_ca_signing_csr() has been merged into
PKIDeployer.import_system_cert_request().
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/1ae81a848443b6b1a9407f65287e42edd870c04d">1ae81a84</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2021-01-11T11:32:19-06:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Move import_system_cert_requests() into PKIDeployer
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/f1bfe6b8344a778576925fe19f6e887917fb9982">f1bfe6b8</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2021-01-11T11:32:19-06:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Move import_ca_signing_cert() into PKIDeployer
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/93f20950ec1dddc82d0349ada2e03cf6ad55b256">93f20950</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2021-01-11T11:32:19-06:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Move import_system_cert() into PKIDeployer
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/fb2f059872f364572e24f601e3f8acfc50b035ef">fb2f0598</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2021-01-11T11:32:19-06:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Move import_admin_cert() into PKIDeployer
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/ce511ad855017261bf7d25b8fd4acbd774927947">ce511ad8</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2021-01-11T11:32:19-06:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Move import_certs_and_keys() into PKIDeployer
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/3894a2629ada3effb21255a58dcb3f85b76ef6d6">3894a262</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2021-01-11T11:32:19-06:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Move import_cert_chain() into PKIDeployer
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/d8af0f2b9b6b89e97941d488a39645a1bd96f8eb">d8af0f2b</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2021-01-11T11:32:19-06:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Move import_system_certs() into PKIDeployer
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/5149e9b5d68805e2cd6d3283cffbee8ccfcb7f2e">5149e9b5</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2021-01-11T11:53:06-06:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Move configure_system_cert() into PKIDeployer
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/6feb9b514844d96215bad5611590e37948d18d4f">6feb9b51</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2021-01-11T15:22:13-06:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Move configure_system_certs() into PKIDeployer
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/96134d74ad7d129876f9ac624efabc086df7874a">96134d74</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2021-01-11T15:22:55-06:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Move update_system_cert() into PKIDeployer
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/86651f2d0758ea71d0d6ddb88048e181e0100785">86651f2d</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2021-01-11T15:26:59-06:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Move update_admin_cert() into PKIDeployer
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/4e4a4b01ceabc47bb4211f33c742c63e2110e328">4e4a4b01</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2021-01-11T15:27:01-06:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Move update_system_certs() into PKIDeployer
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/733eedc0dcfed5bdcbd61894a9150e9b306ef82f">733eedc0</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2021-01-11T15:30:22-06:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Move validate_system_cert() into PKIDeployer
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/d25ef1e70231a00534cfde525a1e796a8e860a00">d25ef1e7</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2021-01-11T15:50:59-06:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Move validate_system_certs() into PKIDeployer
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/85652776f68079c1d217b51188ee448aa1186a25">85652776</a></strong>
<div>
<span>by dpuniaredhat</span>
<i>at 2021-01-13T16:03:51+05:30</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">upstream qe pipeline fixes (#3429)
Pipeline fixed in this MR
1. topo-03-kra-bugzilla
2. installation_podman_acme-dp
Signed-off-by: Deepak Punia <dpunia@redhat.com></pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/b4f617c89157ac32e4a366b89e7ee87293205310">b4f617c8</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2021-01-13T10:20:40-06:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Add HSM support for pki nss-cert-request
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/29e2f729420388cdcc5b2d885a69530bc98b97bb">29e2f729</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2021-01-13T10:20:40-06:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Add HSM support for pki nss-cert-issue
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/fed017dd883707cb907b12f0ada5d5b96e4a47be">fed017dd</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2021-01-13T10:20:40-06:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Add HSM support for pki nss-cert-import
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/e4be93e10fc5621da5794678157ad1aa6951f666">e4be93e1</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2021-01-13T10:20:40-06:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Add test for PKI NSS CLI with and without HSM
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/7a2de9b77b5df846382142aab57faa6ffe0edb95">7a2de9b7</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2021-01-13T12:53:49-06:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Add test for installing OCSP with external certs
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/cd35b81cc85828e993378fc2279a5d67189bc417">cd35b81c</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2021-01-13T12:54:29-06:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Add test for installing ACME
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/ed1bbbdeec309419b79d2ff1bf442fb607962d7d">ed1bbbde</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2021-01-13T12:55:02-06:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Add test for installing KRA clone
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/130b5af4b017fd57f73599e0c4fbd4e442819f43">130b5af4</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2021-01-13T14:05:43-06:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Remove unused SystemConfigClient
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/41784233a0b564790c378fdcf01927047f07104e">41784233</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2021-01-13T14:05:43-06:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Remove unused CertificateInfo.updateConfig()
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/75d893119d3666c8739f6ceba43f28df3057b99d">75d89311</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2021-01-13T14:05:43-06:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Remove unused param in OCSPSigningUnit.init()
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/44b59dab3350e76ed37166280fad524998ffeba6">44b59dab</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2021-01-13T14:05:43-06:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Remove unused SystemConfigResource
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/db3fca20597e6deb26bee089994b4a8807204ae2">db3fca20</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2021-01-13T16:46:05-06:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Clean up CA clone test
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/5febfb6d8dd24d84d5ed438e1eb25aa383e070e9">5febfb6d</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2021-01-13T16:46:05-06:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Clean up KRA clone test
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/f33259aeb6c4a1967670022096af8d3ec4171575">f33259ae</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2021-01-13T16:48:40-06:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Clean up IPA clone test
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/05057f7c5f16a0cb6a6ec1b5a75bf5cd1dd81578">05057f7c</a></strong>
<div>
<span>by root</span>
<i>at 2021-01-14T10:18:59-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Modify PKI to use RSA-OAEP wrapping alg for RSA keys.
This first cut is a simple reworking any instances of
RSA wrapping in the code to use RSA-OAEP.
Code tested to work in software. Using an hsm, several
issues occur with respect to wrapping using AES sym keys
to wrap and unwrap RSA private keys.
This first attempt is to get the basic code out for review.
Subsequently, we can refine some of this code to allow things
to work better with the hardware hsm.
Make oeap configurable.
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/950bf76d9fa0c24058844c1b90e6ec853cc6d481">950bf76d</a></strong>
<div>
<span>by Alexander Scheel</span>
<i>at 2021-01-14T10:40:36-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Remove additional lines from CRMFPopClient usage
Resolves: rh-bz#1584550
Signed-off-by: Alexander Scheel <ascheel@redhat.com>
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/03981b0c276e35f261c733e81bb76bf9beab0307">03981b0c</a></strong>
<div>
<span>by Chandan Pinjani</span>
<i>at 2021-01-18T14:10:29+05:30</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Added BZ Automation for 1590942 & 1584550 (#3431)
[skip-ci]
Signed-off-by: Chandan Pinjani <cpinjani@redhat.com>
Co-authored-by: Chandan Pinjani <cpinjani@redhat.com></pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/7985861c674b7d49435a16d88252911ca8e0ea78">7985861c</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2021-01-19T11:23:35-06:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Fix indentations in qe-tests.yml
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/c2c8f9bd0f54cfdd11e363d146cecc5609b0744f">c2c8f9bd</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2021-01-19T11:23:37-06:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Update upload/download actions in qe-tests.yml
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/b1985fbebfadd62977b830cd64aa63a45d19fcf3">b1985fbe</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2021-01-20T09:38:48+10:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Add persistent option for ACME nonces
Previously ACME nonces were stored in ACME database, which
could generate a lot of database traffic and might not work
well in clustered environment due to replication latency.
To address the performance issue, the ACME engine has been
modified to store the nonces in memory by default, and provide
an option to store the nonces in the database if necessary.
The replication latency issue should be addressed using other
mechanisms (e.g. using static base URL in ACME directory).
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/8fcc847f85a954a8920af79768d134fa369fb7a8">8fcc847f</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2021-01-19T18:12:01-06:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Consolidate CI runner container build
The GitHub workflows have been modified to build the CI runner
container in the build job instead of test jobs.
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/dd3b53997f11d65a92f3dcaeb4d8fd7e73743fb2">dd3b5399</a></strong>
<div>
<span>by gswami90</span>
<i>at 2021-01-20T13:18:47+05:30</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Added test automation for BZ 1664435 (#3428)
Signed-off-by: Gaurav Swami <gswami@redhat.com></pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/ab8561c6d40810c0be7921282dc01b122353a63b">ab8561c6</a></strong>
<div>
<span>by Pritam Singh</span>
<i>at 2021-01-20T17:44:23+05:30</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Added_bz_1912493_automation (#3437)
[skip ci]
Signed-off-by: Pritam Singh <prisingh@redhat.com>
Co-authored-by: Pritam Singh <prisingh@redhat.com></pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/15b6771c7efafdc9b629d3f208b48c9cfb97968e">15b6771c</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2021-01-21T13:29:24-06:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Add pki-server acme-deploy/undeploy --wait option
A new option has been added to pki-server acme-deploy/undeploy
commands to wait until ACME web application is actually
deployed/undeployed on the server. This option can be used to
prevent the subsequent command from executing before the ACME
deployment/undeployment is complete. The CI test has been updated
to use this option to improve its reliability.
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/35c198056304a9d3d0c9c5b7ee2d736c61b7e625">35c19805</a></strong>
<div>
<span>by =?UTF-8?q?Matou=C5=A1=20Bor=C3=A1k?=</span>
<i>at 2021-01-21T15:49:58-08:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">SCEP: Add support for dynammically chosen profileId
Community contribution (two patches combined):
From: =?UTF-8?q?Matou=C5=A1=20Bor=C3=A1k?= <matous.borak@platanus.cz>
Date: Wed, 12 Aug 2020 15:57:31 +0200
Subject: [PATCH 1&2] Add support for dynamically chosen ProfileId in SCEP
This is implemented via a new URL, /ca/scep/PROFILE_ID/pkiclient.exe, that allows to dynamically choose the profile via the SCEP request URL.
This URL is mapped to the same CRSEnrollment servlet class as the "static" profile URL (/ca/cgi-bin/pkiclient.exe). The implementation tries not to collide with the original "static" version in any way but to only extend it.
In addition:
A SCEP client will be able to request a SCEP operation only for the allowed list of profiles, see the `ca.scep.allowedDynamicProfileIds` config item in CS.cfg.
Usage: http://dogtag.example.com:8080/ca/scep/<PROFILE_ID>/pkiclient.exe
ladycfu: original two patches from borama must be accompanied by supplemental
post-review patch (from cfu@redhat.com) that follows to address various issues.
Signed-off-by: Christina Fu <cfu@redhat.com>
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/a84726530090bd4d63fa902a069676f1052e9c9a">a8472653</a></strong>
<div>
<span>by Christina Fu</span>
<i>at 2021-01-21T15:49:58-08:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">SCEP: suplemental patch for Add support of Dynamic profileId
This patch addresses issues revealed by review of previous community patches
in "SCEP: Add support for dynammically chosen profileId".
This patch must accompany the original patches, and as such it will be checked
in along with them.
Changes include:
- mainly, profiles intended for manual approval by agents will now function as
expected.
- caServerCert is removed from default setting for allowedDynamicProfileIds
- misc code style update
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/0afd0b5f83a67f1d38f478c1957fef1415cd0c69">0afd0b5f</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2021-01-22T10:08:47-06:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Add ACME test using certbot
The ACME test has been modified to perform certificate enrollment,
certificate revocation, and account management using certbot.
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/b1ec8540186514eadacb3be77d010851b13006ca">b1ec8540</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2021-01-25T08:58:55-06:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Move Instance.wait_for_startup() to PKISubsystem
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/4dc018839a0b1731b72d5d27e9786b9cd1396505">4dc01883</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2021-01-25T10:24:22-06:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Refactor PKIDeployer.finalize_subsystem()
Some of the code that finalizes subsystem configuration has been
moved from configuration.py to PKIDeployer.finalize_subsystem().
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/788aca27faee409c2546320c74d6d3ef1500093c">788aca27</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2021-01-25T10:24:22-06:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Remove unused ConfigClient.security_domain_type
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/0429747f18c7521afa722cef1bb0e41acc7751e3">0429747f</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2021-01-25T10:24:22-06:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Add KRAConnectorInfo.hashCode() and equals()
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/9aab73f1ce175e3629b08c13a52283eb63d3f25d">9aab73f1</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2021-01-25T10:24:22-06:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Add XML converters for KRAConnectorInfo
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/48531a599dc6bd98568ee339ea3fe3ea4a731038">48531a59</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2021-01-25T11:14:08-06:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Clean up IPA test
The code that installs and uninstalls IPA server has been
moved from ipa-test.sh to ipa-tests.yml.
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/610135eb9f012c06f964e128958606dbb5e9cc4e">610135eb</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2021-01-25T13:28:19-06:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Fix security domain tools
The pki-server sd-* commands have been moved into
pki-server <ca/kra/ocsp>-* such that it can be used to
create the security domain properly in CA, KRA, and OCSP.
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/d6676bf7c533f0c6229db33ec7298faa62e3ccd8">d6676bf7</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2021-01-25T13:28:19-06:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Fix PKIDeployer.setup_admin()
The PKIDeployer.setup_admin() has been modified to use
the proper admin groups for CA, KRA, and OCSP.
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/325eea1f80b7344f7b3d5fed0c091f524531192c">325eea1f</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2021-01-25T13:28:19-06:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Add test for standalone KRA
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/82705993cbd0aefa0378af93f6f97e64f1571b4a">82705993</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2021-01-25T13:28:19-06:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Add test for standalone OCSP
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/45c5e1f4d5f63532432a395415f59e2d260f2746">45c5e1f4</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2021-01-25T16:40:25-06:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Add CAClient.addKRAConnector()
The code that creates the KRA connector in CA has been
moved from KRAConfigurator.configureKRAConnector() to
CAClient.addKRAConnector().
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/621137ab9fa67c5f5e003754f03e7b6c29839acd">621137ab</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2021-01-25T16:56:05-06:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Update pki ca-kraconnector-add
The pki ca-kraconnector-add has been modified to provide
a mechanism to call CAClient.addKRAConnector().
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/c24c5484efd54f1b4cbe1be2036644cc554490e0">c24c5484</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2021-01-25T16:56:05-06:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Add PKIDeployer.add_kra_connector()
The remaining code that creates the KRA in CA has been
converted from KRAConfigurator.configureKRAConnector()
into PKIDeployer.add_kra_connector().
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/28db4983da2142d1e7ab102ca6e2dcce4a9d098e">28db4983</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2021-01-25T19:49:26-06:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Add CAClient.addOCSPPublisher()
Some of the code that creates the OCSP publisher in CA has
been moved from OCSPConfigurator.updateOCSPConfiguration()
to CAClient.addOCSPPublisher().
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/684d643f144f5bcd18d54b0f11b491e45447a61a">684d643f</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2021-01-25T20:18:59-06:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Add pki ca-publisher-ocsp-add
The pki ca-publisher-ocsp-add has been added to provide
a CLI for CAClient.addOCSPPublisher().
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/3b8a63aa6fa7fccfb8523749448f8c8ed1a509b8">3b8a63aa</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2021-01-25T20:18:59-06:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Add PKIDeployer.add_ocsp_publisher()
The remaining code that creates the OCSP publisher in CA has
been converted from OCSPConfigurator.updateOCSPConfiguration()
into PKIDeployer.add_ocsp_publisher().
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/11c28798670a018c64bb212b9f243f04c5ebda3a">11c28798</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2021-01-26T09:38:26-06:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Move key backup operation
The PKIDeployer.backup_keys() invocation has been moved
from configuration.py to finalization.py.
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/8a444da0da126ab8005780de0417dbbfbe8c5c05">8a444da0</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2021-01-26T11:10:13-06:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Refactor IOCSPStore.validate()
The IOCSPStore.validate() has been modified to take an
IOCSPAuthority parameter.
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/8be9037f028d8b8086ca1da12a500992e9b7d051">8be9037f</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2021-01-26T11:10:13-06:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Refactor IOCSPStore.init()
The IOCSPStore.init() has been modified to drop the
IOCSPAuthrotity parameter.
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/162aef5ca401b190b0c07775bc242ffe6247db5a">162aef5c</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2021-01-26T11:10:13-06:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Move IOCSPAuthority.getOCSPStore() to OCSPAuthority
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/67f470e8f55dbc1d65f860a216dc31ef532340e4">67f470e8</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2021-01-26T11:10:13-06:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Move IOCSPAuthority.getDefStore() to OCSPAuthority
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/9a2faebe978303c0871040644cda4c652d6d18fb">9a2faebe</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2021-01-26T11:10:13-06:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Move LDAPStore to pki-ocsp
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/e8c034768e23e99f338430be74598e5e0a57e991">e8c03476</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2021-01-26T11:10:13-06:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Move DefStore to pki-ocsp
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/4d7aad46d2bdfd13c86eae32b14df7778625cc77">4d7aad46</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2021-01-26T11:10:13-06:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Move IDefStore to pki-ocsp
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/5dd680165906e7722683cb970e68039b334cdb94">5dd68016</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2021-01-26T11:10:13-06:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Move IOCSPStore to pki-ocsp
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/9547a39204d4a14f7bac6bc3384f6f4da96f9ec0">9547a392</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2021-01-26T11:10:13-06:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Move OCSPPresence to pki-ocsp
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/1c6f9cda465d0d758f3fbf2070d8925eeb7a5011">1c6f9cda</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2021-01-26T11:10:13-06:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Move OCSPValidity to pki-ocsp
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/3bf3fccfb96f83e777c9f96b7a6d7cdaadfe20cc">3bf3fccf</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2021-01-26T14:57:01-06:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Fix profile auth in PKIIssuer.issueCertificate()
In commit 1b6b426ad4724e2f9595340027482a0a36fc3655 the
PKIClient.login() was removed from PKIIssuer.issueCertificate()
and that caused enrollments with a profile that requires
authentication to fail.
To fix the problem the PKIClient.login() has been restored.
https://bugzilla.redhat.com/show_bug.cgi?id=1919282
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/882e81f26fa2d31fbf915b0574921ba81bfe34c2">882e81f2</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2021-01-26T14:57:01-06:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Add ACME tests for IPA
The IPA test has been modified to perform ACME tests
using certbot.
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/3ce1d7e39df29e940965ea7498185c7737fcecca">3ce1d7e3</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2021-01-26T14:59:42-06:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Fix exception handling in EnrollProfile.createEnrollmentRequest()
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/b03a460c404e2b821d7a3fd343f048a56710482a">b03a460c</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2021-01-26T14:59:42-06:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Replace CMSEngine.reinit()
The CMSEngine.reinit() has been replaced with a direct call
to ISubsystem.init().
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/1f23b0f7914376415565d57f80489fa6afc67f2b">1f23b0f7</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2021-01-28T18:40:21-06:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Add test for installing TKS clone
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/537fb8ed02728b173f8ca54d3ad511493c1196d7">537fb8ed</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2021-01-29T17:46:16-06:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Fix clone of clone installation
In commit e0b249636e2ea24d3d0633e65bf1d6e0a3dbd35f the
CMSEngine.configurePorts() invocation was moved later
during server startup process. It's not clear how, but
apparently the cert number range assignment depends on
this code so it failed when installing a clone of an
existing clone.
To fix the problem the invocation has been moved back
into its original position.
Resolves: https://github.com/dogtagpki/pki/issues/3330
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/4498b6b75df29c7631a9503053f19ede57b7b0f1">4498b6b7</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2021-01-29T17:46:16-06:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Add test for installing CA clone of clone
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/26508cba4001a8b5f16145af467fbed0073fcd0f">26508cba</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2021-01-29T17:46:16-06:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Add test for installing KRA clone of clone
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/b05ce69bec13a46eea3ecbf6d703eb3026d95755">b05ce69b</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2021-01-29T19:36:21-06:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Clean up CA test
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/c1639c9cf01fae64ae5b6f573f2fb757db359762">c1639c9c</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2021-01-29T19:36:21-06:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Clean up KRA test
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/e29cf8693b011904f21f8f2d92270d84421c438d">e29cf869</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2021-02-01T11:46:02-06:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Add ACME base URL parameter
By default the ACME directory will return ACME service URLs
with the same hostname that the client uses to access the
directory. If the hostname is load-balanced, the client might
get redirected to different servers, which could trigger other
issues.
A new parameter has been added into engine.conf to override
the base URL of ACME services. This mechanism can be used to
pin the client to the current server.
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/cf68678050177c30129a04f588a130f8d38f150a">cf686780</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2021-02-01T11:46:02-06:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Add ACME server switchover test
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/889169c3c4a124b8008a3e51d71dbfcb40e2b3b4">889169c3</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2021-02-01T16:16:26-06:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Fixed error handling during replica setup
Originally the LDAPConfigurator.createReplicaObject() would
return true if it managed to add a new replica object. If the
object already existed, it would only add the new replica bind
DN and return false. If an error happened it would get ignored
and the method would return false as well.
In 4abfdc77508545fb90ef127fbbf373ae1609d705 the behavior of
accidentally got changed return true if the replica object
already exists and this caused OCSP and TKS clone of clone
installation to fail.
To fix the problem the behavior has been reverted except that
now any error will be reported as an exception.
https://bugzilla.redhat.com/show_bug.cgi?id=1912418
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/505fbd92ff6263773de6c384e0ed67bfd8b1dbbc">505fbd92</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2021-02-01T16:16:26-06:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Add test for installing OCSP clone
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/8bfb53f3aa3dcbc39d8d73c3ea5ea5890cb878e5">8bfb53f3</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2021-02-01T16:16:26-06:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Add test for installing OCSP clone of clone
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/15dff4e9990c9d058dccb36eebfe9ff609490231">15dff4e9</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2021-02-01T16:16:26-06:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Add test for installing TKS clone of clone
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/05b79de380262e4ce316576442d8e18d3c6ef44b">05b79de3</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2021-02-01T17:37:53-06:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Add PKIDeployer.setup_system_certs()
The code that sets up the system certificates has been
moved into PKIDeployer.setup_system_certs().
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/37e738ddd3f6de16758dbb441c64561ba57db3a0">37e738dd</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2021-02-01T17:37:57-06:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Add PKIDeployer.setup_subsystem_user()
The code that sets up the subsystem user has been moved
into PKIDeployer.setup_subsystem_user().
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/3f6264d745c169b25f0935eb0cb3dca8bace77bf">3f6264d7</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2021-02-01T17:37:57-06:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Refactor PKIDeployer.sd_connect()
The PKIDeployer.sd_connect() has been modified to use
the security domain URL parameter from the deployment
configuration.
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/661a055de2d088f37fd5f2b5c86d08e60b044e2f">661a055d</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2021-02-01T17:37:57-06:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Refactor PKIDeployer.join_domain()
The PKIDeployer.join_domain() has been renamed to
join_security_domain() and modified to use the security
domain URL parameter from the deployment configuration.
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/aedf93847614dd91c4b79425bb4c4b6046153be6">aedf9384</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2021-02-01T17:37:57-06:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Refactor PKISubsystem.join_security_domain()
The PKISubsystem.join_security_domain() has been modified
to take a security domain URL parameter.
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/6b56f40aa1d7ec432339c75bc56062a272fbe577">6b56f40a</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2021-02-01T17:40:49-06:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Update CA clone doc
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/c294425a5f04090125753f99a0d47898d858f9dc">c294425a</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2021-02-01T17:40:49-06:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Update KRA clone doc
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/5abeb0ef2396e75e1ef950f0e644acfd825fbe8f">5abeb0ef</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2021-02-02T10:20:12-06:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Rename pki ca-kraconnector-add --session-file option
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/7faa7347e4402795df0a342de4030ccf32db8c6c">7faa7347</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2021-02-02T10:20:21-06:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Rename pki ca-publisher-ocsp-add --session-file option
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/0d3b88552b69bb00c8e8eb83baa9466d9db0db9b">0d3b8855</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2021-02-02T10:20:30-06:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Add pki <subsystem>-range-request --install-token option
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/f216c59c6ad473e30cb7656f42738c501a230b4e">f216c59c</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2021-02-02T10:20:37-06:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Add pki <subsystem>-config-export --install-token option
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/b16f7efd23c3ea90a6907921a7cc635213749cd4">b16f7efd</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2021-02-02T10:20:43-06:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Add pki securitydomain-join --install-token option
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/c744c5f529bf24ed918e3557c17747ac1b114546">c744c5f5</a></strong>
<div>
<span>by Rob Crittenden</span>
<i>at 2021-02-04T09:07:42-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Fix missing options in PKI healthcheck
As reported by Pritam Singh in rh-bz#1922257, several options in
pki-healthcheck were missing. This was due to a recent change in
freeipa-healthcheck's core, making these arguments optional. Fix
provided by Rob Crittenden via mail.
See also: https://github.com/freeipa/freeipa-healthcheck/issues/144
Resolves: rh-bz#1922257
Signed-off-by: Alexander Scheel <ascheel@redhat.com>
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/33b06e951f14e073da77b8a091d9f57e03dc759a">33b06e95</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2021-02-04T11:33:52-06:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Fix calculation in test_cert_enrollment.py
The test_cert_enrollment.py has been modified to use float
instead of int when calculating the elapsed time for better
accuracy.
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/544859b51eb77967eaa9cb292c55cdb27d7113e3">544859b5</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2021-02-04T11:33:52-06:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Add default values for test_cert_enrollment.py parameters
Some parameters for test_cert_enrollment.py have been modified
to provide a default value to make it easier to use.
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/6f778fb9d16dba6d7777d14b53c589c31cb576b1">6f778fb9</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2021-02-04T11:33:52-06:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Update log messages in test_cert_enrollment.py
The test_cert_enrollment.py has been modified to provide
a --verbose and a --debug options to show the test progress
and some debugging information.
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/ea910e8983f979b1d243ac598b16597c55565a82">ea910e89</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2021-02-04T11:33:52-06:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Fix calculation in test_acme_cert_enrollment.py
The test_acme_cert_enrollment.py has been modified to use
float instead of int when calculating the elapsed time for
better accuracy.
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/c6a34a9e4b9e09708f6c10ac4aa196ec60ebf13f">c6a34a9e</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2021-02-04T11:33:52-06:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Add default values for test_acme_cert_enrollment.py parameters
The parameters for test_acme_cert_enrollment.py have been
modified to provide a default value to make it easier to use.
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/76ac8fdfe0386aebe6a83f8ed4c28c34fe95f949">76ac8fdf</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2021-02-04T11:33:52-06:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Update log messages in test_acme_cert_enrollment.py
The test_acme_cert_enrollment.py has been modified to provide
a --verbose and a --debug options to show the test progress and
some debugging information.
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/eedf3b01dd9df5123491b91a00ba717a6222a746">eedf3b01</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2021-02-04T11:33:52-06:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Add performance tests scripts into pki-tests
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/a3f8963bea0f0894c2af05a0d00b051804222e64">a3f8963b</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2021-02-04T11:33:52-06:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Add doc for CA performance test
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/f26ac448a1881464d1ade05c3fdddf8793907094">f26ac448</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2021-02-04T11:33:52-06:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Add doc for ACME performance test
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/356fbc542947309de6727dea9527e880b20963ce">356fbc54</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2021-02-04T12:18:34-06:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Add CLI.deprecated field
The CLI.deprecated field has been added for deprecating
CLI commands.
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/1c8bb3638c6f21bfb709f9bf601f91556bd17807">1c8bb363</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2021-02-04T12:18:36-06:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Refactor Configurator.registerUser()
Some of the code in Configurator.registerUser() has been moved
to the caller.
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/fa9ff7e81d3fc58a19602a98b913d1114a60423c">fa9ff7e8</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2021-02-04T15:37:10-06:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Move Configurator.registerUser() to SubsystemClient
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/500f913fc4d31cb94b5c161f1ff9f4fcd4345f49">500f913f</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2021-02-04T15:37:10-06:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Refactor TPSConfigurator.configureCAConnector()
The TPSConfigurator.configureCAConnector() has been converted
into Python in configuration.py.
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/dafa0f08232ea8fc8758ffbb25398f2884f7f741">dafa0f08</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2021-02-04T15:37:10-06:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Refactor TPSConfigurator.configureTKSConnector()
The TPSConfigurator.configureTKSConnector() has been converted
into Python in configuration.py.
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/54e9610f1617ff55422edf33a1847cd2b738bdf4">54e9610f</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2021-02-04T15:37:10-06:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Refactor TPSConfigurator.configureKRAConnector()
The TPSConfigurator.configureKRAConnector() has been converted
into Python in configuration.py.
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/13f9757a73a17ea39b0fed0c9c9c1cf003dda9ce">13f9757a</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2021-02-04T15:37:10-06:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Remove unused TPSInstaller
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/94332c72905195be15d3175b866bf7dd3b6f6185">94332c72</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2021-02-04T15:37:10-06:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Refactor TPSConfigurator.exportTransportCert()
Some of the code in TPSConfigurator.exportTransportCert()
has been moved to the caller.
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/33ee01a33f08eb4f19782d598fc17689e71ef48f">33ee01a3</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2021-02-04T15:37:10-06:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Move TPSConfigurator.exportTransportCert() to TKSClient
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/f699f704093312a93dca15435fd8c56d49d5ea22">f699f704</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2021-02-04T17:24:48-06:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Fix TPS clone installation
The TPS clone installation has been fixed by adding
the GetConfigEntries servlet into TPS's web.xml.
Resolves: https://github.com/dogtagpki/pki/issues/1841
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/23c3d215606bee6c361dfe102ff87e687149d6cf">23c3d215</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2021-02-04T17:24:48-06:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Add test for installing TPS clone
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/4b7eacd3a4fe5cd9c9081d12b8d18c673a7fae09">4b7eacd3</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2021-02-08T12:48:55-06:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Fix PKIClient usage in PKIIssuer
The PKIIssuer has been modified to close PKIClient objects
explicitly using try-with-resources to avoid excessive open
connections.
https://bugzilla.redhat.com/show_bug.cgi?id=1916686
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/4778bc802bd535727571e501eaad4baaefe02df0">4778bc80</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2021-02-08T12:48:55-06:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Add SessionAuthentication for acmeServerCert
The acmeServerCert profile has been modified to use
SessionAuthentication instead of manual agent approval
to improve ACME cert enrollment performance.
https://bugzilla.redhat.com/show_bug.cgi?id=1916686
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/e6f04b3cab64f87766d758f611c535d320d1d690">e6f04b3c</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2021-02-08T12:48:55-06:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Add ACME indexes for DS
Currently ACME indexes are defined in the CA's index.ldif so
when the CA is created the ACME indexes will be created as
well in the same DS backend. However, if later the ACME is
installed on a different DS backend, the ACME indexes need to
be created in that backend instead.
To simplify the installation process a new index.ldif has been
added to define the ACME indexes for DS. A new indextask.ldif
has been added as well to reindex an existing database.
In the future the ACME indexes may be removed from the CA's
index.ldif.
https://bugzilla.redhat.com/show_bug.cgi?id=1916686
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/a3234cdd4035450ada50212efdf1f32deadbc9cb">a3234cdd</a></strong>
<div>
<span>by Alexander Scheel</span>
<i>at 2021-02-08T14:23:54-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Add RSA-OAEP support to SecurityDataProcessor
org.mozilla.jss.netscape.security.util.WrappingParams in JSS has an
shortcoming that it believes all RSA is RSA-PKCS1v1.5 and additionally,
that anything that isn't a EC key is RSA. :-)
Read the value of keyWrap.useOAEP to determine whether to override the
secret key wrapping algorithm with OAEP, prior to using and storing the
wrapping parameters.
Signed-off-by: Alexander Scheel <ascheel@redhat.com>
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/f63a88b48ce7a95e477bc10771e5606e204a8d04">f63a88b4</a></strong>
<div>
<span>by Alexander Scheel</span>
<i>at 2021-02-08T14:23:54-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Make CryptoUtil respect FIPS Status
Signed-off-by: Alexander Scheel <ascheel@redhat.com>
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/4ee16689b6d553745355965e9e5845b10757d49b">4ee16689</a></strong>
<div>
<span>by Alexander Scheel</span>
<i>at 2021-02-08T14:23:54-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Add OAEP support to pki client-cert-request
Signed-off-by: Alexander Scheel <ascheel@redhat.com>
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/d3db42099791c6f0b2d31f116630e583430fe8a8">d3db4209</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2021-02-08T17:54:49-06:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Remove TPSConfigurator.getTransportCert()
The TPSConfigurator.getTransportCert() has been replaced
with KRASystemCertClient.getTransportCert().
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/7d02b510434cc501c5e802f58ce342dbf64dca71">7d02b510</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2021-02-08T18:11:26-06:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Add pki tks-cert-transport-import
The pki tks-cert-transport-import has been added to wrap
TKSClient.importTransportCert().
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/8fffc1b1fbf3e3c5f46bec2bd4b8d6216e079438">8fffc1b1</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2021-02-08T18:11:26-06:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Add PKIDeployer.get_kra_transport_cert()
The PKIDeployer.get_kra_transport_cert() has been added
to wrap pki kra-cert-transport-export.
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/8047e3b409c4f0b4a01e361c9ee76734ee2a6825">8047e3b4</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2021-02-08T18:14:56-06:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Add PKIDeployer.set_tks_transport_cert()
The PKIDeployer.set_tks_transport_cert() has been added to
wrap pki tks-cert-transport-import.
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/e3b33ba4e5fe0251e787f516c52170a8635599be">e3b33ba4</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2021-02-08T18:14:56-06:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Refactor TKS transport cert configuration
The code that configures the TKS transport cert has been
moved into PKIDeployer.finalize_subsystem().
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/c3edb455b2c00bb35f34c151f511bbd45c05ef2b">c3edb455</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2021-02-08T18:19:03-06:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Refactor pki <subsystem>-user-add
The pki <subsystem>-user-add has been modified to support
calling SubsystemClient.addUser() during installation.
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/7c95db42eb2def32bbec1b68d8c2f6305693195c">7c95db42</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2021-02-08T18:20:26-06:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Add PKIDeployer.add_subsystem_user()
The PKIDeployer.add_subsystem_user() has been added to
wrap pki <subsystem>-user-add.
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/f8bb2a1dbe1c4ff84cce3dfd9970759b22eb46e1">f8bb2a1d</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2021-02-08T18:20:26-06:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Refactor TPS registration
The code that creates the CA, KRA, and TKS connectors during
TPS installation has been moved into PKIDeployer.
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/5c33b0837c6d35c68fe7ffd6b6e5297df2c8ec4c">5c33b083</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2021-02-08T18:20:26-06:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Remove unused Configurator.getSubsystemCert()
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/6dd8a49ead51dc677bd48874690813984a147116">6dd8a49e</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2021-02-09T09:50:33-06:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Refactor PKIDeployer.setup_admin()
The PKIDeployer.setup_admin() has been split into
get_admin_cert() and setup_admin_user().
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/9899e2987e40c70b8698380bec2bdea8d7d19388">9899e298</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2021-02-09T09:50:38-06:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Refactor pki_import_admin_cert setup
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/23eff335ed0f0fcade33cc35ff5a90a1ea18a9a0">23eff335</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2021-02-09T11:17:30-06:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Add PKIDeployer.load_admin_cert()
The code in ConfigClient.set_admin_parameters() that loads the
admin cert has been moved to PKIDeployer.load_admin_cert().
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/731e3b37ff13a43cdb20362367081fce7840ef0d">731e3b37</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2021-02-09T11:17:30-06:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Add PKIDeployer.create_admin_cert()
The code in ConfigClient.set_admin_parameters() that creates
the admin cert has been moved to PKIDeployer.create_admin_cert().
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/64184418cd727fde0d3f24926a4d5be3a5353f37">64184418</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2021-02-09T11:17:30-06:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Remove redundant AdminSetupRequest.importAdminCert
The AdminSetupRequest.importAdminCert will no longer have
a value 'true' anymore, so the code that depends on it has
been removed.
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/25798ad744e136854c3f14d557335ce42692e0cc">25798ad7</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2021-02-09T11:17:30-06:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Remove unused fields in AdminSetupRequest
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/88d1837aa199d6ff706ef44360161db04b291bec">88d1837a</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2021-02-09T14:08:56-06:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Refactor Configurator.createRemoteAdminCert()
Some of the code in Configurator.createRemoteAdminCert()
has been moved to the caller.
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/2d52e542341b7d2cf0640daf8d128e6b164ce995">2d52e542</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2021-02-09T14:08:56-06:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Move Configurator.createRemoteAdminCert() to CACertClient
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/1a47986d3060ae71d7caed17644545df0c887394">1a47986d</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2021-02-09T14:08:56-06:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Update pki ca-cert-request-submit
The pki ca-cert-request-submit has been added to wrap
CACertClient.submitRequest().
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/7030bea15b8fa95179ff28d89906181831e72db3">7030bea1</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2021-02-09T14:08:56-06:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Add PKIDeployer.create_admin_csr()
The code that generates the admin CSR has been moved
to PKIDeployer.create_admin_csr().
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/e98428031c51016f7adc2774c97d0c815682db73">e9842803</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2021-02-09T15:33:43-06:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Add PKIDeployer.request_admin_cert()
The code that requests the admin cert from the CA has been
moved to PKIDeployer.request_admin_cert().
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/7499f968eba63f099a45acbf4c0f9489a85ef422">7499f968</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2021-02-10T16:09:57-06:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Remove unused IDBSSession.getDBSubsystem()
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/df58faebc51651c06d9357d1fd201b882cb3a69c">df58faeb</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2021-02-10T17:49:21-06:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Refactor DBSubsystem.init()
The DBSubsystem.init() has been modified to take a
DatabaseConfig, a PKISocketConfig, and an IPasswordStore.
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/f7bbbb8c9524b964763cf283e24f69251374d459">f7bbbb8c</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2021-02-10T17:50:36-06:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Refactor IOCSPStore.init()
The IOCSPStore.init() has been modified to take a DBSubsystem
parameter.
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/8feaa99146789eb13fd1d399b471b0ce9888decf">8feaa991</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2021-02-10T17:56:02-06:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Move IOCSPStore.validate() to OCSPAuthority
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/918987c7b3f73e06741e36538abd62477de8b3bd">918987c7</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2021-02-10T17:56:02-06:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Refactor CAConfigurator.createLocalCert()
Some of the code in CAConfigurator.createLocalCert() has
been moved to the caller.
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/82b0f76d163bbba62a6068f6c355a3cfe49eb7af">82b0f76d</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2021-02-10T18:02:45-06:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Replace CAConfigurator.createLocalAdminCert()
The CAConfigurator.createLocalAdminCert() has been replaced
with CAConfigurator.createLocalCert().
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/e730e179027aca0891f274e0524b98b3da7c3aed">e730e179</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2021-02-10T18:02:48-06:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Refactor Configurator.loadCert()
Some of the code in Configurator.loadCert() has been moved
to the caller.
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/024eeeba58b55c546c926abd83dce9db0a0c1b2b">024eeeba</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2021-02-10T18:02:48-06:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Replace CertUtils.createRemoteCert()
The CertUtils.createRemoteCert() has been replaced with
CACertClient.submitRequest().
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/57651ca33ce3ff77fd5a210a8e5beee2054f4ac8">57651ca3</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2021-02-11T09:26:22-06:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Add CLIModule
The CLIModule has been added to store the CLI class name
such that the CLI object can be created only when needed.
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/df4734d7aa42ee53e13cfa0f6644a25f3aadacfb">df4734d7</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2021-02-11T09:26:24-06:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Move pki-server ca classes to pki-ca
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/9ebcf321bdae695ab4ebc1fd1aa3f86a589528cd">9ebcf321</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2021-02-11T09:26:26-06:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Move pki-server kra classes to pki-kra
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/092760ef559391b97fb746986d2149d851d191ab">092760ef</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2021-02-11T09:26:29-06:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Move pki-server ocsp classes to pki-ocsp
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/1e2f0605cc69cde805106e23a9578166b3b68c96">1e2f0605</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2021-02-11T09:26:30-06:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Move pki-server tks classes to pki-tks
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/4cc7b9f632cfe7cad9444b74aee157e6f05aa3f5">4cc7b9f6</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2021-02-11T09:26:47-06:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Move pki-server tps classes to pki-tps
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/e431167315809287272d06c42deb18a03d022241">e4311673</a></strong>
<div>
<span>by Alexander Scheel</span>
<i>at 2021-02-11T12:43:03-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Only depend on pki-servlet-engine in real RHEL
Signed-off-by: Alexander Scheel <ascheel@redhat.com>
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/6450d3de203c1b55afd08f997d88c5c64c7d1932">6450d3de</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2021-02-11T17:28:44-06:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Exclude node_modules from Eclipse project
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/d92efa394a8a7fc6684579c24d837aa7b73ab7d8">d92efa39</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2021-02-11T19:29:47-06:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Add OCSPCRLIssuingPointFindCLI
The OCSPCRLIssuingPointFindCLI has been added to list
the CRL issuing points in OCSP.
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/0c3f7e05cc73622558acea6680982b806769d022">0c3f7e05</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2021-02-11T19:29:47-06:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Add pki-server ocsp-crl-issuingpoint-find
The pki-server ocsp-crl-issuingpoint-find has been added
to wrap OCSPCRLIssuingPointFindCLI.
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/eb166fee270880ea06491828f08dbfef727703db">eb166fee</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2021-02-11T19:29:47-06:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Clean up tools tests
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/1add419d57001955d3168ee0b2437bec843bb2c3">1add419d</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2021-02-16T09:25:42-06:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Fix exception message in PKIServer.webapp_undeploy()
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/6ac853db4d93635dfdb3209ef695536bb303cc74">6ac853db</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2021-02-16T10:56:57-06:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Add pki <subsystem>-deploy/undeploy
The ACMEDeployCLI and ACMEUndeployCLI have been converted
into generic SubsystemDeployCLI and SubsystemUndeployCLI
that can be used by all subsystems.
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/792804471cf8bfc41c3799e3a9c5545b68211084">79280447</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2021-02-16T10:56:57-06:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Add --wait option for pki-server webapp-deploy/undeploy
The pki-server webapp-deploy/undeploy commands have been
modified to provide an option to wait until the process
is fully completed.
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/a2e57fd9951a0e392ca86fbe6c505cc1feb52dd7">a2e57fd9</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2021-02-16T10:56:57-06:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Add --wait option for pki-server start/stop/restart
The pki-server start/stop/restart commands have been
modified to provide an option to wait until the process
is fully completed.
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/753ae78f22b971bba8ddb7683b7389b0d227f7da">753ae78f</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2021-02-17T08:50:41-06:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Add OCSPCRLIssuingPointAddCLI
The code that creates a CRL issuing point in
OCSPConfigurator.finalizeConfiguration() has been
converted into OCSPCRLIssuingPointAddCLI.
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/360dc97bd05a8fdcb8e5bca0010db98f5bf682a7">360dc97b</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2021-02-17T08:50:41-06:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Add pki-server ocsp-crl-issuingpoint-add
The pki-server ocsp-crl-issuingpoint-add has been added
to call OCSPSubsystem.add_crl_issuing_point() which wraps
OCSPCRLIssuingPointAddCLI.
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/6e8681022db008062bfe76dad7d7d64e08ccbd5b">6e868102</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2021-02-17T08:50:41-06:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Refactor OCSP CRL issuing point creation
The code that creates the CRL issuing point in
OCSPConfigurator.finalizeConfiguration() has been
replaced with OCSPSubsystem.add_crl_issuing_point().
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/d88c48fefcd52728713515d45f7935ba193056a2">d88c48fe</a></strong>
<div>
<span>by Matouš Borák</span>
<i>at 2021-02-17T10:12:14-08:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Add the GetCACaps operation handling to the SCEP servlet
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/16e4cad474841af6781487ae5531cea3740020f1">16e4cad4</a></strong>
<div>
<span>by Christina Fu</span>
<i>at 2021-02-17T10:12:14-08:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">SCEP - supplemental patch for Add the GetCACaps operation handling to the SCEP servlet
This is a supplemental patch for the previous community-contributed patch from borama:
Add the GetCACaps operation handling to the SCEP servlet
It can be used like the following:
curl http://<host>/ca/cgi-bin/pkiclient.exe?operation=GetCACaps
It removes the claim for support of "POST" request until the patch for
that is approved for check in.
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/6abb56f3214428ebfb1adff6574e3b6b79dd08bf">6abb56f3</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2021-02-17T12:58:13-06:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Add test for tpsclient
The TPS test has been modified to verify token format and
token enrollment operations using tpsclient.
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/8a78fa07dd3f9c14709eccd3433b4c5871eccf9e">8a78fa07</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2021-02-17T13:57:23-06:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Add --no-ntp in IPA tests
NTP is not necessary for testing IPA in containers
so it has been disabled.
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/137d77280752d7a7a39e597e9c4233f0271b82c2">137d7728</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2021-02-17T18:04:45-06:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Remove unused base/tps-client/setup
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/4013f6f79abc73ab1f95fd67634de5121a5a736d">4013f6f7</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2021-02-17T18:04:45-06:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Remove unused base/tps-client/etc
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/23f507ab4ed0a79ae2c335204d419814e0455f03">23f507ab</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2021-02-17T18:04:45-06:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Remove unused base/tps-client/apache
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/eb5479a54aadb3c07c213d7110fb845c3f71c25a">eb5479a5</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2021-02-17T18:04:45-06:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Remove unused base/tps-client/ui
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/d72b17ddb897e6cb751a0a16f1f1ce7178e642c5">d72b17dd</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2021-02-17T18:04:45-06:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Remove unused base/tps-client/stubs
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/de17f693bfe0420fc27e5091ffb71b2a14f90cea">de17f693</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2021-02-17T18:04:45-06:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Remove unused base/tps-client/applets
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/4a71173d1ce9df94b72beb6382b5f916277727e0">4a71173d</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2021-02-17T18:04:45-06:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Remove unused base/tps-client/doc
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/3f9fc7b9a209f535179a9468a8d0196595cbc9d2">3f9fc7b9</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2021-02-17T18:22:37-06:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Remove unused SystemConfigService.finalizeConfiguration()
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/e20ae77888506bfba48d85564abb0d2738a519dd">e20ae778</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2021-02-17T18:22:37-06:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Remove unused FinalizeConfigRequest
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/b0831d2e85f1da0d33b5b8f9bb846f78e9ce1d0b">b0831d2e</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2021-02-17T18:26:10-06:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Remove unused ConfigClient.set_tps_parameters()
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/1e3f2cd185e57a5438a5a066350d97573ccdf18f">1e3f2cd1</a></strong>
<div>
<span>by dependabot[bot]</span>
<i>at 2021-02-22T11:28:04-06:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Bump jackson-databind from 2.10.1 to 2.10.5.1
Bumps [jackson-databind](https://github.com/FasterXML/jackson) from 2.10.1 to 2.10.5.1.
- [Release notes](https://github.com/FasterXML/jackson/releases)
- [Commits](https://github.com/FasterXML/jackson/commits)
Signed-off-by: dependabot[bot] <support@github.com></pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/c35bb9b5690c8cb35783e76fad6a4f5d894fbd24">c35bb9b5</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2021-02-22T11:44:01-06:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Update doc for installing PostgreSQL JDBC driver
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/95cfaa8d2cce88364a5c2515eca025e0160c2639">95cfaa8d</a></strong>
<div>
<span>by Christina Fu</span>
<i>at 2021-02-22T10:50:49-08:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">userOAEP erronously enabled in ServerKeygenUserKeyDefault.java
This patch fixes an error in ServerKeygenUserKeyDefault.java where
userOAEP is erronously enabled regardless of the CS.cfg config setting
for keyWrap.useOAEP
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/48778b2f63cd6d7d4372eeb6b87570c23d862e46">48778b2f</a></strong>
<div>
<span>by jmagne</span>
<i>at 2021-02-22T13:44:20-08:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">pkispawn fails against 389-ds 1.4.3.19 #3458 (#3465)
Add suggested patch from stanislavlevin to solve this issue.
Also add f34 to the ipa tests,this time really add the tests.
Upon further review, back out of f34 tests until the infractructure
supports it.
Also hardcode tomcat app setting in spec file for the moment to
avoid possible glitches on certain platform.
Co-authored-by: Jack Magne <jmagne@localhost.localdomain></pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/dd0f7171f134317f8b2658f1735dbe2629fb3e16">dd0f7171</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2021-02-24T09:18:48-06:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Refactor Configurator.createRemoteCert()
The Configurator.createRemoteCert() has been modified to take
an install token instead of session ID.
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/14219af51171509c74dae5cd5e247c0ee443afcf">14219af5</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2021-02-24T09:18:54-06:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Refactor Configurator.createCert()
The Configurator.createCert() has been modified to take a clone
flag, a master URL, and an install token instead of the request
object.
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/b91e65474ad5e708b70e0e7bc6708df8db5539dd">b91e6547</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2021-02-24T09:18:54-06:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Refactor Configurator.processCert()
The Configurator.processCert() has been modified to take a
subsystem type, a cert tag, a profile ID, and DNS names.
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/71e9fbb9b0639803ed4de9e497c0a3c2cbb509b0">71e9fbb9</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2021-02-24T10:39:11-06:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Add Configurator.trustCert()
The code that configures the system cert trust flags has been
moved into Configurator.trustCert().
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/16c766cf63723f9f8839549d4911925ae86ca312">16c766cf</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2021-02-24T10:39:18-06:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Add Configurator.setupNewCert()
The code that creates a new system cert has been moved into
Configurator.setupNewCert().
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/6a63aca36f273fbe3df513dcf0628e31581839d9">6a63aca3</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2021-02-24T10:39:39-06:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Add Configurator.setupExistingCert()
The code that imports an existing system cert has been moved
into Configurator.setupExistingCert().
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/f8065af278b11346b38fe072c75a60c75a4952ca">f8065af2</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2021-02-25T10:40:34-06:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Refactor Configurator.createECCKeyPair()
The Configurator.createECCKeyPair() has been modified to take
an EC type parameter.
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/c154da5d2083bbb496c0e56e99da4cdecc2e076c">c154da5d</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2021-02-25T11:30:30-06:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Refactor Configurator.createKeyPair()
The Configurator.createKeyPair() has been merged into setupCert().
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/e5cb1427acf94829c32c9e1e5bc8c2e30d8529ec">e5cb1427</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2021-02-25T11:30:33-06:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Refactor Configurator.createCertRequest()
The Configurator.createCertRequest() has been modified to take
DN, algorithm, extension OID, extension data, and extension
critical parameters.
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/5476881afa7297a87614be541a2122a320a6e4e7">5476881a</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2021-02-25T11:30:33-06:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Refactor Configurator.setupNewCert()
The Configurator.setupNewCert() has been modified to take
DN, algorithm, extension OID, extension data, and extension
critical parameters.
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/e414962c56d2b32125eed63be973f51a1681236f">e414962c</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2021-02-25T11:30:33-06:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Remove unused constants in SystemCertData
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/21dee807ff4b6747e61dc8f468ab58e62628e1c9">21dee807</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2021-02-25T17:17:24-06:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Convert QE test to Docker
Previously the QE test was running on Vagrant which can only
run on macOS runners on GitHub:
https://stackoverflow.com/questions/66261101/using-vagrant-on-github-actions-ideally-incl-virtualbox
However, there is a performance issue with the macOS runners
which is causing the test to fail occasionally:
https://github.com/actions/virtual-environments/issues/1336
To improve the reliability, the QE test has been converted
to run on Docker instead. Some steps for configuring the
machine hostname in configure_common.yml have been removed
since it's no longer necessary.
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/f7aefd19874f1d74212870a85777dc430c86c1bc">f7aefd19</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2021-03-01T09:26:49-06:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Move server classes to pki-server
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/83cf370f7c1f08a89bdab8928606d1fc7978d196">83cf370f</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2021-03-01T09:26:53-06:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Move enrollment constraints to pki-ca
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/7871b7aee741c641bdb5b1c8d060eee82d9abb96">7871b7ae</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2021-03-01T09:26:58-06:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Move enrollment extension defaults to pki-ca
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/9c1e2d2141475526e9fe03f1b0f5f89307b8843d">9c1e2d21</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2021-03-01T09:27:03-06:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Move enrollment defaults to pki-ca
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/803ebabe7e30dd787486bdd9629ff2146ca2fe0f">803ebabe</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2021-03-01T09:27:09-06:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Move profile factories to pki-ca
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/107bb049c07b3688f6d8503a9a9e3f403ce5c5c2">107bb049</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2021-03-01T09:27:14-06:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Move CA classes to pki-ca
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/37432d649d3b68ddc7679c0b6ee730fcfae1d48f">37432d64</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2021-03-01T09:27:20-06:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Move KRA classes to pki-kra
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/a1275b41a27a99ebdfe239845d9b10c5bb165741">a1275b41</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2021-03-01T09:27:29-06:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Move TKS classes to pki-tks
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/8e885fbaf15ed0856b0cbc29585b286d0fc91fbf">8e885fba</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2021-03-01T10:57:08-06:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Replace CMS.getCMSEngine() in pki-ca
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/aa443318b6e23a3b744e7bfea3fd76ac09dc659a">aa443318</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2021-03-01T10:57:11-06:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Replace CMS.getCMSEngine() in pki-kra
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/c4b56d74fa02834b33ebad69ca8cc3efd051aadf">c4b56d74</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2021-03-01T10:57:15-06:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Replace CMS.getCMSEngine() in pki-ocsp
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/62c7677785fdf19ab423e352768b2275e9180ec8">62c76777</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2021-03-01T10:57:17-06:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Replace CMS.getCMSEngine() in pki-tks
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/7fe37ee2ad11c9dd31e74ca17612351f83604fae">7fe37ee2</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2021-03-01T14:49:27-06:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Refactor CASigningUnit.sign()
The CASigningUnit.sign() has been modified to throw all
exceptions and let them be handled by the caller.
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/99d0c09ca2de2e6a28d83e9b6976d09ae6ed5d3b">99d0c09c</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2021-03-01T14:49:28-06:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Refactor OCSPSigningUnit.sign()
The OCSPSigningUnit.sign() has been modified to throw all
exceptions and let them be handled by the caller.
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/e5b61a19d19220f7970ccfdb0a6d8b940a7195b9">e5b61a19</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2021-03-01T14:49:29-06:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Refactor CASigningUnit.verify()
The CASigningUnit.verify() has been modified to throw all
exceptions and let them be handled by the caller.
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/3ccd775aa2ebfd55652eb2fbb9c4580dc7a3affa">3ccd775a</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2021-03-01T14:49:31-06:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Refactor OCSPSigningUnit.verify()
The OCSPSigningUnit.verify() has been modified to throw all
exceptions and let them be handled by the caller.
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/2f6f1df8cf85a8a8e6ae19eb8ba9578eb946d95b">2f6f1df8</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2021-03-01T17:16:57-06:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Refactor CertificateAuthority.getCertChain()
The CertificateAuthority.getCertChain() has been moved into
SigningUnit class.
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/0f4044e7c2d4189c6891b0a6e43953b05cced4b8">0f4044e7</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2021-03-01T17:22:39-06:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Clean up OCSP fields in CertificateAuthority
The CertificateAuthority has been modified to get OCSP
info directly from OCSP signing unit instead of storing
them into fields.
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/7432d4ca68d51f6a6c92195ba191ee6b0b646b3f">7432d4ca</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2021-03-01T17:24:51-06:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Clean up CRL fields in CertificateAuthority
The CertificateAuthority has been modified to get CRL
info directly from CRL signing unit instead of storing
them into fields.
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/4904b366c325cc55a300eb5793b08017118bb2ed">4904b366</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2021-03-01T17:25:01-06:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Clean up CA fields in CertificateAuthority
The CertificateAuthority has been modified to get CA
info directly from CA signing unit instead of storing
them into fields.
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/59b7a9546748cb03b4999d1f68f86c9aee0fb769">59b7a954</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2021-03-01T17:25:12-06:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Clean up OCSP fields in OCSPAuthority
The OCSPAuthority has been modified to get OCSP info directly
from OCSP signing unit instead of storing them into fields.
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/78c3e04e5f8cb036d227b7cda04bfe9a926ca56f">78c3e04e</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2021-03-01T18:35:50-06:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Refactor DBRegistry
The DBRegistry has been modified to no longer implement
ISubsystem.
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/d58fe66ee1b4c9f1818aa139b9bb09a67f0337dc">d58fe66e</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2021-03-01T18:38:25-06:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Convert ICMSExtension into CMSExtension
The ICMSExtension interface has been converted into
CMSExtension abstract class. The init() method has been
modified to no longer take an owner parameter.
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/6fe9c8128868fe3c5ac263ec9b1fa90fb280e561">6fe9c812</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2021-03-01T18:41:47-06:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Refactor CMSExtensionsMap
The CMSExtensionsMap has been modified to no longer
implements ISubsystem.
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/28c0398184d46efcc57ce5b4a453675354195145">28c03981</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2021-03-01T18:48:15-06:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Refactor RequestSubsystem.init()
The RequestSubsystem has been modified to no longer implement
ISubsystem. The RequestSubsystem.init() has been modified to
take a DBSubsystem parameter.
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/0c4f95fe13abf6bf781ef1f79c6f30c09cb8fd26">0c4f95fe</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2021-03-01T18:50:43-06:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Remove RequestSubsystem.getRequestQueue()
The RequestSubsystem.getRequestQueue() has been replaced with
direct calls to RequestQueue constructor.
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/f7b82ae690ac1a7b137f0dc444d4329775ed21df">f7b82ae6</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2021-03-02T11:24:37-06:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Add pki pkcs7-export
The pki pkcs7-export has been added to export certs from
NSS database into a PKCS #7 file.
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/8f50ed3f38990a85fc1535c597412784619ea09a">8f50ed3f</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2021-03-02T11:24:37-06:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Add pki pkcs7-cert-import
The pki pkcs7-cert-import has been added to import certs
into a PKCS #7 file.
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/72bba1c14e9719858cc88e5d7312d52d0c914e23">72bba1c1</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2021-03-02T11:24:37-06:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Update pki pkcs7-import
The pki pkcs7-import has been updated to deprecate the
--input-file and --trust-flags params.
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/79f147c7d481ed18a0a5f5040a69e509b35e12d4">79f147c7</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2021-03-02T11:24:37-06:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Update pki pkcs7-cert-find
The pki pkcs7-cert-find has been updated to replace the
--pkcs7-file param with --pkcs7.
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/5bb471000f89d846053e65f924299a3e61df3d75">5bb47100</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2021-03-02T11:24:37-06:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Update pki pkcs7-cert-export
The pki pkcs7-cert-export has been updated to replace
--pkcs7-file param with --pkcs7, and add --output-file.
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/3cfc09c4f48469d12bd26048994416b6f5424436">3cfc09c4</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2021-03-02T11:24:37-06:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Add doc for pki pkcs7 CLI
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/75ed2b96026478c0042e42fd110474d7dbe9c7ae">75ed2b96</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2021-03-02T11:24:37-06:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Add test for pki pkcs7 CLI
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/13f4c7fe7d71d42b46b25f3e8472ef7f35da5dd6">13f4c7fe</a></strong>
<div>
<span>by Alexander Scheel</span>
<i>at 2021-03-02T16:57:16-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Resolve XSS in ca queryCert pagination
Several values in ListCerts were reflected back to the caller, making a
reflected XSS attack possible. These values were sanitized and the
front-end template fixed to prevent this type of attack in general.
Resolves: CVE-2020-25715
Signed-off-by: Alexander Scheel <ascheel@redhat.com>
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/147fbdc5c289f039b06ee534f14250b6bae15fa9">147fbdc5</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2021-03-02T18:48:56-06:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Move RecoverThread into a separate file
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/d1499526493636405e433a5eb774ade98fc87cff">d1499526</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2021-03-02T18:48:56-06:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Move RequestList into a separate file
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/6f24b967ab8932c2c0e5cad02e3a4a39f1ad073d">6f24b967</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2021-03-02T18:48:56-06:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Move RequestListByStatus into a separate file
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/82b37d94fe773f68d769fc62f25efe462ec05076">82b37d94</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2021-03-02T18:48:56-06:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Move EnrollmentRequest into a separate file
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/1d35199e61271ba20225dba5624bb9a92af1972d">1d35199e</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2021-03-02T18:48:56-06:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Move RequestIAttrSetWrapper into a separate file
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/0d6c9951a6a0071faf2dd352e44c19a895e95abe">0d6c9951</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2021-03-02T18:48:56-06:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Move Request into a separate file
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/9a7e23119d1939c9c28ce7a7847007ad6d5402e6">9a7e2311</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2021-03-02T18:48:56-06:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Move RunListeners into a separate file
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/4c47bd446c57b81a6eed5553a534b3ea003d19bf">4c47bd44</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2021-03-02T18:56:02-06:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Merge RequestRepository constructors
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/e062dc83bf710f07458e148b61b5b6cd5df027b8">e062dc83</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2021-03-02T18:56:27-06:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Move RequestRepository.getBaseDN() to Repository
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/942119a59a876402995f45d245742fb65bacbac5">942119a5</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2021-03-02T18:57:23-06:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Refactor RequestQueueTest.cmsTestSetUp()
The RequestQueueTest.cmsTestSetUp() has been modified to
throw all exceptions.
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/9306d50e80077138e0d8468767e52f1e0885f17a">9306d50e</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2021-03-02T20:49:08-06:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Refactor RequestQueue constructor
The RequestQueue constructor has been modified to take
a RequestRepository parameter.
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/1160c27f3134915c85bcbb1423f5d518aadef56e">1160c27f</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2021-03-03T10:45:29-06:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Update dependency to JSS 4.8.2
The dependency has been updated due to the use of new APIs
in JSS 4.8.2.
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/fa0c12a75cd99cf7f1c839a451ca3b04ebeef430">fa0c12a7</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2021-03-03T14:02:07-06:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Add test for installing CA with ECC
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/479244d2bfb1076e78654d8a0c9737129b6e826d">479244d2</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2021-03-03T14:05:29-06:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Update CI Dockerfile
The CI Dockerfile has been modified to install PKI packages
in the container image.
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/fac8551110f6cf5cea4eec222fd464c63285c54a">fac85511</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2021-03-03T14:06:34-06:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Remove redundant PKI package installations
The CI tests have been modified to no longer install PKI
packages since they are already installed in the container
image.
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/ea7060f17b43825b060a3281efe5227e82a7ff53">ea7060f1</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2021-03-03T14:07:14-06:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Clean up redundant CI dependencies
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/5cefaa99e32d61852bea223f765c73acdcc66fd1">5cefaa99</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2021-03-03T14:07:14-06:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Add COPR_REPO argument in CI Dockerfile
The CI Dockerfile has been modified to provide an argument
to override the COPR repository used for building the
container image.
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/928c06c2efe63de7b5d4248d233ef916f8ddcc47">928c06c2</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2021-03-03T14:07:14-06:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Update CI to use multi-stage builds
The CI has been modified to build PKI packages and the
container image using multi-stage builds.
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/eee2fb909fa64493745e5df9fff8ab315cae0289">eee2fb90</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2021-03-03T15:04:51-06:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Rename ARequestNotifier to RequestNotifier
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/77271aa8155b88e682cecdbd89f227a3c849f922">77271aa8</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2021-03-03T16:07:46-06:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Remove unused KRANotify.mKRA field
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/848f0cae3689d04973adbe05f0a6b18c631cd808">848f0cae</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2021-03-03T16:07:55-06:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Add CANotify
The code in RequestNotifier that depends on CA object
has been moved into a new CANotify class.
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/214b228221f7824f33951308df7a828ef48e9378">214b2282</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2021-03-03T16:07:55-06:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Move CertificateAuthority.initCertRequest() into CAConfigurator
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/0b85767665e58f28e6e2b581b999d7a89aee8274">0b857676</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2021-03-03T16:07:55-06:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Move CertificateAuthority.createCertRecord() into CAConfigurator
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/d0e53c57540eb912943f1bdbe4e16e4964e49885">d0e53c57</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2021-03-03T16:12:22-06:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Rename Configurator.loadCert() to importCert()
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/a89a612bf0c09dca55731d0914293afc24752a74">a89a612b</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2021-03-03T16:12:24-06:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Rename PKISubsystem.update_subsystem_cert() to update_system_cert()
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/714c710a8fc897cfe24a692e2395ee155ce4238b">714c710a</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2021-03-03T16:12:25-06:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Fix indentation in Configuration.setupCert()
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/f230dcb9c4f8cc553283e58cda2317e03d269b12">f230dcb9</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2021-03-03T18:37:48-06:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Refactor PKIDeployer.setup_system_certs()
The code that handles the server response in
PKIDeployer.setup_system_certs() has been moved
into setup_cert().
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/ac1da830e609b944ee168af49e8135682c08b5c4">ac1da830</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2021-03-03T19:43:13-06:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Refactor Configurator.setupCert() (part 1)
The Configurator.setupCert() has been modified to get the
token name, profile ID, and cert type through SystemCertData
instead of directly from preop properties.
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/cfeb3d99b48b68e949a6ea431a2031bd9e80ad3d">cfeb3d99</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2021-03-03T19:43:21-06:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Refactor Configurator.setupCert() (part 2)
The Configurator.setupCert() has been modified to get the
DNS names for SAN extension through SystemCertData instead
of directly from service.sslserver.san property.
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/cad787dc14846735d59c8692c53973831e7abdee">cad787dc</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2021-03-03T19:52:27-06:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Update dependency to JSS 4.9.0
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/714ef899b7ef74973de571eecf1a39a4c846f598">714ef899</a></strong>
<div>
<span>by Fraser Tweedale</span>
<i>at 2021-03-05T22:34:47+10:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">cert-fix: avoid crash on missing CS.cfg param
`pki-server cert-fix` reads (and writes) the CS.cfg parameter
`selftests.container.order.startup`. If this parameter is missing,
the resulting `KeyError` crashes the program. We have seen several
cases where this parameter is missing, and its absense is otherwise
benign.
Update the relevant subroutine to avoid a crash in the case where
the `selftests.container.order.startup` parameter is missing.
Fixes: https://bugzilla.redhat.com/show_bug.cgi?id=1930586
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/269a38bacfc18e513686cf43809c7c9d1935d352">269a38ba</a></strong>
<div>
<span>by Fraser Tweedale</span>
<i>at 2021-03-05T22:34:47+10:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">cert-fix: emit warning if subsystem has selftests configured
A subsystem having no startup selftests configured might have been
deliberately configured that way. But it is not a desirable
configuration for the long term. Update `pki-server cert-fix` to
emit a warning when a subsystem has no startup selftests configured
in CS.cfg.
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/2ecfd0d5a9be66c23065dcb3146963e61fbe16ca">2ecfd0d5</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2021-03-08T10:36:21-06:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Move CI Dockerfile
The CI Dockerfile has been moved to the top-level folder.
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/79064f40c793734b24461bc8569d6c8c2fb77dd0">79064f40</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2021-03-08T10:36:21-06:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Move list of IPA CI tests
The list of IPA CI tests has been moved into ipa-test.sh.
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/19bd8ae703d0c4c9e2f56380b93c3452a112ce33">19bd8ae7</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2021-03-08T10:36:21-06:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Clean up CI build options
The CI BUILD_OPTS have been modified to no longer use timestamps
and commit IDs in PKI package names. The build-push-action has
also been modified to use the default Git context.
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/dfdb253cdcfe8aa66033dd0f0a94a701633184bc">dfdb253c</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2021-03-08T10:36:21-06:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Rename CI runner container image
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/4da7bb9eefc7d0832a97950914b2ba5442869520">4da7bb9e</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2021-03-08T10:36:21-06:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Remove unused CI LOGS variable
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/1e0804485ff0f5547b099bd283707ed88b9238b1">1e080448</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2021-03-08T19:16:16-06:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Update exception for unsupported cert revocation
The ACMEIssuer.revokeCeritifcate() has been modified to generate
a urn:ietf:params:acme:error:unsupported error message instead of
NotImplementedException.
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/712f20156cce56f1e2ffd0fac0e8065846f7a708">712f2015</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2021-03-08T19:16:16-06:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Update ACMEEngine.parseCSRExtensions()
The ACMEEngine.parseCSRExtensions() has been modified to
downcast CSR extensions into Extension class.
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/95308c6b3530739460d39424103ccd5b5a6f2acd">95308c6b</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2021-03-08T19:16:16-06:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Update ACMEEngine.validateRevocation()
The ACMEEngine.validateRevocation() has been modified to use
X509CertImpl to parse cert data.
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/f309fa26b207d1740199894cac36e69da3c9e836">f309fa26</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2021-03-08T19:16:16-06:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Clean up ACME CI tests
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/6a1623a89972038ae0a474de12fd31632723a9c0">6a1623a8</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2021-03-08T20:41:11-06:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Update ACME Dockerfile
The ACME Dockerfile has been updated to work with Quay and
Docker Hub.
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/745dbf0db2cf39b0643c499e3e0a7030290c886a">745dbf0d</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2021-03-09T15:05:36-06:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Add SystemConfigService.loadCert()
The SystemConfigService.loadCert() has been added to load
existing system certs.
The CAConfigurator.loadCert() has been added to initialize
the CA with existing signing certificate.
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/9ff8bd5ec1f1ff000a4ae6d250cac244f1c36d03">9ff8bd5e</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2021-03-09T15:05:39-06:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Refactor Configurator.setupCert()
The code that loads existing certs in Configurator.setupCert()
has been moved into PKIDeployer.setup_cert().
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/431e99d5ab773c3b5bb6eb7ae3ebcff6e492bcb4">431e99d5</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2021-03-09T15:05:41-06:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Clean up Configurator.loadCert()
The unused code that stores the request and cert data into
the Cert object in Configurator.loadCert() has been removed.
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/fbabcb6233ef3e2394a6406b258a7c909590ec60">fbabcb62</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2021-03-09T15:05:43-06:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Removed unused fields in CertificateSetupRequest
The external and standAlone fields in CertificateSetupRequest
are no longer used so they have been removed.
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/a1d5fe72ae02b68319984541afc6b2b9b2514987">a1d5fe72</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2021-03-09T16:35:53-06:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Merge Configurator.setupNewCert() into setupCert()
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/10feff629a37f7e463e2806db7e1470385bcd2ea">10feff62</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2021-03-09T16:35:55-06:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Refactor Configurator.setupCert()
The code that stores the request and cert data into
CS.cfg in Configurator.setupCert() has been moved
into PKIDeployer.setup_system_certs().
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/89e052444206642671c102a9ca39cce5f8dc2c09">89e05244</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2021-03-09T16:43:30-06:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Refactor Configurator.createCert()
The code that calls Configurator.createLocalCert() in
createCert() has been moved into setupCert().
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/481d325391ff42bbf71cabb7f080e9298d5105ba">481d3253</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2021-03-09T19:36:50-06:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Copy ACME Dockerfile into main Dockerfile
The ACME Dockerfile has been copied from base/acme/Dockerfile
which uses a single build stage into the main Dockerfile which
uses multiple build stages.
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/dd0dd0ef7ae9d53522a92a6d1c51b5709ffc5053">dd0dd0ef</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2021-03-09T19:38:39-06:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Add test for ACME container
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/cc9b877856828d13b9bfa53060af1603792747df">cc9b8778</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2021-03-10T12:00:43-06:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Restored timestamp and commit ID in CI build options
Commit 19bd8ae703d0c4c9e2f56380b93c3452a112ce33 has been
reverted to avoid conflicts with COPR builds.
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/0e9fa98af3b772145aeafbb289e381d4e9f10d6c">0e9fa98a</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2021-03-10T15:22:31-06:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Fix PKIServer.restart()
The PKIServer.restart() has been modified to always wait
until the server is stopped before starting it again.
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/b9e80c95f502bb8365801a88182d3c1e458644d1">b9e80c95</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2021-03-10T15:36:29-06:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Move startup_timeout and request_timeout into PKIDeployer
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/c95163a643eaaa91cfb1952b12776c7603155ae7">c95163a6</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2021-03-10T15:36:29-06:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Update PKIServer.start(), stop(), and restart()
The PKIServer.start(), stop(), and restart() invocations in
pkispawn and pkidestroy has been modified to wait until the
operation is complete.
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/5b2ef508ce4f67a6e5fd898f6e918aa49ae41f1c">5b2ef508</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2021-03-10T16:18:13-06:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Add PKISubsystem.restart()
A new PKISubsystem.restart() has been added to disable
a subsystem then reenable it again.
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/69e147c90960f8c8c925ce72204b5ba79cd60c14">69e147c9</a></strong>
<div>
<span>by Alexander Bokovoy</span>
<i>at 2021-03-10T20:25:55-06:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Update pki.spec to not depend on esc for s390(x) architectures
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/537d923fd41e02abc084d3105c67b17302f75ea7">537d923f</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2021-03-10T21:02:32-06:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Clean up spec file
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/cd1f8d0a4b1370531f264c09f48311614f1765b1">cd1f8d0a</a></strong>
<div>
<span>by Alexander Scheel</span>
<i>at 2021-03-15T09:39:07-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Remove i686 builds in the future
For Fedora and RHEL-9, we probably should drop i686 builds. This is
partially due to the lack md2man (for converting our man pages) but also
due to the lack of multilib compatible Java packages. Best to ship
64-bit only packages then.
Discussed with Alexander Bokovoy in #freeipa.
Signed-off-by: Alexander Scheel <alexander.m.scheel@gmail.com>
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/9cfd14b0a07ee2eed354cd59fec0e6cd663bf899">9cfd14b0</a></strong>
<div>
<span>by Fraser Tweedale</span>
<i>at 2021-03-15T11:37:44-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Fix renewal profile approval process
Due to a recent change in PKI CLI, the CLI now passes along user
authentication with submissions to the renewal endpoint. Unlike the EE
pages, the REST API has passed along this authentication for a while.
Due to a bug in the RenewalProcessor, requests with credentials against
profiles with no authentication method and no ACLs result in the
certificiate automatically being approved. This occurs because, when
an earlier commit (cb9eb967b5e24f5fde8bbf8ae87aa615b7033db7) modified
the code to allow Light-Weight SubCAs to issue certificates, validation
wasn't done on the passed principal, to see if it was a trusted agent.
Because profiles requring Agent approval have an empty ACL list (as, no
user should be able to submit a certificate request and have it
automatically signed without agent approval), authorize allows any user
to approve this request and thus accepts the AuthToken.
Critical analysis: the RenewalProcessor code interprets (authToken
!= null) as evidence that the authenticated user is /authorized/ to
immediately issue the certificate. This mismatch of concerns (authn
vs authz) resulted in a misunderstanding of system behaviour. The
"latent" AuthToken (from the HTTP request) was assigned to authToken
without realising that authorization needed to be performed.
We fix this by splitting the logic on whether the profile defines an
authenticator. If so, we (re)authenticate and authorize the user
according to the profile configuration.
If the profile does not define an authenticator but there is a
principal in the HTTP request, if (and only if) the user has
permission to approve certificate requests *and* the requested
renewal profile is caManualRenewal (which is hardcoded to be used
for LWCA renewal), then we issue the certificate immediately. This
special case ensures that LWCA renewal keeps working.
Otherwise, if there is no principal in the HTTP request or the
principal does not have permission to approve certificate requests,
we leave the authToken unset. The resulting renewal request will be
created with status PENDING, i.e. enqueued for agent review.
Signed-off-by: Fraser Tweedale <ftweedal@redhat.com>
Signed-off-by: Alexander Scheel <ascheel@redhat.com>
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/7e450d6220c650641a7472d76722671534b34a53">7e450d62</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2021-03-15T21:18:21-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Fix QE tests reliability
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/f436e39b05689026e3780bd04e6e4ba89ee2598d">f436e39b</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2021-03-15T21:18:21-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Update pki.spec for ELN/RHEL
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/a88d0efe5107f61909cee4750c1802317e96f39a">a88d0efe</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2021-03-15T21:18:21-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Clean up CryptoUtil.signCert()
The CryptoUtil.signCert() has been modified to throw a generic
Exception.
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/a60ccb8e3758834ad3339c663a0c02da11c70926">a60ccb8e</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2021-03-15T21:18:21-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Replace SigningUnit.mapAlgorithmToJss()
The SigningUnit.mapAlgorithmToJss() has been replaced with
direct calls to Cert.mapAlgorithmToJss().
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/a3537f345677709f85f85528684a284dd27ade47">a3537f34</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2021-03-15T21:18:21-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Refactor PKIInstance.get_sslserver_cert_nickname()
The code that loads the SSL server cert nickname from server.xml
has been moved to PKIServer.get_sslserver_cert_nickname().
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/00e6351b9a73055d9a73a317d8645e4417ebe628">00e6351b</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2021-03-15T21:51:20-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Refactor PKIInstance.set_sslserver_cert_nickname()
The code that stores the SSL server cert nickname into server.xml
has been moved into PKIServer.set_sslserver_cert_nickname().
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/1b2109a6b3e9831714fa20085f02ce6b45fd3d9b">1b2109a6</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2021-03-15T21:51:20-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Remove unused CertUtils.createCertInfo()
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/4cef6ee17ae32756e29b7231f7fb49305e4baf5f">4cef6ee1</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2021-03-16T16:53:59-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Replace CertificateExtensions with Extensions
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/51936fdeca3506564754da022f9d80b84501a45f">51936fde</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2021-03-16T20:39:59-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Clean up CryptoUtil.createCertificationRequest()
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/bfa34094767d5de565f268823f00e8cc7e2c78ad">bfa34094</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2021-03-16T20:39:59-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Refactor CryptoUtil.createCertificationRequest()
The CryptoUtil.createCertificationRequest() has been modified
to take a KeyPair parameter.
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/2a3e776cbb682ddd7eb3ada118b85d69abee474c">2a3e776c</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2021-03-17T10:24:43-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Fix files listed twice in pki.spec
https://github.com/dogtagpki/pki/issues/3321
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/fc993db19093da4db5e47bfa9fcd85a6a5cf876f">fc993db1</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2021-03-17T10:24:45-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Remove unused imports
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/d65daa0589ab9d53263ae535dab37dddd7537382">d65daa05</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2021-03-17T10:24:47-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Move com.netscape.cms.shares to pki-kra
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/a4ec02e47f10deb338c751bc5e310e398fd3fbda">a4ec02e4</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2021-03-17T10:44:09-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Drop Tomcat 7.0 from pki-server migrate
The pki-server migrate CLI has been modified to remove the code
for migrating into Tomcat 7.0 since it's no longer supported.
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/4111b7953b0195ff8bd59234f907a7780790b3e2">4111b795</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2021-03-17T10:44:25-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Remove unused Tomcat 7.0 files
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/2c9616aedad0968f2c0d772c0764777fc0d37581">2c9616ae</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2021-03-17T12:14:24-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Drop Tomcat 8.0 from pki-server migrate
The pki-server migrate CLI has been modified to remove the code
for migrating into Tomcat 8.0 since it's no longer supported.
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/d16a012950c72b6387f66d438cd6a9ed6a9bc6f5">d16a0129</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2021-03-17T12:14:26-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Remove unused Tomcat 8.0 files
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/96d9cd5dda1ea2713b3332be2d1f1b424dbff075">96d9cd5d</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2021-03-17T13:35:06-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Drop Tomcat 8.5 from pki-server migrate
The pki-server migrate CLI has been modified to remove the code
for migrating into Tomcat 8.5 since it's no longer supported.
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/be6f5653fdb8f9fcd4ea63d23c9a11bc27f1dd29">be6f5653</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2021-03-17T15:47:10-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Convert Tomcat 8.5 files into Tomcat 9.0
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/83b8feaf59fa485f5d57be9c6f68b69baff63f2c">83b8feaf</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2021-03-17T17:02:20-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Convert MigrateCLI.migrate_nssdb() into upgrade script
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/e70373ab131aba810f318c1d917896392b49ff4b">e70373ab</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2021-03-17T17:02:20-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Convert MigrateCLI.migrate_server_xml() into upgrade script
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/4f2af1c5fc6e14971e7028e3af1b364cc0d89138">4f2af1c5</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2021-03-17T17:02:20-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Convert MigrateCLI.migrate_context_xml() into upgrade script
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/1bae09ce887aa6de3f66bb3dc88d8e5566f638db">1bae09ce</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2021-03-17T17:24:02-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Convert MigrateCLI.migrate_service() into upgrade script
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/2bac2ea7c1f06c13b78387dda933ea1a9e373765">2bac2ea7</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2021-03-18T12:31:22-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Move MigrateCLI.export_ca_cert() into PKIServer
The code that exports the CA certificate during startup
has been moved into PKIServer.export_ca_cert().
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/0246930fcd296b4b92cbfd997c20ca740ea58978">0246930f</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2021-03-18T12:31:24-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Add PKIServer.enable_subsystems()
The code that enables all subsystems during startup
has been moved into PKIServer.enable_subsystems().
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/db8c0d3a0f327d8b3c18012f74e278c9652b5305">db8c0d3a</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2021-03-18T12:31:26-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Add PKIInstance.validate_banner()
The code that validates banner during startup has been
moved into PKIInstance.validate_banner().
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/69d39dd368ef1babb0acd317aab9a5b567f467e2">69d39dd3</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2021-03-18T12:31:28-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Add PKIServer.create_catalina_policy()
The code that creates catalina.policy during startup has
been moved into PKIServer.create_catalina_policy().
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/cf497f10c3efe1571f0c24cec62c68bb066bb6c7">cf497f10</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2021-03-18T12:31:31-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Remove restart_server_after_configuration file
The code that creates and removes the
restart_server_after_configuration file has been removed
since the server is restarted automatically by pkispawn.
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/f3d93530709e4f964b67ad37cad965cd5565e163">f3d93530</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2021-03-18T19:30:06-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Clean up log messages during installation
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/ac51d75c11b72d268bd7f33d59bd2f7b0db8db12">ac51d75c</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2021-03-18T19:30:13-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Update subsystem deployment
pkispawn has been modified to deploy/redeploy a subsystem
without restarting the server.
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/7a536cabde7ae2ba08e6e427c9f24c2290d4fbcf">7a536cab</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2021-03-23T09:08:17-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Add test for installing CA with secure DS
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/199a1b58c937217c507922eed682e765132c3934">199a1b58</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2021-03-23T16:29:31-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Clean up CA test with secure DS
The CA test with secure DS has been modified to validate
the SSL connection without modifying the ldap.conf.
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/65d3d83c694b7bd4efc5dc54d70cd16d1df71e96">65d3d83c</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2021-03-23T16:29:31-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Clean up CA test artifacts
The CA tests have been modified to store PKI and DS config files
and log files into a single file.
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/4bbcc1903828d63fd725fe1058ba913fe793fca2">4bbcc190</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2021-03-23T18:27:24-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Add log messages in CryptoUtil.signCert()
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/3a9994f85d5179fa660595b9256acf078c7cdc5f">3a9994f8</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2021-03-23T18:27:24-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Refactor CryptoUtil.generateECCKeyPair()
The CryptoUtil.generateECCKeyPair() has been modified to
throw a generic Exception.
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/944f7fc88b3d03ff709e79269740c2193d75bc88">944f7fc8</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2021-03-23T18:27:24-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Clean up log messages during cloning
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/38b8e6986bff3c10d5a2f5fc9674ae0da4fd509b">38b8e698</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2021-03-24T11:26:37-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Remove redundant type casts
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/1166ae3add988df72c5d6b7a53d8792420d21707">1166ae3a</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2021-03-24T17:58:08-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Add CACMSAdminServlet
The CACMSAdminServlet has been added to store CA-specific
code from CMSAdminServlet.
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/120703a8ceaa9cb6d64923fb75f562617f2d3025">120703a8</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2021-03-24T17:58:13-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Refactor CMSAdminServlet.isSubsystemInstalled()
The CA-specific code in CMSAdminServlet.isSubsystemInstalled()
has been moved into CACMSAdminServlet.
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/b52f2cec4eb64b95c3776777dab73df5a16de981">b52f2cec</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2021-03-24T17:58:13-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Refactor CMSAdminServlet.readEncryption()
The CA-specific code in CMSAdminServlet.readEncryption() has
been moved into CACMSAdminServlet.
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/bd10f87c1402673b10160f3778618da463881c4e">bd10f87c</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2021-03-24T17:58:13-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Refactor CMSAdminServlet.modifyEncryption()
The CA-specific code in CMSAdminServlet.modifyEncryption() has
been moved into CACMSAdminServlet.
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/05fcfcb3e5d5d26047a9afd097d43d9dd9fb331b">05fcfcb3</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2021-03-24T18:21:21-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Refactor CMSAdminServlet.issueImportCert()
The CA-specific code in CMSAdminServlet.issueImportCert() has
been moved into CACMSAdminServlet.
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/75effdc6e218cdaa84ad3f2df7d32e53f699132b">75effdc6</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2021-03-24T18:30:17-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Refactor CMSAdminServlet.installCert()
The CA-specific code in CMSAdminServlet.installCert() has been
moved into CACMSAdminServlet.
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/38c955e5814571bf6e8a70c38d958ddf68fa8814">38c955e5</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2021-03-24T18:30:17-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Refactor CMSEngine.isRevoked()
The CA-specific code in CMSEngine.isRevoked() has been moved
into CAEngine.
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/1b61ce0115f98fe0d51537155bcd891f71b58312">1b61ce01</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2021-03-25T09:22:34-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Add test for installing CA clone with secure DS
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/04f9040b87df46b725581ab5a29e476a495e8aab">04f9040b</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2021-03-25T09:26:38-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Move RenewableCertificateCollection to pki-server
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/3f93003c07e30e44406ad60315dddeb145923629">3f93003c</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2021-03-25T09:26:38-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Move CertRecordMapper to pki-ca
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/7f01deeab46ae3de7e48bc1da735964f193aa406">7f01deea</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2021-03-25T09:26:38-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Move RenewalServlet to pki-ca
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/476ce4ab748a20770211fa616e12eb60d322f33f">476ce4ab</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2021-03-25T09:26:38-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Move IPublishRuleSet to pki-ca
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/d0c3e26798774dd0bd1046376786292f4121f284">d0c3e267</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2021-03-25T09:26:38-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Move KeyRepository to pki-kra
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/5e711b1c54c26545cc264fc1400b56fbe1810d50">5e711b1c</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2021-03-25T09:26:38-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Replace IKeyRecoveryAuthority with KeyRecoveryAuthority
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/9b5c65cf104740dc252d3b406a47fdda62df46f0">9b5c65cf</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2021-03-25T09:26:38-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Replace IKeyRepository with KeyRepository
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/abf1b56a7e7e449646cef1bd70263b504dd49c62">abf1b56a</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2021-03-25T11:12:24-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Replace ILdapRule with LdapRule
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/743c87605d15e8a369f1805bf43d3179a803bf6d">743c8760</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2021-03-25T11:12:26-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Replace ICertRecordList with CertRecordList
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/93ce01159dbc887529f76f7cd92bea233bdf5656">93ce0115</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2021-03-25T11:12:28-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Replace ICertRecord with CertRecord
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/c0690048a849457ca22096f2bbeb070e7c55a028">c0690048</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2021-03-25T11:12:30-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Remove unused IRegistrationAuthority.getPublisherProcessor()
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/be38f7c2ec960e2c4479618ad8d624787d05750c">be38f7c2</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2021-03-25T11:13:38-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Replace CertificateAuthority.getPublisherProcessor()
The CertificateAuthority.getPublisherProcessor() has been
replaced with direct calls to CAEngine.getPublisherProcessor().
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/86a174561d63065edf8ae1bf3699ca07a60c6ff9">86a17456</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2021-03-25T15:29:02-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Rename DBSSession into LDAPSession
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/9b192416d248e7bbe2b6b9c60178b8511ec1fc8d">9b192416</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2021-03-25T15:29:04-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Rename DBSSessionDefaultStub into DBSSession
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/b09818b09c08fdf47ef9334a28351780762a21fe">b09818b0</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2021-03-25T16:12:43-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Merge IDBSSession into DBSSession
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/89d73c3a7ddaf2eebe312210362dbd33895579b1">89d73c3a</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2021-03-25T16:12:48-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Rename DBRegistry into LDAPRegistry
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/08ba391b97f115001d40f7adb99e9227e8fd9c0b">08ba391b</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2021-03-25T16:12:48-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Rename DBRegistryDefaultStub into DBRegistry
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/cde2a12580535498eaba0a358e59c19c2bca012a">cde2a125</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2021-03-25T16:12:54-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Merge IDBRegistry into DBRegistry
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/b83697dba99560d104bfa90c185164ce17c7976a">b83697db</a></strong>
<div>
<span>by Pritam Singh</span>
<i>at 2021-03-26T20:18:56+05:30</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Added_doc_for_installing_CA_clone_with_secure_DS (#3486)
Signed-off-by: Pritam Singh <prisingh@redhat.com></pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/48013da6d3d1f93397724e91a4843d06996452db">48013da6</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2021-03-26T10:36:27-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Consolidate ECC key pair usages masks
Previously the ECC key pair usages masks were defined
multiple times in various locations. They now have been
consolidated into CryptoUtil.
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/6ce4026d56061bcd3fa01c05e1a6c56640812d67">6ce4026d</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2021-03-26T13:01:29-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Clean up KRA test artifacts
The KRA tests have been modified to store PKI and DS config
files and log files into a single file.
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/e0a734a25be640747b9741750aa1a9a8f67115b6">e0a734a2</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2021-03-26T14:08:06-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Rename DBDynAttrMapperDefaultStub into DBDynAttrMapper
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/8205b85ee72a4919056864f088001ef988e0b6df">8205b85e</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2021-03-26T14:08:06-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Merge IDBDynAttrMapper into DBDynAttrMapper
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/3bba14dd33d349b466c729edbebbecc2b3d52396">3bba14dd</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2021-03-26T14:08:06-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Convert IDBAttrMapper into DBAttrMapper
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/ed8423a3f36c2212baba214854659f8b8ba76009">ed8423a3</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2021-03-26T14:08:06-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Refactor CMSEngine.initAuthSubsystem()
The CMSEngine.initAuthSubsystem() has been modified to create
a new AuthSubsystem object instead of using a singleton.
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/c384e55a47f427f559ccc4aff11502541904f81b">c384e55a</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2021-03-26T15:04:55-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Add AuthSubsystem.loadAuthManagerPlugins()
The code that loads the auth manager plugins has been moved
into AuthSubsystem.loadAuthManagerPlugins().
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/e55c61adedb2226fe70ee8b332bb6fe4c27e0529">e55c61ad</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2021-03-26T15:06:46-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Add AuthSubsystem.loadAuthManagerInstances()
The code that loads the auth manager instances have been
moved into AuthSubsystem.loadAuthManagerInstances().
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/fa29c2a552b94813ad8e180b15310278ee7e31f7">fa29c2a5</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2021-03-26T19:58:31-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Move RetrieveModificationsTask into separate file
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/181a068aadd8a42eee4ea38e2a1cb5c9aee66e77">181a068a</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2021-03-26T19:58:39-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Move SerialNumberUpdateTask into separate file
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/745c262c30da5bcf5f75592c8e0501e8418d3a5e">745c262c</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2021-03-26T19:58:40-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Move CertStatusUpdateTask into separate file
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/066857011bc581bec9b8cb4a85607b7136c2554d">06685701</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2021-03-26T19:58:46-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Move KeyStatusUpdateTask into separate file
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/fc737b19df107adf2fda51c69d677966027448e1">fc737b19</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2021-03-26T19:58:55-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Move CertificateRepository.setSerialNumberUpdateInterval() into CAEngine
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/505909d8ff75881af774177b05930eb299dbea03">505909d8</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2021-03-26T19:58:55-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Move CertificateRepository.setCertStatusUpdateInterval() into CAEngine
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/0a21a71d1aa21fe20c7465c051c1f522e3ecedb6">0a21a71d</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2021-03-29T09:44:31-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Move CertRecProcessor into a separate file
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/81081a34486ce108b1a40577582c2dc737cc0203">81081a34</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2021-03-29T10:09:58-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Move RevocationRequestListener into a separate file
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/90b218a718027e3c4972508edad41c3861d0b01b">90b218a7</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2021-03-29T11:08:31-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Add CRLIssuingPoint.handleUnexpectedFailure()
The code that handles unexpected failures has been moved from
CRLIssuingPoint.run() to handleUnexpectedFailure().
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/f6c087cb46ce4f996212a3e06be0acb4d96c5e61">f6c087cb</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2021-03-29T11:08:31-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Update log messages in CRLRepository.updateRevokedCerts()
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/5f371f219ac567d27aaeae3fd148f5f16a94a35f">5f371f21</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2021-03-29T11:08:31-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Update log messages in CRLRepository.updateCRLIssuingPointRecord()
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/11d7047f200c692bcd6da9834f17f2249e33dfcd">11d7047f</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2021-03-29T11:08:31-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Update log messages in DBAttrMapper.mapObjectToLDAPAttributeSet()
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/d9063df0c0103881cbbdd0a07fb5e8fb65f79d81">d9063df0</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2021-03-29T11:08:31-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Update log messages in LDAPRegistry.createLDAPAttributeSet()
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/026093c0716b0e408e1a59521506117edc542878">026093c0</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2021-03-29T11:08:31-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Update log messages in LDAPSession.add()
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/9fdfebc3d8e782da69ce611ce591ed4b8565c05d">9fdfebc3</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2021-03-29T11:08:32-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Update log messages in LDAPSession.modify()
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/c1f2d41e359f38a3fb723808f93a15707db8a526">c1f2d41e</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2021-03-29T12:04:30-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Move KeyRepository.updateKeyStatus() into KeyStatusUpdateTask
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/7870ddfd7d7a8735a3eefba7902cee06fc1f6c66">7870ddfd</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2021-03-29T12:05:27-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Move KeyRepository.setKeyStatusUpdateInterval() into KeyRecoveryAuthority
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/e01ff7f2250f02192d87e133c913d1b417748928">e01ff7f2</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2021-03-29T12:05:30-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Move CA tasks to pki-ca
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/e731cfaa4b521d9db39d63ef95c963cc2807a490">e731cfaa</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2021-03-29T12:05:30-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Move CertificateRepository.getModifications() into RetrieveModificationsTask
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/5f6bfa7399971164b25856a2044c2c5ef08e9067">5f6bfa73</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2021-03-29T12:05:30-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Move CertificateRepository.updateCertStatus() into CertStatusUpdateTask
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/0362dc56a56a2421ad288980aa321eb8af936856">0362dc56</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2021-03-29T14:30:34-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Remove unused CertificateRepository.mSkipIfInconsistent
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/e641e2acf8d06c78dd50bb7632f23172a3cfd947">e641e2ac</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2021-03-29T15:26:24-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Clean up CertificateRepository.transitCertList()
Previously the CertificateRepository.transitCertList() was
taking either a list of cert records or the serial numbers
depending on the value of mConsistencyCheck. Since the cert
records are guaranteed to be non-null, the code has been
simplified to take list of serial numbers in all cases.
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/ad6f1ac40688105996cc78cb3333345e27464e10">ad6f1ac4</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2021-03-29T15:26:36-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Update log messages in CertificateRepository.updateStatus()
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/8a3c2a97f646d92ae6de934917c20cc393331de2">8a3c2a97</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2021-03-29T15:26:36-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Move CertificateRepository.transitInvalidCertificates() to CertStatusUpdateTask
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/0744f1a66e4b59094513cc8380bb32724adb545b">0744f1a6</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2021-03-29T15:26:36-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Move CertificateRepository.transitValidCertificates() to CertStatusUpdateTask
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/3893fc05080c8557e1a776078fbeac7ba7aa00ee">3893fc05</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2021-03-29T15:34:12-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Move CertificateRepository.transitRevokedExpiredCertificates() to CertStatusUpdateTask
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/232fa71ee9ea1e163d53e7b1da0dac990967dbed">232fa71e</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2021-03-29T15:34:12-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Move transit attributes from CertificateRepository to CertStatusUpdateTask
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/955a1199d1afb7ee045d945a25ec940634d17918">955a1199</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2021-03-29T17:09:52-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Clean up CertificateRepository.transitCertList() (part 2)
The code that notifies CRL issuing points on revoked and expired
certs has been moved from CertificateRepository.transitCertList()
to CertStatusUpdateTask.updateRevokedExpiredCertificates().
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/6abb91c577cb9f06ca1f84f9d25dba4273fa553e">6abb91c5</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2021-03-29T17:09:55-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Remove redundant CertificateRepository.mCRLIssuingPoints
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/c8c2db5658eb18b9885c7db41e1902e1d1620839">c8c2db56</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2021-03-29T17:09:57-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Remove redundant CAService.mCRLIssuingPoints
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/0285ce463d126deffa176cf8470da042af107e20">0285ce46</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2021-03-29T17:10:00-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Update log messages in AuthSubsystem.init()
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/15fef884353d168234a05ed0c74aefcd229988db">15fef884</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2021-03-29T18:09:24-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Update log messages in CertificateRepository.addCertificateRecord()
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/93a0d2500905350109b80b2a910b2c22b5b86a41">93a0d250</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2021-03-29T18:09:24-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Update log messages in PublisherProcessor.init()
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/8eaac0306efe5b67fe1b3ab6edc4b215ae513165">8eaac030</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2021-03-29T18:09:24-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Update log messages in ProfileSubsystem.init()
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/c99550242737f92da6d3fee78c164e1b8b7006ea">c9955024</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2021-03-30T11:18:56-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Remove unused CertificateRepository.mRequestBaseDN
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/6286d12e30d01318d52055289482b1994b8ee795">6286d12e</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2021-03-30T11:18:59-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Clean up CertificateRepository constructor
The CertificateRepository constructor has been modified to
remove the base DN params.
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/ba964bec545ad317b1fa51ad587aedf4ccff12e4">ba964bec</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2021-03-30T11:19:01-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Remove redundant CertificateRepository.dbSubsystem
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/35c0c3e40eaaa6e44094f6c814c58283be45b52d">35c0c3e4</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2021-03-30T16:43:45-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Remove redundant CertificateRepository.getDN()
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/4a39266b3cfa7ad7bb823879447bf808117e65ee">4a39266b</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2021-03-30T16:43:45-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Clean up CRLRepository constructor
The CRLRepository constructor has been modified to remove the
base DN param.
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/d90b561cd8ff0f2bd62f7b828fe68a7baed1c1a5">d90b561c</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2021-03-30T16:43:45-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Remove redundant CRLRepository.dbSubsystem
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/4011e9b2c85fad0dcb1bd821ff5eb3197d625a74">4011e9b2</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2021-03-30T16:43:45-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Remove redundant CRLRepository.getDN()
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/279fbc79bd44e0bc473e15a5bf0deb9303adf9c0">279fbc79</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2021-03-30T16:43:45-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Clean up ReplicaIDRepository constructor
The ReplicaIDRepository constructor has been modified to remove
the base DN param.
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/5d61ec144e1e0c756f836b29f212f532ba7c16c6">5d61ec14</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2021-03-30T16:43:45-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Remove redundant RequestRepository.dbSubsystem
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/b917a2d8c3feddc760670756a33f00da71e6d61b">b917a2d8</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2021-03-30T16:48:51-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Update log messages in CRLIssuingPoint.updateCRLNow()
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/3ec3a55370eb0dacb473cf668a12ba219c3bb7da">3ec3a553</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2021-03-30T16:48:53-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Update log messages in CRLIssuingPoint.generateFullCRL()
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/db6ad9745b729ead30d5d4f41c040c9ec6a01590">db6ad974</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2021-03-30T16:48:54-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Update log messages in CRLIssuingPoint.generateDeltaCRL()
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/929451d33d5b4ee3db0cc057081176f2f4c3602a">929451d3</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2021-03-30T19:31:22-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Update log messages in RevocationProcessor.processRevocationRequest()
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/2938dca49781012581f658801886daf698822046">2938dca4</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2021-03-30T19:32:07-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Update log messages in RevocationProcessor.processUnrevocationRequest()
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/24749820d8c5de0f3725a28e384378f78f4fa91f">24749820</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2021-03-30T19:32:07-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Update log messages in CertificateRepository.isCertificateRevoked()
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/c7125abb03f88a2aa6ff1997e52ab184e76d5d3f">c7125abb</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2021-03-31T10:20:16-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Clean up tests for PKI tools
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/f56c7f48cd1af62bdd41436e510b9c0128e0cc5f">f56c7f48</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2021-03-31T11:06:37-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Update CryptoUtil.createX509CertInfo()
The CryptoUtil.createX509CertInfo() has been modified to take
a CertificateExtensions parameter.
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/458cfb94ef5f4b7d5676fdf05e2c03ed75b794bf">458cfb94</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2021-03-31T11:06:37-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Update default params for pki nss-cert-request and nss-cert-issue
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/b162c939d1274dc3abbf069cfc376df5b9c6f138">b162c939</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2021-03-31T11:06:37-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Add hash parameter for pki nss-cert-issue
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/7267186bd7af49acb97465108bc1a4ba21329e8a">7267186b</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2021-03-31T13:36:48-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Add test for creating CA agent
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/ee0badcd96eb30c7e3ee8073d759ec014277ee03">ee0badcd</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2021-03-31T13:36:48-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Add test for creating and revoking CA agent cert
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/44d8ba0ce4dc04bf2f6bf0a84edd883748e5a36d">44d8ba0c</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2021-03-31T13:36:48-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Add test for issuing SSL server cert using PKI NSS CLI
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/eefa742e4f6ad5bb4a10a1e12b1a075f846c1262">eefa742e</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2021-03-31T13:36:48-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Add pki-server ca-cert-find
The pki-server ca-cert-find has been added to list the
certs in the DS when PKI server is not running.
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/2e5f79e388f7dd994efe39a830df271162eb48e0">2e5f79e3</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2021-04-01T10:37:02-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Update log messages in NSSDatabase
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/1279f195ef6283ba33a2a38652e555b0081d6628">1279f195</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2021-04-01T12:25:54-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Add test for generating cert with existing key
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/515e7f51d9c2f6525bb300a7a9c8873a4008a3af">515e7f51</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2021-04-01T19:36:38-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Fix PKCS10Client -x parameter
Previously the -x parameter in PKCS10Client was parsed but
never used. The code has been modified to use the parameter
to select the key usage mask when generating an EC key.
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/b6fb1a5099a2767100d33dcf363f3e1ab670e520">b6fb1a50</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2021-04-05T09:39:28-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Move notifiers from CAEngine to CMSEngine
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/fdc56a0be958d9a02b5caf61fc2a932ec9396f86">fdc56a0b</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2021-04-05T09:39:32-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Move notifiers from KeyRecoveryAuthority to CMSEngine
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/947fc3d9ff8b6876532e3b7ac3515a9a1054cdae">947fc3d9</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2021-04-05T10:58:11-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Move LdapUnrevocationListener into separate file
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/9391d64482af32c0038e99333ee82bcb6123c7c6">9391d644</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2021-04-05T11:00:10-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Move LdapRevocationListener into separate file
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/2f5fad2b85a634be23994c9e2de66f1a1d04499a">2f5fad2b</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2021-04-05T11:01:59-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Move LdapRenewalListener into separate file
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/15aba464f5129db329de9753d05923bfc4f6e17f">15aba464</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2021-04-05T11:03:59-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Move LdapEnrollmentListener into separate file
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/e6e92e27b9c26f758cb0de357c35875584d91a74">e6e92e27</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2021-04-05T11:24:47-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Remove redundant ICertAuthority.getCertificateRepository()
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/16e3840b994ca19bc8c71a82832861ad45b6cf99">16e3840b</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2021-04-05T11:24:49-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Refactor RequestNotifier.checkAvailablePublishingConnections()
The code in RequestNotifier.checkAvailablePublishingConnections()
only works in CA so it has been moved into CANotify.
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/5fca754fe2d46ebe22828cb5ee09dca5f8d281f2">5fca754f</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2021-04-05T11:39:07-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Refactor PublisherProcessor.mLdapRequestListener
The PublisherProcessor.mLdapRequestListener has been converted
into IRequestListener to remove dependency on LdapRequestListener.
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/3961294007f4f0b62f536cd61dc9fc8dbaa3507e">39612940</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2021-04-05T14:35:20-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Merge IReplicaIDRepository into ReplicaIDRepository
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/dd25b87b49d59d91ae95369cce98b3fa685a4cd8">dd25b87b</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2021-04-05T14:35:21-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Add PublishingConfig
The PublishingConfig has been added to encapsulate ca.publish.*
parameters.
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/429af6fe7a02bd3ad6274d5291a6adc2eb98acd9">429af6fe</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2021-04-05T14:35:23-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Add PublishingPublisherConfig
The PublishingPublisherConfig has been added to encapsulate
ca.publish.publisher.* parameters.
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/79d6af4c75e90b45ccff12d3378bae4a43332d56">79d6af4c</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2021-04-05T14:35:23-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Add PublishingMapperConfig
The PublishingMapperConfig has been added to encapsulate
ca.publish.mapper.* parameters.
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/8c7ee283fcc1b3ba3dd93e9d87b5ebb774b57cec">8c7ee283</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2021-04-05T14:35:23-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Add PublishingRuleConfig
The PublishingRuleConfig has been added to encapsulate
ca.publish.rule.* parameters.
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/1612f615aa02e26eff114a9286b4bfc503ee86f6">1612f615</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2021-04-05T14:49:00-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Split PublisherProcessor into CAPublisherProcessor
The CA-specific code in PublisherProcessor has been moved
into CAPublisherProcessor.
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/40c44d479b2af5197a4d71373e37af268f04ffec">40c44d47</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2021-04-05T14:49:00-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Move LdapRequestListener to pki-ca
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/232d60c7f5d71f5531c6e9f66907b1223371cac7">232d60c7</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2021-04-05T14:49:00-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Move CAPublisherProcessor to pki-ca
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/e5f2cafc886fbef9106330691317310e4c8547d7">e5f2cafc</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2021-04-05T14:49:00-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Move LocalConnector to pki-ca
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/4d209526b034f268872304f820f2cbbb6467bf0f">4d209526</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2021-04-06T12:53:06-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Move GetTransportCert to pki-kra
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/f046985bf321ea3df04fe4dc4a56b8c94c13e53b">f046985b</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2021-04-06T12:53:08-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Move IRequestQueue.getRequestRepository() to CAEngine
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/57aa2f37fa97bd02ed6c81300c1704dab9dcf5af">57aa2f37</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2021-04-06T12:53:11-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Refactor Repository constructor
The Repository constructor has been modified to take radix and
repository ID parameters.
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/994f0135d973438289e33cefd402a8de5a4246f4">994f0135</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2021-04-06T12:53:13-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Replace Repository.mRepo with repository config
The Repository.mRepo field that contains the repository ID
has been replaced with a repositoryConfig Hashtable.
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/90db55c89bf9df8a63542d2a8fb1544c241e5641">90db55c8</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2021-04-06T12:53:16-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Remove unused methods in DBSubsystem
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/8f68df8f505065d02d70f8d78bedb9e4f15bc603">8f68df8f</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2021-04-06T12:53:16-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Refactor repository config initialization
The code that initializes repository configs in DBSubsystem
has been moved into each repository constructor.
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/93893132377e87f9a1833899825d3893fbfa2b78">93893132</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2021-04-06T17:33:41-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Remove DBSubsystem singleton
The CMSEngine has been modified to create a new DBSubsystem
instance instead of use a singleton.
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/c0c1983ff0a08cc62ebb015269a83bd57eee035a">c0c1983f</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2021-04-06T17:34:20-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Merge IRequestQueue into ARequestQueue
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/ecfbd7170eb010a140b8f801523e5e4df4f8f418">ecfbd717</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2021-04-06T18:02:51-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Refactor ARequestQueue.newRequest()
The ARequestQueue.newRequest() has been modified to take a
request ID.
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/3001de08b26d3fcb5e9b9961dc3dee5937001286">3001de08</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2021-04-06T18:04:25-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Refactor CANotify constructor
The CANotify constructor has been modified to no longer
take a CertificateAuthority object.
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/7a6182962fbcfa3067e49300757db1156787a9b7">7a618296</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2021-04-06T18:09:35-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Add RequestNotifier.getRequestRepository()
The RequestNotifier.getRequestRepository() has been added
to provide the request repository object.
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/c7e41c46594d4c6e5fcf3c25ebcbb5f22c8655eb">c7e41c46</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2021-04-06T18:09:54-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Remove unused methods in ARequestQueue
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/925006c4955f35c756dd7a2446a1dff3004a9b8a">925006c4</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2021-04-06T18:11:42-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Refactor KeyRequestDAO.getTransientData()
The KeyRequestDAO.getTransientData() has been modified to
get the KeyRecoveryAuthority object from KRAEngine.
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/520a02dac6de138c6abed09485b1f739cffb03de">520a02da</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2021-04-06T18:16:23-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Refactor CMSRequestDAO.queue
The CMSRequestDAO.queue has been modified such that it will
be initialized by CMSRequestDAO subclasses.
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/82f7d2c5ae9ac0c1252b2287d5ad7efdbaa824ac">82f7d2c5</a></strong>
<div>
<span>by dpuniaredhat</span>
<i>at 2021-04-07T19:36:59+05:30</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Disable allow failure on QE upstream pipeline (#3494)
Signed-off-by: Deepak Punia <dpunia@redhat.com></pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/07f4c43a63e95f5654e2a2303732b432413927c8">07f4c43a</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2021-04-07T09:19:51-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Remove unused DBSubsystem.mRepos
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/bcd4b32c1733927e0646c47a18dfeb82edebc3d2">bcd4b32c</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2021-04-07T09:19:53-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Move DBSubsystem.setMin/MaxSerialConfig() to Repository
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/8ce2f2dc63ffa2bc7bcf9f323c4127fcb98bb1fd">8ce2f2dc</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2021-04-07T09:19:54-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Move DBSubsystem.setNextMin/MaxSerialConfig() to Repository
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/3b7ab61dd05bdb9104d6f845391d070f19765a59">3b7ab61d</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2021-04-07T09:44:25-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Move DBSubsystem.getNextRange() to Repository
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/96786ec9eb70bf29b01b75f0a591e40c5e2c9307">96786ec9</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2021-04-07T09:44:25-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Move DBSubsystem.hasRangeConflict() to Repository
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/f5849ec1b3cf55990c7afa188aebc8d72c13e79c">f5849ec1</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2021-04-07T09:44:25-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Move DBSubsystem.getNextMin/MaxSerialConfig() to Repository
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/c3ca09591facd4d2511dfe3adf941e2b8f72eb0d">c3ca0959</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2021-04-07T10:36:42-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Remove redundant DBSubsystem.NAME
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/961ffdd34e44e584ae49e6efa005aa5ad47f2bc4">961ffdd3</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2021-04-07T15:20:58-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Replace DBSubsystem.PROP_BASEDN with Repository.mBaseDN
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/cf5e092fc13fd338fa21ecd26ee22095797e667d">cf5e092f</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2021-04-07T15:21:20-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Replace DBSubsystem.PROP_RANGE_DN with Repository.rangeDN
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/8a9bb61d60e66470ebe58590c47a355903465282">8a9bb61d</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2021-04-07T15:22:00-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Replace DBSubsystem.PROP_MIN with Repository.mMinSerialNo
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/3146efa5673f0b0acc984294ffe2b58aeca2722c">3146efa5</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2021-04-07T15:29:07-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Replace DBSubsystem.PROP_MAX with Repository.mMaxSerialNo
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/f1edf67c5f3cb796f1a6b7c9761e3092af7f2f93">f1edf67c</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2021-04-07T15:29:07-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Replace DBSubsystem.PROP_NEXT_MIN with Repository.mNextMinSerialNo
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/1be8e849a55d7ffb21a4d835cb9cc81ad1405246">1be8e849</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2021-04-07T15:31:14-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Replace DBSubsystem.PROP_NEXT_MAX with Repository.mNextMaxSerialNo
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/8c27fa497f80c62f64f48ad443abc129da8a446a">8c27fa49</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2021-04-07T15:31:14-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Replace DBSubsystem.PROP_LOW_WATER_MARK with Repository.mLowWaterMarkNo
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/734c06c7c214d8b63704097a91861d590ac2a529">734c06c7</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2021-04-07T15:31:14-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Replace DBSubsystem.PROP_INCREMENT with Repository.mIncrementNo
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/144234eaa1470aa8cf80fc51ab86309fa9eb679f">144234ea</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2021-04-07T15:31:14-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Clean up OCSP test artifacts
The OCSP tests have been modified to store PKI and DS config
files and log files into a single file.
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/2824c7e540c76bcee585d94ee4c51621530ac706">2824c7e5</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2021-04-07T19:10:32-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Update log messages in PublisherProcessor.getRules()
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/a1eeb629e73110c9c2bb4049caabe9b216be51af">a1eeb629</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2021-04-07T19:10:32-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Update log messages in LdapSimpleMap
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/f5a02cd203e3f312863d751a0fecb565af78125d">f5a02cd2</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2021-04-07T19:17:41-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Update log messages in LdapCaSimpleMap
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/4361304682d37666ab6058170bc75595225f79e3">43613046</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2021-04-07T19:21:59-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Update log messages in LdapCrlPublisher
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/7c25ef3806512b7b781f1075672a6feb6ecb6207">7c25ef38</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2021-04-07T19:21:59-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Update log messages in LdapUserCertPublisher
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/ec110e58758564e954ba429d26ce8467d8c9c313">ec110e58</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2021-04-07T19:21:59-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Update log messages in LdapRule
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/8e719766d4a0b7f9aca9ac90c57653b21a928d1b">8e719766</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2021-04-07T19:25:36-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Update log messages in LdapSimpleExpression
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/7306e97e4a93cf04dbf6221abd113d7e5ad69ae2">7306e97e</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2021-04-08T09:30:22-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Update docs for deploying ACME with DS on OpenShift
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/988939d0a0e0951e93212666026448c585ff8bd6">988939d0</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2021-04-08T11:32:05-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Remove redundant Repository.setSerialNumber()
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/b4114079ef350b2e4ea4505b90278eb492fa467c">b4114079</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2021-04-08T11:32:08-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Remove unused Repository.mNext
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/b3ff1117c4aa82ae25b98b4a77cee6df4426b90a">b3ff1117</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2021-04-08T11:32:10-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Remove unused Repository.BI_INCREMENT
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/f0d33a2f953b9fb86b3103e29120a7ae095fb2c2">f0d33a2f</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2021-04-08T11:32:13-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Remove unused IRepository.resetSerialNumber()
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/4b56cbdd7fa52fd9c3b075db4dc363cba2482954">4b56cbdd</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2021-04-08T11:32:16-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Remove unused ARequestQueue.getPagedRequests()
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/081eb1e90dcabe919a196dfc4a7ae1b8e48be10a">081eb1e9</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2021-04-08T11:32:17-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Move ListEnumeration into separate file
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/8b58bf792a676491700c733a5df608d0689462d2">8b58bf79</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2021-04-08T11:32:21-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Move SearchEnumeration into separate file
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/97f3daf9f79f1f84319dcb4f0fe59f0d84d367c6">97f3daf9</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2021-04-08T13:07:22-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Add test for PKI NSS CLI with ECC
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/ea9ddaf59750dc17ae86b15f2c0d22e61e3cdddc">ea9ddaf5</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2021-04-08T13:32:51-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Move KRA's request repository and queue into CMSEngine
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/e6d0bd00285fe1caf2c706c8e5913bfa7d664280">e6d0bd00</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2021-04-08T13:32:51-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Remove redundant ARequestNotifier.getRequestQueue()
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/b7606ee82db8271d2ca86d6c31b6ebe3f18e6805">b7606ee8</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2021-04-08T13:32:51-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Remove redundant Profile.getRequestQueue()
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/288c4927aa18ec0657f3c490ae2f0b742a5e412d">288c4927</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2021-04-08T13:32:51-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Remove redundant IAuthority.getRequestQueue()
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/dcb87d4cd4d46076fd7a5980285ebd2b636b64d2">dcb87d4c</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2021-04-08T13:32:51-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Remove redundant ICertificateAuthority.getRequestQueue()
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/05929a1486bb1cbf043713e9547226343b006c95">05929a14</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2021-04-08T13:32:51-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Remove redundant IKeyRecoveryAuthority.getRequestQueue()
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/d2560cf123fc8692dc3085e4a4c5af89ebf617a1">d2560cf1</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2021-04-08T13:32:51-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Remove redundant IRegistrationAuthority.getRequestQueue()
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/393766d163ccd16e40883f63786861a930b205a7">393766d1</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2021-04-08T13:32:51-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Remove redundant ITKSAuthority.getRequestQueue()
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/4439263dae460014fe4a21d41164002d9a0f5c8e">4439263d</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2021-04-08T13:34:35-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Remove redundant CertificateAuthority.getRequestQueue()
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/ba213056c140bd5bfe8462b9d536cd00e9a9bebe">ba213056</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2021-04-08T13:34:38-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Remove redundant KeyRecoveryAuthority.getRequestQueue()
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/c16db9294a4a15733c580a5a6f9b94353f2c9608">c16db929</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2021-04-08T13:34:41-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Remove redundant OCSPAuthority.getRequestQueue()
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/05f750a776528755b04147477f908bbdec4e8d9b">05f750a7</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2021-04-08T13:35:00-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Remove redundant TKSAuthority.getRequestQueue()
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/49867ef2bc696d54a2a1816b28f31b2d08ce2ce5">49867ef2</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2021-04-08T13:35:06-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Remove redundant TPSSubsystem.getRequestQueue()
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/30aa783a5f0e95be71172a749451da9e9cf61388">30aa783a</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2021-04-08T13:35:12-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Remove redundant ChallengePhraseAuthentication.getReqQueue()
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/ae4a72a9067b644343948f348081b6b91d9fbbd6">ae4a72a9</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2021-04-08T13:35:20-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Remove redundant SSLClientCertAuthentication.getReqQueue()
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/045d59cc2f9d36b970a5d6d553dffe0f3554b5fc">045d59cc</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2021-04-08T13:35:24-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Remove redundant CMSEngine.getReqQueue()
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/02f2da00f5aec14d7cf634c7962296f3c9e0cd4b">02f2da00</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2021-04-08T13:35:27-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Remove redundant KeyRecoveryAuthority.getRequestRepository()
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/40ea7b87e5409362a18a493d359c90126bf2fe29">40ea7b87</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2021-04-08T13:35:32-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Remove redundant RequestNotifier.getRequestRepository()
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/7c044623fdb5ae0c98ad262e29f781c641e8b51b">7c044623</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2021-04-08T15:55:01-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Remove redundant EnrollmentRequest
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/e734153b0289c066100cef54f843b4c10bb4b1c5">e734153b</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2021-04-08T17:53:54-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Remove redundant ARequestQueue.createRequest()
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/185f62f29f740fc1ca71f873496cef9aa55cb742">185f62f2</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2021-04-08T17:53:58-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Merge ARequestRecord into RequestRecord
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/7a8775b15d257e19969e3ff8a5dc63c31f970d99">7a8775b1</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2021-04-08T18:36:23-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Merge IRequestRecord into RequestRecord
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/69e08bec30aa3010e474d437967b0c389ecd1265">69e08bec</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2021-04-08T18:36:26-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Convert anonymous RequestAttr into RequestType
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/31fc25efda13506f9ec1404b9d3d040cc0ae74c3">31fc25ef</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2021-04-08T18:36:26-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Add IRequest.setCreationTime() and setModificationTime()
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/2e38b81ce463a4ce69bfe5da3ddefa201780ebe9">2e38b81c</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2021-04-08T18:36:26-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Remove unused IRequestMod from RequestAttr.read()
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/0eb3f19038b9348e1921e9371facd6ebe60faf10">0eb3f190</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2021-04-08T18:36:26-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Remove unused IRequestMod from RequestRecord.read()
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/b4d4ceeb1d27bbcb6914d68702e8750e8772c13a">b4d4ceeb</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2021-04-08T18:36:26-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Remove unused IRequestMod
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/052754610cd352c59d070acda3ffc881dae62ebb">05275461</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2021-04-08T18:36:26-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Add RequestRecord.toRequest()
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/5b6a6f7bd0d86acb147f4bbab957ac11a112c1d9">5b6a6f7b</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2021-04-08T18:36:26-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Replace RequestQueue.makeRequest() with RequestRecord.toRequest()
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/ed07e270c640ada1c60a47782133d2bd6b62ddc2">ed07e270</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2021-04-09T11:32:10-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Merge RequestQueue.getLastRequestIdInRange() into RequestRepository
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/7f806d0809f5ce65ba4f90cb85e6e6ac9e5f1e89">7f806d08</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2021-04-09T11:32:10-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Merge ARequestQueue.getPagedRequestsByFilter()
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/f68f86e0792bc9250b5881c4f9261c9256f64b3f">f68f86e0</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2021-04-09T12:37:22-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Move RequestQueue.getPagedRequestsByFilter() into RequestRepository
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/2b178ff4aece82171910a6edb8cc68dec61a1ebe">2b178ff4</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2021-04-09T12:37:22-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Remove unused RequestRepository.mRequestQueue
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/49d4716a5258783817ce85d08ff617553ac48dcb">49d4716a</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2021-04-09T13:46:35-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Remove unused Repository.getSerialNumber()
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/88e095e06b1069a37b88ed4f0e290fa8fd8bfa60">88e095e0</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2021-04-09T13:46:36-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Remove unused DBSubsystem.mNextSerialConfig
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/9aaf686831f566386d4df19e8a1009d3e9c74f28">9aaf6868</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2021-04-09T13:46:36-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Move ARequestQueue.newRequestId() into RequestRepository
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/03e2a85548bbc5d8c1c5ad180b42d8a4705f094e">03e2a855</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2021-04-09T13:46:36-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Move ARequestQueue.newEphemeralRequestId() into RequestRepository
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/c8044bbe9cf35fc0d4355098a086f03f8aa52ea2">c8044bbe</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2021-04-09T13:46:36-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Move ARequestQueue.cloneRequest() into RequestQueue
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/204c2dcf5b8697b66666eb6ee9899a6d5c9ac9d6">204c2dcf</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2021-04-09T13:46:36-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Move ARequestQueue.newRequest() into RequestRepository
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/4df39b8caecbd9e52bcb1f51681b14c09da3d4a2">4df39b8c</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2021-04-09T13:54:38-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Move RequestQueue.newRequest() to RequestRepository
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/f2168b8def75c69a88ce133db6625525165f393e">f2168b8d</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2021-04-09T13:54:38-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Move RequestQueue.addRequest() to RequestRepository
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/86497d8f204b45e7f43815186f45142267c34f2b">86497d8f</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2021-04-09T16:31:04-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Remove redundant CertificateRepository.createCertRecord()
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/ba94e2616e46bfa7548241b7e3f7018c840972ba">ba94e261</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2021-04-09T16:52:14-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Move CAConfigurator.createCertRecord() into CertificateRepository
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/0beb04affc1a1bd758a4cc73079b72ceb91592b8">0beb04af</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2021-04-09T16:52:15-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Move ARequestQueue.updateRequest() to RequestQueue
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/9fd8bdc2c6934230609941f636a499202856d810">9fd8bdc2</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2021-04-09T16:52:15-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Move RequestQueue.modifyRequest() to RequestRepository
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/daebec6f08d5492241bafd30ce1bac51b5826614">daebec6f</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2021-04-09T16:52:15-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Remove redundant ARequestQueue.setRequestStatus()
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/f3b674c50788d11920eb547c0ed1e1b16067f4eb">f3b674c5</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2021-04-09T17:01:05-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Rename CertInfoProfile into BootstrapProfile
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/b449cdf299956b024c520dbb485efbc0cc3fb0ba">b449cdf2</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2021-04-09T17:17:19-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Move CAConfigurator.initCertRequest() to CAEngine
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/589b382800abc46c7d7af0d80fb5e0a20bff3934">589b3828</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2021-04-09T17:17:19-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Move CAConfigurator.updateLocalRequest() to CAEngine
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/8099d25c8764e3301b50df0209e985041f9713b5">8099d25c</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2021-04-12T13:24:12-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Add scripts to save test artifacts
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/bffbb0ca880a856d2254c78db6326a6bdabe8bf9">bffbb0ca</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2021-04-12T13:24:12-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Clean up TKS test artifacts
The TKS tests have been modified to store PKI and DS config
and log files into a single tarball.
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/4997c3e8350ab3ebd66cf3b8cd052c1fb680952f">4997c3e8</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2021-04-12T13:24:12-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Clean up TPS test artifacts
The TPS tests have been modified to store PKI and DS config
and log files into a single tarball.
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/2afe6141d62a5ee20ad1fb3e61427b89d9b8f571">2afe6141</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2021-04-12T13:31:36-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Clean up ACME test artifacts
The ACME tests have been modified to store PKI and DS config
and log files into a single tarball.
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/70ca1ab0cc3679595de952c6d4059fab7d274aad">70ca1ab0</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2021-04-12T15:27:53-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Clean up IPA test artifacts
The IPA tests have been modified to store IPA, PKI, and DS
config and log files into a single tarball.
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/27e6e67feac3b3f3f436b8dfe233d9e29298a253">27e6e67f</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2021-04-12T15:27:53-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Clean up QE test artifacts
The QE tests have been modified to store PKI and DS config
and log files into a single tarball.
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/6fc465f80bfe00a89d178bd1f4b6f13375a659e3">6fc465f8</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2021-04-12T18:24:37-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Fix UpdateAllowLinking.update_context_xml()
The UpdateAllowLinking.update_context_xml() has been modified
to check whether the context.xml exists before upgrading it.
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/6cb4fd96c7f6a33efd5c388c39cc36705c6c2026">6cb4fd96</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2021-04-12T18:24:40-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Split RequestRepository for certs and keys
The RequestRepository has been split into CertRequestRepository
and KeyRequestRepository which use different filters.
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/64d2205051ea3f1a3f9091e54ab33ad91cc4cb57">64d22050</a></strong>
<div>
<span>by dpuniaredhat</span>
<i>at 2021-04-13T17:52:36+05:30</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">acme upstream pipeline fixes (#3496)
Fixes the acme openshift database file entry. earlier it was using the default commented postgress entry.
Signed-off-by: Deepak Punia <dpunia@redhat.com></pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/cfbff0cd519275417f71b0b082774c4d75558a75">cfbff0cd</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2021-04-13T18:27:01-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Clean up CryptoUtil.generateECCKeyPair() parameters
The CryptoUtil.generateECCKeyPair() parameters have been
reordered for consistency with generateRSAKeyPair().
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/edb7204ae3850b0c1be3c928139d7ba2679f9587">edb7204a</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2021-04-14T10:45:30-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Move GenerateKeyPairServlet to pki-kra
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/86ca2d4392a32c9ecb8f8edf588ae88a9ea65fc0">86ca2d43</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2021-04-14T13:40:43-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Move RequestQueue.readRequest() to RequestRepository
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/b20fb3f0b47341337fca9016851f06b662a503b1">b20fb3f0</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2021-04-14T13:40:43-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Add CAEngine.getCertRequestRepository()
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/8c6aff1ee266141e3e2f17e7e9815b297d7fecc4">8c6aff1e</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2021-04-14T13:40:43-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Add KRAEngine.getKeyRequestRepository()
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/ed885382a866bdb2434a21306f6d8e2d2bb36603">ed885382</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2021-04-14T20:49:00-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Merge CertificateAuthority.createCertInfo() into CAConfigurator
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/1acf07a5aa430e2eedc794ca8b4fedfe134f914f">1acf07a5</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2021-04-14T20:49:03-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Refactor CAEngine.updateCertRequest()
The CAEngine.updateCertRequest() has been modified to take
an X500Name subjectName instead of String.
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/ce4d755156fbaead1f420ce8d354072d2418316a">ce4d7551</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2021-04-15T15:12:50-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Refactor Configurator.createLocalCert()
The Configurator.createLocalCert() has been modified to take
issuer DN and signing private key parameters.
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/899f5ed53ff2612b2290c1fa03552c8553542090">899f5ed5</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2021-04-15T15:12:50-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Remove unused fields reported by Eclipse
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/93251e3748667f992417256d121509b3006bad65">93251e37</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2021-04-15T15:12:50-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Replace deprecated Boolean constructor
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/4149088e9d45e8b37a9dea251ddbf20d942d92ac">4149088e</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2021-04-15T15:12:50-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Replace deprecated Integer constructor
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/78998acc00a9c3edc1e77c6a90160bac24fe51c1">78998acc</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2021-04-15T15:12:50-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Replace deprecated Long constructor
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/567692b42c78dbffeb6769b47f6f7770431ed254">567692b4</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2021-04-15T15:12:50-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Replace deprecated Class.newInstance()
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/af8664e76618a4d4e30c700d53890399010bb916">af8664e7</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2021-04-15T15:12:50-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Replace deprecated IOUtils.toString()
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/47597173cc67403f9935ce926e8c93abf35d9ea3">47597173</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2021-04-15T16:01:47-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Move RequestQueue.listRequestsByFilter() to RequestRepository (part 1)
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/064f7e16f3057bd2494d40146e7197bb3b6ff3ff">064f7e16</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2021-04-15T16:01:47-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Move RequestQueue.listRequestsByFilter() to RequestRepository (part 2)
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/01fbbafba66413e82599dc7e391c239419b43c47">01fbbafb</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2021-04-15T16:05:59-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Move RequestQueue.listRequestsByFilter() to RequestRepository (part 3)
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/b190a9ede002487cd80a7cbd5f404f8669534988">b190a9ed</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2021-04-15T17:48:13-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Move ARequestQueue.recoverWillBlock() to RequestQueue
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/25a0911b7abb45d1a6491b001af70f9fdc3f9d16">25a0911b</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2021-04-15T17:48:13-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Replace RequestQueue.findRequest() in CMSRequestDAO
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/921a0717c7cb1ed3e6852ded4f8c3e97dad5c592">921a0717</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2021-04-15T17:48:13-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Replace RequestQueue.findRequest() in CMSServlet
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/a170d8a976b11ea9c56ace00d5c433fd775b259a">a170d8a9</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2021-04-15T17:48:13-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Replace RequestQueue.findRequest() with RequestRepository.readRequest()
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/00c0c4192c1374328a6a059c4a181a0c0f7a35da">00c0c419</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2021-04-15T20:17:12-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Split ProcessReq for certs and keys
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/bd42387711d1dfd4f7f748aa05776fe3a132ac1f">bd423877</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2021-04-15T20:17:12-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Split SearchReqs for certs and keys
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/35f3a973bed5f131d5ad2ebf4582124b5195ca3d">35f3a973</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2021-04-15T20:23:59-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Split QueryReq for certs and keys
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/38ddfb5004e04b14aad437feb5b46ebf47c4a895">38ddfb50</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2021-04-15T20:23:59-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Move GetCertFromRequest to pki-ca
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/84cbbe9f247f1c6f6c4314d643a6de9d09464ccb">84cbbe9f</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2021-04-15T20:23:59-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Move ImportCertsTemplateFiller to pki-ca
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/a6efac6244a3939f788b173b24a9b0de72404f68">a6efac62</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2021-04-15T20:23:59-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Move GetEnableStatus to pki-ca
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/96dac5fa4a4beb5e1be1d4af7f76479abca4c102">96dac5fa</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2021-04-15T20:23:59-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Move CertReqParser to pki-ca
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/c90ae080739fb6b22dfb0cae0e86cfbb17dd0331">c90ae080</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2021-04-15T20:23:59-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Move KeyReqParser to pki-kra
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/f7d15bed2e70d8a48fe7748bd66c13ca18636552">f7d15bed</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2021-04-19T10:02:59-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Replace RequestStatus.fromString() with valueOf()
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/c86aca59ddc593cb0b894f488ec4e490b1a6b8eb">c86aca59</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2021-04-19T13:28:55-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Add JSON converter for CertRequestInfos
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/b4ccf4b85962148da6fc969df11a0e91ef26f9b9">b4ccf4b8</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2021-04-19T14:37:48-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Move CMSEngine.initCertRequest() to CertRequestRepository
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/85810814c2ea255b98917a1368126dc607de64e7">85810814</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2021-04-19T14:53:47-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Move CAEngine.updateCertRequest() to CertRequestRepository
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/0835ad754136776a709d453c79259306a4f5f40b">0835ad75</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2021-04-19T15:29:22-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Swap params in CertRequestRepository.initRequest() and updateRequest()
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/76fff8d7171e487c1a5d325731b8ced51809f67d">76fff8d7</a></strong>
<div>
<span>by Christina Fu</span>
<i>at 2021-04-20T17:13:50-07:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Update ServerSideKeygen.adoc</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/287bfdac344f877bc14ff9182b345e7684c5fa98">287bfdac</a></strong>
<div>
<span>by Christina Fu</span>
<i>at 2021-04-22T16:14:11-07:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Bug1952628 CRMF requests with non-SKID extensions
This patch address the issue where if a CRMF request bears any extension
other than SKID then it fails to process.
fixes https://bugzilla.redhat.com/show_bug.cgi?id=1952628
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/642e25a3c396eaefd2edbda6ec6c16a594557124">642e25a3</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2021-04-23T07:02:46-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Fix cert file loading in CryptographyCryptoProvider
As suggested by cheimes, the CryptographyCryptoProvider
has been modified to load the cert file as binary.
Resolves: https://github.com/dogtagpki/pki/issues/3499
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/396241d1979145c5633239b3b385f12679f7a532">396241d1</a></strong>
<div>
<span>by Christian Heimes</span>
<i>at 2021-04-23T10:12:05-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Make python-nss optional
Signed-off-by: Christian Heimes <cheimes@redhat.com>
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/e02f3934147d934c4efdf3e0b427002ae082eb93">e02f3934</a></strong>
<div>
<span>by Christian Heimes</span>
<i>at 2021-04-23T10:12:05-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Remove deprecated DRM client
The code was marked as deprecated in commit f4aafb999e from 2014.
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/e005cb74f5b112c5e31cb97c49ff03d47e72d1e3">e005cb74</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2021-04-23T10:30:56-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Move ARequestQueue.markRequestPending() to RequestQueue
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/ea613d162230296b9759d1d61425650ffbb6a9fc">ea613d16</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2021-04-23T10:30:59-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Move ARequestQueue.cancelRequest() to RequestQueue
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/8387361136afb0d692573bb0c3d9cd734b8364ec">83873611</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2021-04-23T10:31:02-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Move ARequestQueue.rejectRequest() to RequestQueue
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/48dc1ba4d21c77ef4e61be6d4ee0a6bac9e1c6bb">48dc1ba4</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2021-04-23T10:31:06-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Move ARequestQueue.approveRequest() to RequestQueue
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/5203e26eb64e23df2815b86df557fff54f1430ca">5203e26e</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2021-04-23T10:31:08-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Move ARequestQueue.markAsServiced() to RequestQueue
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/c03c8c878c58981a042ce15984b7f09276f7b99d">c03c8c87</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2021-04-26T13:05:55-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Remove unused SecurityDomainLogin servlet
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/30274623d7474fdde28c2575c1b3da386986401b">30274623</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2021-04-26T13:05:55-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Remove unused LoginServlet
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/cdf7fe1063b2f8bf87888ba52fa57bb785f057a6">cdf7fe10</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2021-04-26T13:05:55-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Remove unused BaseServlet
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/87ec464c52614a6796f0bf60f2fb42049dbf7e79">87ec464c</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2021-04-26T13:05:55-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Remove velocity dependency
The remaining servlets that use velocity have been removed
since they are no longer used so the velocity dependency
can be removed as well.
Resolves: #1952969
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/fd06a6d6b15a413776040a96a5b3a3314620482b">fd06a6d6</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2021-04-27T07:58:56-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Reorganized ACME database configuration docs
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/41d0ddabd7ca5bd3f945208b90472c855300efa2">41d0ddab</a></strong>
<div>
<span>by Chris Kelley</span>
<i>at 2021-04-30T17:54:29+01:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Remove unused istack-commons-runtime.jar from classpath
Resolves build issue in f33+</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/994650a9dda9d565e33e4fb8ac497ec25179cc08">994650a9</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2021-05-03T21:53:57-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Fix missing pip3 in QE test
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/93eed0cec07a320d94b3d8525e11b0317599ce52">93eed0ce</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2021-05-03T23:25:14-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Reorganize CA sources
The CA main and test code has been moved into base/ca/src/main
and base/ca/src/test. All references have been updated.
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/6928ce6054868f26a395d8ab11bad17d58281c20">6928ce60</a></strong>
<div>
<span>by dependabot[bot]</span>
<i>at 2021-05-04T14:21:00-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Bump commons-io from 2.6 to 2.7
Bumps commons-io from 2.6 to 2.7.
Signed-off-by: dependabot[bot] <support@github.com></pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/c78b43c2d7097c7f71b78a3ac4a8e9b7f7edcc55">c78b43c2</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2021-05-04T14:44:19-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Reorganize KRA sources
The KRA main and test code has been moved into base/kra/src/main
and base/kra/src/test. All references have been updated.
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/7fd5cb493a6aca06f8f6f6fbcea672d99f26f485">7fd5cb49</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2021-05-04T15:45:05-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Reorganize OCSP sources
The OCSP sources have been moved into base/ocsp/src/main.
All references have been updated.
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/9f8abf632903bd7dc6266a625b22a23f7ea4d063">9f8abf63</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2021-05-04T17:04:41-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Reorganize TKS sources
The TKS sources have been moved into base/tks/src/main.
All references have been updated.
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/0f95c7780e0c154bf3ea1ce03d99ae1f251c1199">0f95c778</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2021-05-04T17:48:15-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Reorganize TPS sources
The TPS sources have been moved into base/tps/src/main.
All references have been updated.
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/5b1578e4d427c7275239c2006b5c11d98a7afa8c">5b1578e4</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2021-05-04T17:50:35-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Reorganize Console sources
The Console sources have been moved into base/console/src/main.
All references have been updated.
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/189d16faa169842903cf4acac3797afb3eceb262">189d16fa</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2021-05-04T18:31:05-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Reorganize Server sources
The Server main and test sources have been moved into
base/server/src/main and base/server/src/test. All references
have been updated.
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/5271e8afc049e44b0f8a37997be77141d83b17eb">5271e8af</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2021-05-04T19:05:25-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Remove unused CMake variables
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/1e947dc5531e03492655d4639ddb9a64dadb9837">1e947dc5</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2021-05-04T19:54:37-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Reorganize Tomcat sources
The Tomcat sources have been moved into base/tomcat/src/main
and base/tomcat-9.0/src/main. All references have been updated.
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/6b610b53e9fcc9e093c44c9060919d6a5ee27c27">6b610b53</a></strong>
<div>
<span>by Pritam Singh</span>
<i>at 2021-05-05T15:05:53+05:30</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Added_fix_for_upstream_topo_00_master (#3507)
[SKIP CI]
Added_fix_for_upstream_topo_00_master
Signed-off-by: Pritam Singh <prisingh@redhat.com></pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/1599f78abb845de7bc64174437ae6b58ccc1ff34">1599f78a</a></strong>
<div>
<span>by Chris Kelley</span>
<i>at 2021-05-06T14:49:37+01:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Replace deprecated java.awt.Dialog::{hide,show} with setVisible(boolean)
These methods were deprecated in Java 1.5. They are overrides of methods
defined in java.awt.Component, which were themselves deprecated back in
Java 1.1! Some care required was required as we could change behaviour
if we defined a subclass of Dialog and override show() or hide(), but I
couldn't find any examples of this in the codebase so I think we're
fine.</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/a1afd9548bd241520d0ef3924fa57ef9569056be">a1afd954</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2021-05-06T18:16:12-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Update QE tests
The QE tests have been modified to run on the latest
Ubuntu container and use the latest python-ansible.
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/b36fe2ee1cb01f91e2cff5b3f1639d66b5ccf076">b36fe2ee</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2021-05-06T18:16:20-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Remove unused commons-httpclient.jar from .classpath
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/4cdf952af86abda542867eade6fde9370537f265">4cdf952a</a></strong>
<div>
<span>by Chris Kelley</span>
<i>at 2021-05-07T10:37:28+01:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Replace JTable.createScrollPaneForTable with JScrollPane constructor
The JTable method is deprecated.
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/5528d202723ee981a9a2b23490759e467c78901b">5528d202</a></strong>
<div>
<span>by Chris Kelley</span>
<i>at 2021-05-07T10:37:28+01:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Replace deprecated JTable::sizeColumnsToFit(true) with JTable.doLayout()</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/193ce9d6e7c01fba7290ce5a33b3701d5862e7ef">193ce9d6</a></strong>
<div>
<span>by Chris Kelley</span>
<i>at 2021-05-07T10:37:28+01:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Replace deprecated Sui{OptionPane,Table} with J{OptionPane,Table}
I couldn't find any source for
com.netscape.management.nmclf.SuiOptionPane, but the bytecode says it
extends JOptionPane. Replacing references with the superclass compiles
but my bytecode reading isn't strong enough to see if the Sui version,
whatever it is, overloaded either of these methods.</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/6d318e749ee7487477cf882a692ff90690e19d22">6d318e74</a></strong>
<div>
<span>by Chris Kelley</span>
<i>at 2021-05-07T15:57:42+01:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Remove unnecessary @SuppressWarnings annotations
No functional change, just unnecessary instructions for the compiler.</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/f8c62034645f37a6a1a8cc862b9e6a57bf3b7af5">f8c62034</a></strong>
<div>
<span>by Chris Kelley</span>
<i>at 2021-05-07T15:57:42+01:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Remove unused private methods
Not called within their classes so just clutter.
ConfigurationTest.generateCRMFRequest has been made public, we want to
keep this method and make it accessible via CLI
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/932e4dad897936d1b0370654b76c4a27272825ce">932e4dad</a></strong>
<div>
<span>by Chris Kelley</span>
<i>at 2021-05-07T15:57:42+01:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Remove unused field mQueue from CheckRequest
Removing this field makes the local variable engine redundant, so this
too is removed.</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/6dc331a41f31a77b5bf6923148102599785ae311">6dc331a4</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2021-05-07T09:58:13-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Remove JNA dependency
The SystemdStartupNotifier has been renamed to SystemdNotifier
and modified to use systemd-notify instead of JNA to notify
other systems when the subsystem is ready.
Since the SystemdNotifier is no longer dependent on JNA, it
has been moved into pki-server.jar and the JNA dependency has
been dropped.
The StartupNotifier has been renamed into SubsystemListener
such that it can be expanded to listen to other subsystem
events (e.g. shutdown).
Resolves: #1953671
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/ef9b9bdf677186285c00eec3460c5ac073cb7cde">ef9b9bdf</a></strong>
<div>
<span>by Fraser Tweedale</span>
<i>at 2021-05-07T09:58:13-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">SystemdNotifier: document how to configure systemd unit
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/e202ef696aaad6853bf3ce1640560eb9f387b4d6">e202ef69</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2021-05-07T11:04:22-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Reorganize ACME issuer doc
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/6d706a47980de703b8b42d69ee5d5dbb7b4d7ce6">6d706a47</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2021-05-07T13:07:14-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Reorganize ACME realm doc
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/b79c8e870713f77b9911bccb2d3ff23fe56df49d">b79c8e87</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2021-05-07T14:27:00-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Add ACME metadata doc
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/a497903c10fcc07c9f9c9bd43c722eeaf67591c0">a497903c</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2021-05-07T17:18:40-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Update ACME install doc
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/0a8a108324ac191abc4842f27c48b98ddda65d41">0a8a1083</a></strong>
<div>
<span>by fdelehay</span>
<i>at 2021-05-10T17:51:12+02:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Update Nuxwdog.md
typo in command</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/400fbaec79150d65c573d82e5bea4ed18886f518">400fbaec</a></strong>
<div>
<span>by Tomasz Torcz</span>
<i>at 2021-05-10T12:59:55-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">acme: don't fail on resubmitted valid challenges
Some acme clients, like cert-manager, happen to resubmit already
valid challenges. This is not 100% in line with RFC8555, but it is
not a reason to throw Exception.
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/82ab12ac1ed2c258e291c4f0e761399d0f80b64f">82ab12ac</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2021-05-11T11:30:20-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Restore pytest-ansible 2.2.3
Previously the requirements.txt was changed in commit
a1afd9548bd241520d0ef3924fa57ef9569056be to remove
the explicit version number for pytest-ansible. Since
it's causing some problems the change is reverted.
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/c92a0bb9a32ef2b02badbbd54facec47c08f86f1">c92a0bb9</a></strong>
<div>
<span>by Chris Kelley</span>
<i>at 2021-05-13T16:27:03+01:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Update GitHub workflows to run against F34 and not EOL F32</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/7bc7d443f40ba9912bef75ab6007de38b6b223c4">7bc7d443</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2021-06-14T16:59:52-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Fix installation with HSM
During installation with HSM the server is
stopped to import the permanent SSL server cert
into the NSS database. This operation creates
new files in the NSS database directory with a
wrong ownership and permissions, so the server
fails to start again.
To fix the problem the NSS database ownership
and permissions need to be reset after importing
the permanent SSL server cert.
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/da72a3cf9e47c995b37c512f51de7e6ceec95538">da72a3cf</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2021-06-14T16:59:52-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Clean up deployment loggers
All loggers used for deployment have been changed to
use the module name such that they can be referred to
collectively as 'pki'.
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/6e62953db9a29bff5e734ab5f5094896d29c7f61">6e62953d</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2021-06-14T16:59:53-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Merge base/test into base/util/src/test
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/1f01f0fb958e14561672eab4acef5337c87d335b">1f01f0fb</a></strong>
<div>
<span>by Chris Kelley</span>
<i>at 2021-06-14T16:59:53-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Add new constructor to com.netscape.certsrv.base.Link class
The deprecated org.jboss.resteasy.plugins.providers.atom.Link has a
constructor with signature Link(String, URI), but our chosen temporary
replacement does not. As we are attempting to preserve the API by making
this temporary switch, I create a new constructor with the current
signature instead of modifying the calling code.
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/d1b7869a4ebe0a1e33cda74d369c3532f87d71a3">d1b7869a</a></strong>
<div>
<span>by Chris Kelley</span>
<i>at 2021-06-14T16:59:53-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Fix createCreatedResponse methods that now expect URI, but take String</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/39180502b84cac2d9bc1b0dc6481ad915764de96">39180502</a></strong>
<div>
<span>by Chris Kelley</span>
<i>at 2021-06-14T16:59:53-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Switch org.jboss.resteasy.plugins.providers.atom.Link for
com.netscape.certsrv.base.Link.Link
Converts old Link.getRel() -> new Link.getRelationship()</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/61008e971f72e69e21d8ed1a0cf64f3b0faebbe8">61008e97</a></strong>
<div>
<span>by Chris Kelley</span>
<i>at 2021-06-14T16:59:53-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Remove dependency on resteasy-atom-provider</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/8a6e21e2434c0b2135f20545022b30f59a5a4ff1">8a6e21e2</a></strong>
<div>
<span>by dpuniaredhat</span>
<i>at 2021-06-14T16:59:53-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Updating the IMG_NAME to execute QE test on Fedora 33 (#3531)
Currently QE test are getting executed on Fedora 32 and updating that to execute test cases on Fedora 33
Signed-off-by: Deepak Punia <dpunia@redhat.com></pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/4d10b4a5cefba725b9af2f83f8e10f0e480cadcf">4d10b4a5</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2021-06-14T16:59:53-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Drop pytest-runner dependency
The dependency on pytest-runner has been dropped since
it has been deprecated.
Resolves: #1961613
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/1e859ed9c8a06b9d614a9956dfcd089dc232eede">1e859ed9</a></strong>
<div>
<span>by Christina Fu</span>
<i>at 2021-06-14T16:59:53-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Bug 1925311 RFE Add a Boolean to Not Allow a CA Certificate Issued Past Issuing CA's Validity
This RFE was to request for a boolean to disallow ca certs being issued past
the CA's own validity. As it turns out, such a boolean does exist in
CAValidityDefault.java which is a profile default plugin that's used
by the profile caCACert.cfg. The variable is called bypassCAnotafter.
When it's true, the requested ca signing cert is allowed to past the
signing CA's notAfter, while if false (which is the default), the natAfter time
would be reset to match that of the signing CA's.
The problem is, as I found out during my investigation, there is a bug in
the plugin so it is always treated as false. I have it fixed in this patch.
However, I think the reporter didn't use this profile default plugin, as
if so they would not have reported the issue; I think the proper solution
should be a system-wide boolean in CS.cfg, although the additional one in
the plugin to allows for finer control.
I'm leaving the fix in CAValidityDefault.java to get some feedback from
the reviewer.
The new bolean in CS.cfg is called ca.enablePastCATime
fixes https://bugzilla.redhat.com/show_bug.cgi?id=1925311
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/9c759ce42d7d098824807d8b52e636e5d15ea7f0">9c759ce4</a></strong>
<div>
<span>by Chris Kelley</span>
<i>at 2021-06-14T16:59:53-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Replace deprecated PosixParser with DefaultParser</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/d6b99d08814dd96732d4efd6da30a8754ecdb35d">d6b99d08</a></strong>
<div>
<span>by Chris Kelley</span>
<i>at 2021-06-14T16:59:53-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Remove redundant superinterface implementations</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/3e4f14de205146509bdf7b11308a869ed66c42e8">3e4f14de</a></strong>
<div>
<span>by Chris Kelley</span>
<i>at 2021-06-14T16:59:53-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Add missing @Deprecated annotations</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/c8efa0ac2c9331bd9c61d68a3cccbf2e7b31054e">c8efa0ac</a></strong>
<div>
<span>by Chris Kelley</span>
<i>at 2021-06-14T16:59:53-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Add missing @Override annotations</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/1dd53e02d57839e4730f46fcd3ab943a77551021">1dd53e02</a></strong>
<div>
<span>by Chris Kelley</span>
<i>at 2021-06-14T16:59:53-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Remove unnecessary type specification and replace with diamond operator
Automatically generated by Eclipse</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/d34f793bdb78c6f30557f4816498b34903d8445d">d34f793b</a></strong>
<div>
<span>by Chris Kelley</span>
<i>at 2021-06-14T16:59:53-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Replace deprecated Double constructor</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/521b57bd345c68c243a683ba950677ed2a321198">521b57bd</a></strong>
<div>
<span>by Chris Kelley</span>
<i>at 2021-06-14T16:59:53-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Convert CertificateRepository to use try-with-resources</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/7bc0f33df468543e08f55d5a18767ddd20482a48">7bc0f33d</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2021-06-14T16:59:53-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Drop git dependency
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/e457337780ae7c393256be566016297d46ac1e61">e4573377</a></strong>
<div>
<span>by Chris Kelley</span>
<i>at 2021-06-14T16:59:53-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Simplify AAclAuthz.isTypeUnique() method</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/7f919e405b0b009f4180c643805e801ab55f911c">7f919e40</a></strong>
<div>
<span>by Chris Kelley</span>
<i>at 2021-06-14T16:59:53-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Remove unused log() method from JssSSLSocketFactory
No references to this method in the workspace</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/b4cb7ca06b8f2370f873f0ad5aacac3f094fe18a">b4cb7ca0</a></strong>
<div>
<span>by Chris Kelley</span>
<i>at 2021-06-14T16:59:53-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Autoformat JssSSLSocketFactory</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/32cb06bd8f2a43ec6536ac1d365cea7088eb0c61">32cb06bd</a></strong>
<div>
<span>by Chris Kelley</span>
<i>at 2021-06-14T16:59:54-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Remove getExtensionAt() method
No references in the workspace</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/a147e0b9e64463e39e14355fff5f2889b086c019">a147e0b9</a></strong>
<div>
<span>by Chris Kelley</span>
<i>at 2021-06-14T16:59:54-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Autoformat SingleResponse</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/a8538181e4de52b16bab48dde881c607703176ce">a8538181</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2021-06-14T16:59:54-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Fix build.sh --without-test
The build.sh and pki.spec file have been modified not to
run the test when the --without-test option is specified.
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/c214e43e5de9e1c02d7eb42e57210b81e5e3acbd">c214e43e</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2021-06-14T16:59:54-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Fix CMake files to optionally build without test
The CMake files have been modified not to build the test
classes when the --without-test is specified.
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/4ac3085250678a1a9d7e1b0afa839d08e4cf062a">4ac30852</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2021-06-14T16:59:54-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Remove unused code
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/26c9ff81018d5a874f32da39a54f0c0c141ea223">26c9ff81</a></strong>
<div>
<span>by dpuniaredhat</span>
<i>at 2021-06-14T16:59:54-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Bug Automation 1925311 RFE Add a Boolean to Not Allow a CA Certificate Issued past issuing CA's Validity (#3545)
Signed-off-by: Deepak Punia <dpunia@redhat.com></pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/15eaaaa1b22f8bfc275eea045402a55bb8fea53a">15eaaaa1</a></strong>
<div>
<span>by Chandan Pinjani</span>
<i>at 2021-06-14T16:59:54-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Enabled beaker provisioning for pytest-ansible (#3542)
Signed-off-by: Chandan Pinjani <cpinjani@redhat.com>
Co-authored-by: Chandan Pinjani <cpinjani@redhat.com></pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/22f705c557a4afa7b35cb45e14b185e7eea55404">22f705c5</a></strong>
<div>
<span>by Christina Fu</span>
<i>at 2021-06-14T16:59:54-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Bug1889434 Unable to start HSM configured CA with after enabling Nuxwdog
The bug itself was actually a "not a bug" according to Chandan's latest
finding how it was working again when setup on a different vm.
However, I found a possible issue that could only be seen on the vm
where he initially had issue with. I don't know how to reproduce other
than being able to see the correct message if my debugging was enabled
in this patch.
The nature of the issue that this patch tries to fix is that in case
when pwd is returned with "keyctl_read_alloc:..." regarding password not
found, and it treated the result as thought it was a password to be
saved.
relating to https://bugzilla.redhat.com/show_bug.cgi?id=1889434
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/7fc6c64838918d11c1b21c3ab08e1b7fa30acec2">7fc6c648</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2021-06-14T16:59:54-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Update Java dependency
The spec file has been modified to use Java 1.8.0 on
Fedora 32 and RHEL 8, and Java 11 on other platforms.
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/c3f860e34d9f50630b891b029fff869f0e88c744">c3f860e3</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2021-06-14T16:59:54-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Use password file when creating admin user
The pki-server <subsystem>-user-add has been updated to
provide a --password-file option. The deployment tool
has been modified to use this option when creating the
admin user to avoid the password from getting logged in
the debug mode.
Resolves: CVE-2021-3551
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/b022fafad8effb940db8a18e109525c29b909784">b022fafa</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2021-06-14T16:59:54-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Fix permission for new installation logs
The enable_pki_logger() has been updated to disable
world access for new installation logs to be created
in /var/log/pki.
Resolves: CVE-2021-3551
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/9e213c22b2647cfdff74e94e3d03f2247cdce789">9e213c22</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2021-06-14T16:59:54-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Fix permission for existing installation logs
The spec file has been updated to remove world access
from existing installation logs in /var/log/pki.
Resolves: CVE-2021-3551
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/dd5bb9cd80912758548d50a5b7a819d04aa2c059">dd5bb9cd</a></strong>
<div>
<span>by Chris Kelley</span>
<i>at 2021-06-14T16:59:54-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Remove IConfigPasswordCheck interface
There is only one implementation in PasswordChecker, and it 1)
duplicates the functionality of the IPasswordCheck interface/impl and 2)
is not referenced anywhere in the workspace.
Also, we don't care about the distinction between an empty password and
a password that is too short when we are deciding if the password is
good, which greatly simplifies isGoodPassword().</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/7f0e089cd21c7196d3b4f528d30150816c8287d2">7f0e089c</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2021-06-14T16:59:54-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Add missing apache-commons-logging dependency
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/c6158ec3326bbffb458263389210910e308b8be6">c6158ec3</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2021-06-14T16:59:54-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Remove unused references to commons-httpclient.jar
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/12a38611a13d87e41b3bd52348b9610ffe478dab">12a38611</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2021-06-14T16:59:54-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Update contact information
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/e145440979dfe8bd08df2e954686ff0ac8a6d235">e1454409</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2021-06-14T16:59:54-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Move CI files into tests folder
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/5fde498d999e08e80029c0ce86caba4517c6948c">5fde498d</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2021-06-14T16:59:54-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Move pki-lint files into tests folder
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/7395f164dd6b1b4e5679e285603c41cab80ad528">7395f164</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2021-06-14T16:59:54-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Update JSS references
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/3194dddf7f5165bc7c1cae1893d4a8ff62200186">3194dddf</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2021-06-14T16:59:54-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Update version number to 10.11.0-alpha3
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/2c3d5a3a9bf9a21b42be3362b65f7577192ba564">2c3d5a3a</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2021-06-16T16:20:45-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Clean up IPA test
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/adbacb5b2392ff0df262ce9964dd6638222863f5">adbacb5b</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2021-06-16T16:21:02-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Add configurable test matrix
The test workflows have been modified to load the
matrix from MATRIX secret variable. If the secret is
undefined it will use Fedora 33 and 34 by default.
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/37fc35911bd0db4b3fcd2be5dc67ad6ca405e8df">37fc3591</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2021-06-28T16:52:49-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Update COPR repo
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/23de8ab19d71f84dd6158d4961c679e5ad9c33c4">23de8ab1</a></strong>
<div>
<span>by Christina Fu</span>
<i>at 2021-06-28T15:29:35-07:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Bug1976010-restrict EE profile list and enrollment submission per LDAP group without immediate issuance
It's always been the case by design that if authentication (auth.instance_id=X) is specified in a profile, then as long as a request passes both authentication and authorization (authz.Y) then the issuance would be granted.
In this patch, an option per profile is added to override such design and would require explicit agent approval even when both auth and authz passed.
This new option is auth.explicitApprovalRequired and the value is true
or false,with false being the default if not set.
An example configuration in a directory-based authentication profile
would have something like the following:
auth.instance_id=UserDirEnrollment
auth.explicitApprovalRequired=true
authz.acl=group=requestors
addressed https://bugzilla.redhat.com/show_bug.cgi?id=1976010
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/741af10ff7d5c01b5b2879ac19304d045ce97105">741af10f</a></strong>
<div>
<span>by Christina Fu</span>
<i>at 2021-06-28T16:32:24-07:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Bug1963220-RevokeViaRestAPIwExtAgent
This patch resolves the issue that when a client cert is issued by an
external CA, the revocation check inside the CA REST service handler
(ca/src/org/dogtagpki/server/ca/rest/CertService.java)
assumes that all client certs are issued by this CA.
The fix is to check the issuer, and add an option, allowExtCASignedAgentCerts
to allow for external CA signed agent certs.
If the issuer is external, and ca.allowExtCASignedAgentCerts is true, then the
internal cert status check is bypassed and to rely on OCSP enablement
(enableOCSP) in server.xml.
The ca.allowExtCASignedAgentCerts config param currently is only used in
the rest revocation case. It is not used anywhere else (not even unrevocation)
fixes https://bugzilla.redhat.com/show_bug.cgi?id=1963220
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/f6eb0c2b30b53364a300ecd86b502e8a68f1eae3">f6eb0c2b</a></strong>
<div>
<span>by Chris Kelley</span>
<i>at 2021-06-28T20:34:36-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Allow automatic determination of Fedora versions to test against
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/4e08fff075d17ec7041d82585ba69a0cbf8b4c26">4e08fff0</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2021-06-28T20:37:29-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Fix Javadoc warnings
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/8aa0e81b925760ee469ef4b3cfda271970f4d804">8aa0e81b</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2021-06-28T20:37:43-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Add test script for creating CA agent
The test code that creates a CA agent has been moved
into a shell script.
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/e1c15ad15889d2cd8535278c59e21f5119dc36b7">e1c15ad1</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2021-06-28T20:37:52-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Add test scripts for CA agent cert revocation
The test code that creates, revokes, and unrevokes
a CA agent cert has been moved into shell scripts.
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/3ee1d2c210c3f334ee52bcaff54d93b8350ceba5">3ee1d2c2</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2021-06-28T20:39:12-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Fix build classpaths
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/e799395f8a2da783acc206df30b6b7e081fa1e36">e799395f</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2021-06-29T17:53:02-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Add doc for PKI TPS Configuration CLI
[skip ci]
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/4a5f4bb57d442b1bebd8c1e3c480fb293c2f80a7">4a5f4bb5</a></strong>
<div>
<span>by Christina Fu</span>
<i>at 2021-07-01T11:04:40-07:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Bug1978017 PKCS10Client Attribute Encoding
PKCS10Client has an option "-k" which allows for individual DN
attributes to be encoded differently and separately.
For example:
PKCS10Client -p <passwd> -d . -k true -o req.txt -n 'cn=UTF8String:aa,ou=BMPString:bb,o=cc'
This option might have been accidentally disabled. In this patch, the
attribute encoding code is moved to CryptoUtil.java with some
refactoring, and calls to getJssName() is re-enabled for subjectName
in PKCS10Client;
fixes https://bugzilla.redhat.com/show_bug.cgi?id=1978017
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/75e4599d155ae85ff16c66c3f60de69fa6802a6c">75e4599d</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2021-07-02T17:10:14-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Remove unused references to commons-collections.jar
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/d21ab44fb68c6b0929ea898a4e32629ff142c48d">d21ab44f</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2021-07-02T17:41:40-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Fix HAMCREST_JAR for Rawhide
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/3b53145b4940152d5c1b5d8de83b6af912493a66">3b53145b</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2021-07-08T14:19:17-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Add doc for pki <subsystem>-audit
[skip ci]
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/dcd122990443014c98890edc5a0adc8f865f0d23">dcd12299</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2021-07-08T14:19:31-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Add doc for pki ca-cert
[skip ci]
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/77814174820638c4fd18889ec68093aa0ef20bbf">77814174</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2021-07-13T14:55:40-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Update dependencies
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/45ba4b035babcb00a557db1e6038e6a49e0acd98">45ba4b03</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2021-07-16T19:11:59-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Add GitLab synchronization job
The .gitlab-ci.yml has been added to define a job to
synchronize a branch from an upstream repository to a
GitLab repository.
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/2c9d5afc3659330335f4dde83e0bb7fd1722aae9">2c9d5afc</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2021-07-20T12:11:38-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Update version number to 10.11.0
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/1b18560bf05bfa54caea8d6e00fe285bf7d258e5">1b18560b</a></strong>
<div>
<span>by c-dorney</span>
<i>at 2021-07-23T11:41:48+01:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">BZ-1981850 Check directory for files on load subsystems (#3666)
* BZ-1981850 Check directory for files on load subsystems</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/8119bf505910ca2fbd04a4ba020d828ef67ee1f0">8119bf50</a></strong>
<div>
<span>by Chris Kelley</span>
<i>at 2021-07-23T15:16:04-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Remove jboss-annotations-1.2-api from .classpath
This dependency is satisfied through resteasy-client -> resteasy-core,
so no need to explicitly depend on it like this.
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/88a486de7b7e7252df8027e5fc9a1d9b7bc455f5">88a486de</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2021-07-23T15:20:29-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Fix javax.annotation path for RHEL 8
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/6be3018aa3830fa72c7c40ca59d5df1a2661d29f">6be3018a</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2021-07-26T20:30:36-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Update pki.spec
The pki.spec has been updated to require PKI packages
with the same version and release numbers to ensure
that the packages installed are from the same build.
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/60be0d256c356314cf708e1368f2533a9466340f">60be0d25</a></strong>
<div>
<span>by Christina Fu</span>
<i>at 2021-08-04T17:08:26-07:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Bug1973870 SubCA two-step installation fails with error while validating SubCA ca signing certificate
This patch fixes the issue where the CA signing cert is not imported
properly into the nssdb with trust.
The pki cli command is changed from 'nss-import-cert' to 'client-import-cert'
and '--cert' changed to '--ca-cert'.
See https://github.com/dogtagpki/pki/wiki/PKI-Client-CLI#importing-ca-certificate
In addition, if pkispawn fails the pki-server subsystem-cert-validate call,
it will provide more detail on the failure while allow pkispawn to complete.
This would allow admins to manually add the ca signing cert manually.
(Although with the fix mentioned above, it should not be encountered)
fixes https://bugzilla.redhat.com/show_bug.cgi?id=1973870
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/17eccb47c0328e068a5b8d95994d38c3cdec6e72">17eccb47</a></strong>
<div>
<span>by Christina Fu</span>
<i>at 2021-08-04T17:52:09-07:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">revert accidental check-in of pki.spec
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/a2a93780db87de5eebe68318480fe25ff6fdb9e9">a2a93780</a></strong>
<div>
<span>by Christina Fu</span>
<i>at 2021-08-05T14:42:06-07:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Bug1990608 PS Allowing Token Transactions while the CA is Down
This patch propagates the exception thrown when revocation/unrevocation
fails so that the token record is not updated on TPS; This allows
the TPS token to be consistent with the certs on the CA.
fixes https://bugzilla.redhat.com/show_bug.cgi?id=1990608
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/63cf2895f5d5a37bb09f3e889b8584b0bb0dce06">63cf2895</a></strong>
<div>
<span>by Christina Fu</span>
<i>at 2021-08-11T09:19:59-07:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Bug 1992337 - Double issuance of non-CA subsystem certs at installation
This patch removes an extra profile.submit() call that was accidentally left
off during manual cherry-picking of another bug (1905374):
commit 8e78a2b912e7c3bd015e4da1f1630d0f35145104 (HEAD -> DOGTAG_10_5_BRANCH, origin/DOGTAG_10_5_BRANCH)
fixes https://bugzilla.redhat.com/show_bug.cgi?id=1905374
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/e7ab6a0ee56d0c1e4601ea60768bbc58c3efc0c7">e7ab6a0e</a></strong>
<div>
<span>by Chris Kelley</span>
<i>at 2021-08-11T17:39:31+01:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Cherry-pick fix for BZ 1955633 to v10.11</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/e92aa7c47f88d189baedfd864b5155b0ce81c1d0">e92aa7c4</a></strong>
<div>
<span>by Chris Kelley</span>
<i>at 2021-08-11T17:39:44+01:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Cherry-pick fix for BZ 1960743 to v10.11
Simple cherry-pick was not possible as the files have been moved and the
CMS class log methods replaced with an SLF4J logger instance. Also the
config store is pulled from the subsystem and not the CMS.</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/d999da77e150aa610265a214d03b62465015777d">d999da77</a></strong>
<div>
<span>by Chris Kelley</span>
<i>at 2021-08-11T12:09:15-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Remove duplicate buttons from Retrieval List Certificates page</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/0af94a5e28f5842e8dc8b107cca667ab0255b4e1">0af94a5e</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2021-08-11T12:09:15-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Fix navigation buttons in CA EE list certs page
The renderNextButtonElement() has been modified to fix a
typo in commit 13f4c7fe7d71d42b46b25f3e8472ef7f35da5dd6.
https://bugzilla.redhat.com/show_bug.cgi?id=1978345
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/57445347463e1b77ee395c324e7e4462443e0b91">57445347</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2021-08-11T12:09:15-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Fix thread safety in ListCerts
The mReverse, mHardJumpTo, and mDirection fields in ListCerts
servlet has been converted into regular variables to avoid
potential concurrency issues.
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/b9db71b98480f6ba47e66dd6cde1d9dfec80eb66">b9db71b9</a></strong>
<div>
<span>by Christina Fu</span>
<i>at 2021-08-16T11:24:19-07:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Bug1990105- TPS Not properly enforcing Token Profile Separation
This patch addresses the issue that TPS agent operations on tokens, activities, and profiles are not limited by the types (profiles) permmtted to the agent (as described in the documentation). This is a regression from 8.x.
The affected operations are:
- findProfiles
- getProfiles
- updateProfile
- changeStatus (of a profile)
- retrieveTokens
- getToken
- modifyToken
- changeTokenStatus
- retrieveActivities
- getActivity
Note that some operations that seem like should be affected are not
due to the fact that they are TPS admin operations and are shielded
from entering the TPS service at the activity level. For example,
deleting a token would be such a case.
The authorization enforcement added in this patch should affect both
access from the web UI as well as access from PKI CLI.
Reference: https://github.com/dogtagpki/pki/wiki/PKI-TPS-CLI
Another note: the VLV complicates the resulting page. If the returned
entries on the page are all restricted then nothing would be shown. To
add a bit more clarity, an <restricted> entry is added to reflect such
effect so that it would be less confusing to the role user.
The <restricted> entries are left with the epoch date.
This would affect both WEB UI and PKI CLI.
Also, a list minute addition to address an issue with 1911472 in
CertService.java where the subject DN of the CA signing cert should
be used instead of the issuer.
fixes https://bugzilla.redhat.com/show_bug.cgi?id=1990105
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/28b99f8d3184999fff57ffd2e62361ca1a2789f8">28b99f8d</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2021-08-18T15:23:12-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Remove unused BUILDDIR var
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/69af2a37f65b4e6757ffc2de8ac50020e987e99c">69af2a37</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2021-08-18T15:23:12-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Remove unused COPR_REPO var
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/1b2dbfefbd790272adc68fb8ff728dc1d1b8e92e">1b2dbfef</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2021-08-18T15:23:56-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Update Python tests
The Python tests have been modified to build a test
container and run the tests in the container.
The pki-lint script has been modified to use pylint
and flake8 configuration files from the parent folder.
The script has also been modified to get the sources
from Python library path and upgrade folders.
The script dependencies have been moved into pki.spec.
The direct dependency on python3-pyflakes has been
removed since it's already required by python3-flake8.
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/37de3c5644d74cdd949487a920203d6b48c6baaf">37de3c56</a></strong>
<div>
<span>by Chris Kelley</span>
<i>at 2021-08-18T15:23:57-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Replace use of python with python3 on Ubuntu
TIL that on Ubuntu, there isn't a python module per se - but python2 and
python3. There is supposedly some symlink chicanery you can do if your
project requires "python" explicitly, but we have no requirement for
python2 so just state python3 explicitly.
Fixes currently broken CI pipeline</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/cf70ee2b51b2e8134035867b2a112f6e87ebc9c6">cf70ee2b</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2021-08-18T15:23:57-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Add init-workflow.sh
The init-workflow.sh has been added to configure the test
matrix based on the BASE64_MATRIX variable. The test matrix
needs to be base64-encoded since otherwise GitHub will mask
the value rendering it unusable.
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/43ea6eb34e4086f817e5b9cf7e0b4f51013f6b70">43ea6eb3</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2021-08-18T15:23:57-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Add test repository configuration
The init-workflow.sh has been modified to load the test
repository from BASE64_REPO variable. The test repository
will be configured in the runner image so all tests using
the same image will automatically use the same repository.
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/fab433de528f71e470c674c0aa9c4ed607d800b5">fab433de</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2021-08-18T15:23:57-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Update default test matrix
The init-workflow.sh has been modified to test
against the latest Fedora version by default.
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/5d158447df11007419cb451c59773b710b6819f6">5d158447</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2021-08-18T15:23:57-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Clean up test names
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/df9831778bc42b0271c0db1c90efe824415a30fb">df983177</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2021-08-18T16:42:46-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Rename PKI packages
The pki-* packages have been renamed into dogtag-pki-*.
The Obsoletes: directives have been added to replace
installed pki-* packages. The Provides: directives have
been added for backward compatibility.
The vendor_id and brand macros have been replaced with
product_name, product_id, and theme macros.
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/616b5239b6d9de000d3449b98e7a57a249aa88a3">616b5239</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2021-08-18T16:42:46-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Update version number to 10.11.1
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/fc4f9d2a24c71171600e29cdabc2ba581a250e26">fc4f9d2a</a></strong>
<div>
<span>by Chris Kelley</span>
<i>at 2021-08-25T21:24:00+01:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Fix KRA List Requests by using correct parser</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/ceec7f52ce87eecc5e44878e7bee4d0fb61810e8">ceec7f52</a></strong>
<div>
<span>by jmagne</span>
<i>at 2021-08-25T19:00:05-07:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Fix: Bug 1964176 - KRA PKCS12 support for nCipher sw v12.60+. (#3691)
Note much of this work is based on original work by Alex Scheel.
aka, cipherboy : alexander.m.scheel@gmail.com
This is the pki portion of this bug. Features:
- Import and create our own version of nss's pk12util and name it p12tool..
The reason to do this is to add 3 new KWP algorithm SEC_OIDS dynamically to
nss. This allows the tool to be able to import p12 file that is wrapped with one
of these new algorithms. Otherwise this tool operates exactly like the nss pk1util,
but it's invokded with the name "p12tool".
- Added support to the KRA to be able to create a p12 file using one of the following algs:
"AES/None/PKCS5Padding/Kwp/128"
"AES/None/PKCS5Padding/Kwp/192"
"AES/None/PKCS5Padding/Kwp/256"
Note this requires a new version of jss upcoming that registers these 3 new algs.
They can be referenced by these names in java jss code. These algs are needed when
using an hsm of a certain firmware version that is more restrictive, especially under
FIPS mode.
If the admin knows that the kra is hooked up with such an hsm, the kra can be configured to use
one of those algs as follows:
In the KRA's CS.cfg:
kra.legacyPKCS12=false
kra.nonLegacyAlg=AES/None/PKCS5Padding/Kwp/256
This setting defaults to what we have orignally "AES/CBC/NoPadding".
Also note if we are using the most restrictive scenario with a given hsm, we
want to install both the CA and the KRA with PSS and have oaep enabled for both post configuration:
keyWrap.useOAEP=true
When attempting to recover a key, the code in jss attempts the current method, and
then tries our enhanced method, if the current method fails. This is to disturb original
functionality as little as possible if not needed.
- CRMFPopClient has been lightly modified to be able to use the AES_KEY_WRAP_KWP wrapping mechanism:
Here is an example of generating a cert request :
CRMFPopClient -d . -p ****** -n "cn=ladycfu, uid=ladycfu" -q POP_SUCCESS -l 2048 -b transport.txt -oaep -w "AES KeyWrap/Wrapped" -h NHSM-CONN-XC -y -v -o test1.req
Note the alg "AES KeyWrap/Wrapped" will wrap up the private key with this alg, and the archival routing on the server's kra subsystem will be able to deal with it.
When emplying the KRA's gui to recover a key, the kra must be configured with the "kra.nonLegacyAlg=AES/None/PKCS5Padding/Kwp/256, an example,
to be able to deal with this key and recover it to a p12 file.
Then when importing such a p12 into a software nss db, we must use the new "p12tool" to do so, since it's the only one that recognizes the noew algorithms:
ex: p12tool -i test.p12 -d .
Note: That this import only works on software for now, since we need further support in nss to make this a reality. The goal of this fix and the corresponding
jss fix was to be able to get this use case working on the hsm in fips mode without modifying nss at all.</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/07d358ed777aafe8b9bd9967eac54fcab613213f">07d358ed</a></strong>
<div>
<span>by Endi S. Dewata</span>
<i>at 2021-08-25T22:20:14-05:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Update PKIConnection logging
The PKIConnection has been modified to log the content of
HTTP requests and responses in debug mode.
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/bb00fdf06b1324c29b0c249a33cd9d3895ba0af1">bb00fdf0</a></strong>
<div>
<span>by Christina Fu</span>
<i>at 2021-08-25T20:34:16-07:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Bug1694417-TLS Session audit events establish/terminate when CS acting as a client
The description of this bug could be a litte off so I'll try to explain
when CLIENT_ACCESS_SESSION_ESTABLISH and CLIENT_ACCESS_SESSION_ERMINATED
are supposed to happen first before explaining the patch.
CLIENT_ACCESS_SESSION_ESTABLISH is supposed to happen when a CS instance
tries to connect to its TLS server (for a CA, that'd be a DS server or
KRA). And CLIENT_ACCESS_SESSION_ERMINATED is supposed to happen when
a connection closes, be it initiated by the CS instance itself, or the
TLS server.
In the case when the TLS server is the DS server, CS actually tries to
create a minimum # of connections at system startup for every "module"
of CS. This minimum number is specified in the CS.cfg parameter
internaldb.minConns, which is defaulted to 3. It is because of this
mechanism, you will not see these establish/terminated events triggered
per action.
The "modules" I spoke of can be found by search for the following string
in the debug log (if debug.level=0) :
"Creating LdapBoundConnFactor"
e.g.
"Creating LdapBoundConnFactor(DBSubsystem)"
In my observation, DS seems to send a CLOSE_NOTIFY alert to CS after one
hour of inactivity. In other words, you'd see 3 "sets" of the
TERMINATED after one hour of inactivity (see example later on what my patch
does). I also notice how CS is reacting to such "receiveAlert" with a
"sendAlert", so we essentially see two terminated events when DS times
out on CS. Another thing I observe is that after a connection is
"terminated", further actions don't trigger any more "establish" events.
I think the connections just go back to the connection pool to be reused
at "terminate".
KRA is different from DS. For every key archival action, CA->KRA
connection is established and then terminated when done. It is
therefore easier to see these audit events more clearly.
Now about the this patch. I actually am not sure if there's anything
not working as expected as far as the two audit events go.
However, I find the events to be not as descriptive as it's hard to tell
when an CLIENT_ACCESS_SESSION_ERMINATED alert was triggered by the
server(DS or KRA) or by the client (CS). For this reason, I prepend
"alertSent:" or "alertReceived:" before the CLOSE_NOTIFY in the audit
Info.
Here are a couple examples:
CA->KRA when crmf is submitted for key archival
0.ConnectAsync - [25/Aug/2021:19:31:05 EDT] [14] [6] [AuditEvent=CLIENT_ACCESS_SESSION_ESTABLISH][ClientHost=a.b.c.d][ServerHost=a.b.c.d][ServerPort=8443][SubjectID=SYSTEM][Outcome=Success] access session establish successfully when Certificate System acts as client
0.https-jsse-nio-8443-exec-17 - [25/Aug/2021:19:31:06 EDT] [14] [6] [AuditEvent=CLIENT_ACCESS_SESSION_TERMINATED][ClientHost=a.b.c.d][ServerHost=a.b.c.d][ServerPort=8443][SubjectID=SYSTEM][Outcome=Success][Info=clientAlertSent: CLOSE_NOTIFY] access session terminated when Certificate System acts as client
CA->DS
At system (CS) startup:
0.main - [25/Aug/2021:12:49:17 EDT] [14] [6] [AuditEvent=CLIENT_ACCESS_SESSION_ESTABLISH][ClientHost=a.b.c.d][ServerHost=a.b.c.d][ServerPort=636][SubjectID=SYSTEM][Outcome=Success] access session establish successfully when Certificate System acts as client
...
Do something such as
pki -d . -c pAssword.123 -P https -p 8443 -n "PKI Administrator for example.com" ca-user-find
Notice how neither of the establish/terminated events get triggered.
...
After one hour (imposed by DS by default):
0.LDAPConnThread-9 ldaps://pki1.example.com:636 - [25/Aug/2021:13:49:17 EDT] [14] [6] [AuditEvent=CLIENT_ACCESS_SESSION_TERMINATED][ClientHost=10.19.34.104][ServerHost=10.19.34.104][ServerPort=636][SubjectID=SYSTEM][Outcome=Success][Info=clientAlertReceived: CLOSE_NOTIFY] access session terminated when Certificate System acts as client
0.LDAPConnThread-9 ldaps://pki1.example.com:636 - [25/Aug/2021:13:49:17 EDT] [14] [6] [AuditEvent=CLIENT_ACCESS_SESSION_TERMINATED][ClientHost=a.b.c.d][ServerHost=a.b.c.d][ServerPort=636][SubjectID=SYSTEM][Outcome=Success][Info=clientAlertSent: CLOSE_NOTIFY] access session terminated when Certificate System acts as client
Notice how one has "clientAlertReceived: CLOSE_NOTIFY" and the second one has
"clientAlertSent: CLOSE_NOTIFY", possible when CS received a timeout
notification it responded with a close notify.
I also adjusted some of the debug messages to make them easier to debug.
addresses https://bugzilla.redhat.com/show_bug.cgi?id=1694417
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/786ed0b60b26fde2588d49596c19cd742bf92b86">786ed0b6</a></strong>
<div>
<span>by c-dorney</span>
<i>at 2021-08-26T11:24:24+01:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Encode cert request as bytes before writing to file (#3718)
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/077e4e4a52b2129acea8c4ef023761139f24911d">077e4e4a</a></strong>
<div>
<span>by Christina Fu</span>
<i>at 2021-08-31T15:14:24-07:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Bug1999146-TPS-install-Python-error-text
This patch is an attempt to fix the TPS installation issue regarding:
TypeError: __init__() got an unexpected keyword argument 'text'
My research shows that it's likely having to do with Python version
differences. In Python 3.6.8, "text" is possibly not yet introduced
so I"m trying out "universal_newlines".
fixes https://bugzilla.redhat.com/show_bug.cgi?id=1999146
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/e83a488bcecd9dbf8041108c5957c56ed01d2b46">e83a488b</a></strong>
<div>
<span>by jmagne</span>
<i>at 2021-09-16T15:48:50-07:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Fix Bug 2001576 - pki instance creation fails for IPA server in FIPS mode (RHEL-8.5) (#3741)
It looks like this is an issue in FIPS mode because when we restart the subsystem, there is a pki command
that runs before the server runs. In order for this command to succeed, we must alter the python script that
runs pki commands to add the following switch to turn off fips mode in java: "-Dcom.redhat.fips=false".
This allows the JSS proivder to be selected instead of a differnt one which doesn't work for us, when we are in
fips mode.</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/f7f04b1da90a4688bcc039c3f4a8986c2ee526ae">f7f04b1d</a></strong>
<div>
<span>by Christina Fu</span>
<i>at 2021-09-16T16:27:18-07:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Bug2000184-hsm CMC shared Secret failed unwrap
With the latest nCipher firmware version (> v.12.60) in FIPS mode,
CMC Shared Secret authentication would fail since the HSM does not
allow the default issuance protection cert (CA subsystme cert) keys
to do unwrap (Application error: Key 0x000004FA doesn't allow decrypt).
To overcome the issue, the issuance protection cert needs to be replaced
with one that has such capability. The tool 'certutil' came to mind as
it advertised the '--keyOpFlagsOn opflags' option. However, my experiment
has shown that certutil has trouble processing the one of the needed opflag
"sign_recover" ("Unknown flag (recover)")
This patch modifies PKCS10Client so that a new option '-w' is added to
allow for generation of an RSA key pair (thus CSR) which is capable of
handling wrapping/unwrapping on the aformentioned hsm version.
The steps to issue a new CA issuance protection cert involves the following:
A. generate a CSR:
e.g. PKCS10Client -d /var/lib/pki/<ca instance>/alias -h hsm-module -a rsa -l 2048 -n "CN=CA issuanceProt cert" -w -v -o ca-issuanceProt-cfu.csr.b64
B. create a CMCRequest cfg file to be signed by a CA agent (instruction
can be found in doc;
C. Use HttpClient to submit the cmc request to the CA using caCMCcaIssuanceProtectionCert
D. Use CMCResponse with -v to print out certs in the chain (pick Cert:0) in b64 encoding; then save the b64 of the cert into a file (e.g. caIssuanceProt.cert)
Be sure to add the "brackets" above and below the b64 blob:
-----BEGIN CERTIFICATE-----
cert b64 blob
-----END CERTIFICATE-----
E. stop the CA
F. import the cert in caIssuanceProt.cert into both the hsm that the CA uses
and the nssdb where the CA agent will be generating the cmc shared secret..
Assume CA agent nssdb has been set up with the proper CA cert trust and
agent (bootstrap admin user by default) cert:
* certutil -d /var/lib/pki/<ca instance>/alias -h <hsm module> -A -t "u,u,u" -n "issuanceProt-091521b.cert" -i caIssuanceProt.cert
* certutil -d <agent nssdb dir> -A -t ",," -n "issuanceProt-091521b.cert" -i caIssuanceProt.cert
G. edit CA CS.cfg by adding (or modirying, if it exists):
ca.cert.issuance_protection.nickname=<hsm module>:<issuance protection cert nickname>
e.g.
ca.cert.issuance_protection.nickname=myHSM:issuanceProt-091521b.cert
While in there, add the following as well:
keyWrap.useOAEP=true
And setup cmc Shared Secret authentication
e.g. (for better security, set up secure ldap)
auths.instance.SharedToken.dnpattern=
auths.instance.SharedToken.ldap.basedn=ou=People,dc=sjc,dc=redhat,dc=com
auths.instance.SharedToken.ldap.ldapauth.authtype=BasicAuth
auths.instance.SharedToken.ldap.ldapauth.bindDN=cn=Directory Manager
auths.instance.SharedToken.ldap.ldapauth.bindPWPrompt=Rule SharedToken
auths.instance.SharedToken.ldap.ldapauth.clientCertNickname=
auths.instance.SharedToken.ldap.ldapconn.host=test.example.com
auths.instance.SharedToken.ldap.ldapconn.port=389
auths.instance.SharedToken.ldap.ldapconn.secureConn=false
auths.instance.SharedToken.ldap.ldapconn.version=3
auths.instance.SharedToken.ldap.maxConns=
auths.instance.SharedToken.ldap.minConns=
auths.instance.SharedToken.ldapByteAttributes=
auths.instance.SharedToken.ldapStringAttributes=
auths.instance.SharedToken.pluginName=SharedToken
auths.instance.SharedToken.shrTokAttr=shrTok
G. start CA
After this, you'll need to rerun CMCSharedToken to regenerate the shared secret,
and then modify the "shrTok" value of the user entry if
it contains another value generated using the previous issuanceProt cert
(default is CA's subsystem cert, which doesn't work with the aformentioned
hsm version)
Finally, in the case of CRMF requests, where KRA is involved, please note
that if the 2-step procedure is followed to install KRA, at copmletion
add the DRM (KRA) transport cert to each CA and KRA's CS.cfg files.
e.g.
CA's CS.cfg:
ca.connector.KRA.transportCert=MIIEbjCC...kw==
KRA's CS.cfg:
kra.transport.cert=MIIEIjCCA...kw==
and while in there, add the following:
keyWrap.useOAEP=true
kra.legacyPKCS12=false
kra.nonLegacyAlg=AES/None/PKCS5Padding/Kwp/256
Restart both CA and KRA after configuration changes.
Fixes https://bugzilla.redhat.com/show_bug.cgi?id=2000184
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/9ecbea99affda2b6256237a81be7fc6d954b3e52">9ecbea99</a></strong>
<div>
<span>by Ciarán Dorney</span>
<i>at 2021-09-21T10:24:24+01:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Bump version for tag
</pre>
</li>
</ul>
<h4>7 changed files:</h4>
<ul>
<li class="file-stats">
<a href="#354079a72b91a4280407c16a36f47d1986fd85a5">
.classpath
</a>
</li>
<li class="file-stats">
<a href="#ecae19c77a082e8b0487ab1eb8428f56f72e4341">
<span class="new-file">
+
.github/workflows/acme-tests.yml
</span>
</a>
</li>
<li class="file-stats">
<a href="#59aa675277e0d680e6ce78ba8f1b1e1d9918a617">
<span class="new-file">
+
.github/workflows/ca-tests.yml
</span>
</a>
</li>
<li class="file-stats">
<a href="#91695bf5b8a0ce2da7eeb20d31c708eb25b2cf34">
<span class="deleted-file">
−
.github/workflows/installation-tests.yml
</span>
</a>
</li>
<li class="file-stats">
<a href="#1ef4ca516abc68d9dded3e330ec5c9a546d313f4">
.github/workflows/ipa-tests.yml
</a>
</li>
<li class="file-stats">
<a href="#1f5479b96d388bf5ea248b689c8d27f6e6565a4f">
<span class="new-file">
+
.github/workflows/kra-tests.yml
</span>
</a>
</li>
<li class="file-stats">
<a href="#b0c8c439fb8797a70835207888b7917a361db129">
<span class="new-file">
+
.github/workflows/ocsp-tests.yml
</span>
</a>
</li>
</ul>
<h5>The diff was not included because it is too large.</h5>
</div>
<div class="footer" style="margin-top: 10px;">
<p style="font-size: small; color: #666;">
—
<br>
<a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/compare/1c0a7b45225aadc6efde21f92b0103937ae99d6d...9ecbea99affda2b6256237a81be7fc6d954b3e52">View it on GitLab</a>.
<br>
You're receiving this email because of your account on salsa.debian.org.
If you'd like to receive fewer emails, you can
adjust your notification settings.
</p>
</div>
</body>
</html>