<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN" "http://www.w3.org/TR/REC-html40/loose.dtd">
<html lang="en">
<head>
<meta content="text/html; charset=US-ASCII" http-equiv="Content-Type">
<title>
GitLab
</title>
<style data-premailer="ignore" type="text/css">
a { color: #1068bf; }
</style>
<style>img {
max-width: 100%; height: auto;
}
body {
font-size: 0.875rem;
}
body {
-webkit-text-shadow: rgba(255,255,255,0.01) 0 0 1px;
}
body {
font-family: -apple-system, BlinkMacSystemFont, "Segoe UI", Roboto, "Noto Sans", Ubuntu, Cantarell, "Helvetica Neue", sans-serif, "Apple Color Emoji", "Segoe UI Emoji", "Segoe UI Symbol", "Noto Color Emoji"; font-size: inherit;
}
</style>
</head>
<body style='font-size: inherit; -webkit-text-shadow: rgba(255,255,255,0.01) 0 0 1px; font-family: -apple-system, BlinkMacSystemFont, "Segoe UI", Roboto, "Noto Sans", Ubuntu, Cantarell, "Helvetica Neue", sans-serif, "Apple Color Emoji", "Segoe UI Emoji", "Segoe UI Symbol", "Noto Color Emoji";'>
<div class="content">
<h3 style="margin-top: 20px; margin-bottom: 10px;">
Timo Aaltonen pushed to branch master at <a href="https://salsa.debian.org/freeipa-team/dogtag-pki" style="color: #1068bf;">FreeIPA packaging / dogtag-pki</a>
</h3>
<h4 style="margin-top: 10px; margin-bottom: 10px;">
Commits:
</h4>
<ul>
<li>
<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/bcda2aa2361b9bccae02c5bb6dc1ebbaa23b0118" style="color: #1068bf;">bcda2aa2</a></strong>
<div>
<span> by Chris Kelley </span> <i> at 2022-01-20T16:41:28+00:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.8125rem; color: #303030; position: relative; font-family: "Menlo", "DejaVu Sans Mono", "Liberation Mono", "Consolas", "Ubuntu Mono", "Courier New", "andale mono", "lucida console", monospace; word-break: break-all; word-wrap: break-word; background-color: #fafafa; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dbdbdb;'>Use %{_jvmdir} macro to define java_home in SPEC file
</pre>
</li>
<li>
<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/5e50093ff17eeb4b350a17cc659e5e3ae2e7ce68" style="color: #1068bf;">5e50093f</a></strong>
<div>
<span> by Endi S. Dewata </span> <i> at 2022-02-02T10:53:21-06:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.8125rem; color: #303030; position: relative; font-family: "Menlo", "DejaVu Sans Mono", "Liberation Mono", "Consolas", "Ubuntu Mono", "Courier New", "andale mono", "lucida console", monospace; word-break: break-all; word-wrap: break-word; background-color: #fafafa; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dbdbdb;'>Exclude .git folder from Eclipse project
</pre>
</li>
<li>
<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/a907bbe7879fc304922d58036ba29d927fae5b9d" style="color: #1068bf;">a907bbe7</a></strong>
<div>
<span> by Endi S. Dewata </span> <i> at 2022-02-02T11:27:16-06:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.8125rem; color: #303030; position: relative; font-family: "Menlo", "DejaVu Sans Mono", "Liberation Mono", "Consolas", "Ubuntu Mono", "Courier New", "andale mono", "lucida console", monospace; word-break: break-all; word-wrap: break-word; background-color: #fafafa; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dbdbdb;'>Update SCEP test
The SCEP test has been updated to use the pre-built SSCEP
package from the COPR repository.
</pre>
</li>
<li>
<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/cd3d9df71d948c8442fe388cbc094ddb6ca1223b" style="color: #1068bf;">cd3d9df7</a></strong>
<div>
<span> by Endi S. Dewata </span> <i> at 2022-02-02T11:27:16-06:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.8125rem; color: #303030; position: relative; font-family: "Menlo", "DejaVu Sans Mono", "Liberation Mono", "Consolas", "Ubuntu Mono", "Courier New", "andale mono", "lucida console", monospace; word-break: break-all; word-wrap: break-word; background-color: #fafafa; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dbdbdb;'>Fix pki-healthcheck for clones
Previously the ClonesConnectivyAndDataCheck.check_kra_clones()
was trying to check KRA clone status by retrieving a key using
the subsystem cert. This operation did not work since the user
associated with the cert did not have access to the keys. The
code has been changed to get the status from GetStatus service
instead. The original code might be moved into IPA later so it
could run with IPA's RA agent credentials which would allow
access to the keys.
Previously the ClonesPlugin.contact_subsystem_using_sslget()
used sslget to call GetStatus service and returned the entire
output which was then incorrectly processed in XML format. The
method has been renamed to get_status() and changed to use
PKIConnection and process the response in either JSON or XML
format, then only return the subsystem status. All callers
have been updated accordingly.
The ClonesPlugin.contact_subsystem_using_pki() is no longer
used so it has been removed.
</pre>
</li>
<li>
<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/1789b74aa3ef23a608952a1198a06471ef1dc004" style="color: #1068bf;">1789b74a</a></strong>
<div>
<span> by Endi S. Dewata </span> <i> at 2022-02-02T13:41:06-06:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.8125rem; color: #303030; position: relative; font-family: "Menlo", "DejaVu Sans Mono", "Liberation Mono", "Consolas", "Ubuntu Mono", "Courier New", "andale mono", "lucida console", monospace; word-break: break-all; word-wrap: break-word; background-color: #fafafa; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dbdbdb;'>Update pki-healthcheck tests
</pre>
</li>
<li>
<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/7431b7becb2daeb754393229aba5f8b819e12a64" style="color: #1068bf;">7431b7be</a></strong>
<div>
<span> by Endi S. Dewata </span> <i> at 2022-02-02T16:12:38-06:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.8125rem; color: #303030; position: relative; font-family: "Menlo", "DejaVu Sans Mono", "Liberation Mono", "Consolas", "Ubuntu Mono", "Courier New", "andale mono", "lucida console", monospace; word-break: break-all; word-wrap: break-word; background-color: #fafafa; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dbdbdb;'>Fix typo in ClonesPlugin.get_status()
</pre>
</li>
<li>
<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/ee53a9b0b45659078c828653109262f1af49aa1f" style="color: #1068bf;">ee53a9b0</a></strong>
<div>
<span> by Christina Fu </span> <i> at 2022-02-11T10:38:47-08:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.8125rem; color: #303030; position: relative; font-family: "Menlo", "DejaVu Sans Mono", "Liberation Mono", "Consolas", "Ubuntu Mono", "Courier New", "andale mono", "lucida console", monospace; word-break: break-all; word-wrap: break-word; background-color: #fafafa; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dbdbdb;'>B1996141-subCA-adjustValidity
The CAValidityDefault is used by the profile caCMCcaCert during
subCA creation when using the CMC enrollment method.
While pkispawn auto-enrollment for subCA uses non CMC methods which
allows for use of the installAdjustValidity parameter to adjust
the notAfter date to match that of the signing CA's, the CAValidityDefault
does not.
This patch reads the bypassCAnotafter parameter in the CAValidityDefault
plugin so that by default the notAfter date will not supercede that of
the signing CA's.
fixes https://bugzilla.redhat.com/show_bug.cgi?id=1996141
</pre>
</li>
<li>
<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/f0de8cc3dcfd4a9ea9891a1635a3aa9a6369259f" style="color: #1068bf;">f0de8cc3</a></strong>
<div>
<span> by Endi S. Dewata </span> <i> at 2022-02-21T15:54:05-06:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.8125rem; color: #303030; position: relative; font-family: "Menlo", "DejaVu Sans Mono", "Liberation Mono", "Consolas", "Ubuntu Mono", "Courier New", "andale mono", "lucida console", monospace; word-break: break-all; word-wrap: break-word; background-color: #fafafa; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dbdbdb;'>Use Java 17 for Fedora 36
</pre>
</li>
<li>
<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/eb8c180d102c0bbad65e33ea68f5463672716504" style="color: #1068bf;">eb8c180d</a></strong>
<div>
<span> by Endi S. Dewata </span> <i> at 2022-02-22T09:32:30-06:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.8125rem; color: #303030; position: relative; font-family: "Menlo", "DejaVu Sans Mono", "Liberation Mono", "Consolas", "Ubuntu Mono", "Courier New", "andale mono", "lucida console", monospace; word-break: break-all; word-wrap: break-word; background-color: #fafafa; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dbdbdb;'>Add test for CA profiles
</pre>
</li>
<li>
<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/8ec59aa67e8d177726215b0bcc829127697c591b" style="color: #1068bf;">8ec59aa6</a></strong>
<div>
<span> by Chris Kelley </span> <i> at 2022-03-29T07:14:29+01:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.8125rem; color: #303030; position: relative; font-family: "Menlo", "DejaVu Sans Mono", "Liberation Mono", "Consolas", "Ubuntu Mono", "Courier New", "andale mono", "lucida console", monospace; word-break: break-all; word-wrap: break-word; background-color: #fafafa; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dbdbdb;'>Update Version to 11.0.4
</pre>
</li>
<li>
<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/778e91f497632c5ec1f9704f93ad07957fab1b7c" style="color: #1068bf;">778e91f4</a></strong>
<div>
<span> by Christina Fu </span> <i> at 2022-04-12T14:47:40-07:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.8125rem; color: #303030; position: relative; font-family: "Menlo", "DejaVu Sans Mono", "Liberation Mono", "Consolas", "Ubuntu Mono", "Courier New", "andale mono", "lucida console", monospace; word-break: break-all; word-wrap: break-word; background-color: #fafafa; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dbdbdb;'>Bug2074631-p12 password
This patch comments out debug lines containing auditContext.
fixes https://bugzilla.redhat.com/show_bug.cgi?id=2074631
</pre>
</li>
<li>
<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/71ac05ddf3f3ef9d6e9c28aefdbb5b1b249d1732" style="color: #1068bf;">71ac05dd</a></strong>
<div>
<span> by Chris Kelley </span> <i> at 2022-05-05T07:32:08+01:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.8125rem; color: #303030; position: relative; font-family: "Menlo", "DejaVu Sans Mono", "Liberation Mono", "Consolas", "Ubuntu Mono", "Courier New", "andale mono", "lucida console", monospace; word-break: break-all; word-wrap: break-word; background-color: #fafafa; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dbdbdb;'>Use SHA-256 for authentication methods</pre>
</li>
<li>
<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/44e8eb9642bcb602d915eed36a838f63cf35836a" style="color: #1068bf;">44e8eb96</a></strong>
<div>
<span> by Chris Kelley </span> <i> at 2022-05-06T07:21:25+01:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.8125rem; color: #303030; position: relative; font-family: "Menlo", "DejaVu Sans Mono", "Liberation Mono", "Consolas", "Ubuntu Mono", "Courier New", "andale mono", "lucida console", monospace; word-break: break-all; word-wrap: break-word; background-color: #fafafa; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dbdbdb;'>Update version to v11.0.5
</pre>
</li>
<li>
<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/4551594a1f71ab69f6d0bed1336255ea2a41ac17" style="color: #1068bf;">4551594a</a></strong>
<div>
<span> by Chris Kelley </span> <i> at 2022-07-14T15:54:44+01:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.8125rem; color: #303030; position: relative; font-family: "Menlo", "DejaVu Sans Mono", "Liberation Mono", "Consolas", "Ubuntu Mono", "Courier New", "andale mono", "lucida console", monospace; word-break: break-all; word-wrap: break-word; background-color: #fafafa; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dbdbdb;'>Disable access to external entities when parsing XML
This reduces the vulnerability of XML parsers to XXE (XML external
entity) injection.
The best way to prevent XXE is to stop using XML altogether, which we do
plan to do. Until that happens I consider it worthwhile to tighten the
security here though.</pre>
</li>
<li>
<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/9706cdc2f2f96a061003522c6232aba83de30c20" style="color: #1068bf;">9706cdc2</a></strong>
<div>
<span> by Timo Aaltonen </span> <i> at 2022-07-28T10:04:36+03:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.8125rem; color: #303030; position: relative; font-family: "Menlo", "DejaVu Sans Mono", "Liberation Mono", "Consolas", "Ubuntu Mono", "Courier New", "andale mono", "lucida console", monospace; word-break: break-all; word-wrap: break-word; background-color: #fafafa; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dbdbdb;'>Merge branch 'upstream'
</pre>
</li>
<li>
<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/192c77759a6bb5d0e83880ef13632932695799ea" style="color: #1068bf;">192c7775</a></strong>
<div>
<span> by Christina Fu </span> <i> at 2022-08-05T19:07:29+01:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.8125rem; color: #303030; position: relative; font-family: "Menlo", "DejaVu Sans Mono", "Liberation Mono", "Consolas", "Ubuntu Mono", "Courier New", "andale mono", "lucida console", monospace; word-break: break-all; word-wrap: break-word; background-color: #fafafa; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dbdbdb;'>Bug2070766-caServerKeygen_DirUserCert subject constraints
This patch replaces input of cert subject to that of the auth token.
fixes https://bugzilla.redhat.com/show_bug.cgi?id=2070766
</pre>
</li>
<li>
<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/120aaadf0d2f0fd517669134b99f4fa2af41f975" style="color: #1068bf;">120aaadf</a></strong>
<div>
<span> by Christina Fu </span> <i> at 2022-08-05T19:09:10+01:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.8125rem; color: #303030; position: relative; font-family: "Menlo", "DejaVu Sans Mono", "Liberation Mono", "Consolas", "Ubuntu Mono", "Courier New", "andale mono", "lucida console", monospace; word-break: break-all; word-wrap: break-word; background-color: #fafafa; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dbdbdb;'>Bug2070766 - upgrade-caServerKeygen_DirUserCert-profile
This patch provides the upgrade script to change the profile
caServerKeygen_DirUserCert.cfg in an existing ca instance.
fix 2 for bug https://bugzilla.redhat.com/show_bug.cgi?id=2070766
</pre>
</li>
<li>
<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/97302f48d8d210ddb8b7c8d3e92ab67c184d0e1b" style="color: #1068bf;">97302f48</a></strong>
<div>
<span> by Timo Aaltonen </span> <i> at 2022-08-19T11:05:45+03:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.8125rem; color: #303030; position: relative; font-family: "Menlo", "DejaVu Sans Mono", "Liberation Mono", "Consolas", "Ubuntu Mono", "Courier New", "andale mono", "lucida console", monospace; word-break: break-all; word-wrap: break-word; background-color: #fafafa; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dbdbdb;'>version bump
</pre>
</li>
<li>
<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/1a62a722d2ff0b19399209331ba971977ba8cb16" style="color: #1068bf;">1a62a722</a></strong>
<div>
<span> by Timo Aaltonen </span> <i> at 2022-08-19T11:08:25+03:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.8125rem; color: #303030; position: relative; font-family: "Menlo", "DejaVu Sans Mono", "Liberation Mono", "Consolas", "Ubuntu Mono", "Courier New", "andale mono", "lucida console", monospace; word-break: break-all; word-wrap: break-word; background-color: #fafafa; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dbdbdb;'>patches: Disable access to external entities when parsing XML. (Closes: #1014957)
</pre>
</li>
<li>
<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/140de462ce063ecc4e48183aece7f604c743933f" style="color: #1068bf;">140de462</a></strong>
<div>
<span> by jmagne </span> <i> at 2022-08-31T10:04:37-07:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.8125rem; color: #303030; position: relative; font-family: "Menlo", "DejaVu Sans Mono", "Liberation Mono", "Consolas", "Ubuntu Mono", "Courier New", "andale mono", "lucida console", monospace; word-break: break-all; word-wrap: break-word; background-color: #fafafa; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dbdbdb;'>Fix Bug 2122409 - pki-tomcat/kra unable to decrypt when using RSA-OAEP padding in RHEL9 with FIPS enabled (#4129)
This fix allows the "pki kra-key" cmds the ability to specify OAEP wrapping of the sesssion key before sending the request to the server.
Ex:
pki -d . -v -oaep -n "PKI KRA Administrator for CA RSA" -h test.host.com -p 19443 kra-key-archive --clientKeyID ID-1 --passphrase 1234
This example will archive the key using oaep to wrap the session key before sending to the server. If the server / kra is configured to use oaep
instead of pkcs1, the operation will be successful.
There will be a similiar "-oaep" switch available fo the kra-key-retrieve cmd as well.</pre>
</li>
<li>
<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/b7f85da5b7efffca86f6e277565f723e64a056b3" style="color: #1068bf;">b7f85da5</a></strong>
<div>
<span> by Marco Fargetta </span> <i> at 2022-09-28T10:57:37+02:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.8125rem; color: #303030; position: relative; font-family: "Menlo", "DejaVu Sans Mono", "Liberation Mono", "Consolas", "Ubuntu Mono", "Courier New", "andale mono", "lucida console", monospace; word-break: break-all; word-wrap: break-word; background-color: #fafafa; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dbdbdb;'>Limit the group membership add to existing users (#4172)
Fix the bug https://bugzilla.redhat.com/show_bug.cgi?id=2070335</pre>
</li>
<li>
<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/56b5dcba10fc56797a00660b18d90dd4d762ff74" style="color: #1068bf;">56b5dcba</a></strong>
<div>
<span> by Chris Kelley </span> <i> at 2022-09-30T06:32:42+01:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.8125rem; color: #303030; position: relative; font-family: "Menlo", "DejaVu Sans Mono", "Liberation Mono", "Consolas", "Ubuntu Mono", "Courier New", "andale mono", "lucida console", monospace; word-break: break-all; word-wrap: break-word; background-color: #fafafa; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dbdbdb;'>Update version to v11.0.6
</pre>
</li>
<li>
<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/3f5b5c658b4674c21cf6907e98d5bf34016a6f12" style="color: #1068bf;">3f5b5c65</a></strong>
<div>
<span> by Timo Aaltonen </span> <i> at 2022-11-21T10:07:48+02:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.8125rem; color: #303030; position: relative; font-family: "Menlo", "DejaVu Sans Mono", "Liberation Mono", "Consolas", "Ubuntu Mono", "Courier New", "andale mono", "lucida console", monospace; word-break: break-all; word-wrap: break-word; background-color: #fafafa; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dbdbdb;'>Merge branch 'upstream'
</pre>
</li>
<li>
<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/75722f22cc006a6f89d33120ddcf263a91887bfb" style="color: #1068bf;">75722f22</a></strong>
<div>
<span> by Timo Aaltonen </span> <i> at 2022-11-21T10:08:28+02:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.8125rem; color: #303030; position: relative; font-family: "Menlo", "DejaVu Sans Mono", "Liberation Mono", "Consolas", "Ubuntu Mono", "Courier New", "andale mono", "lucida console", monospace; word-break: break-all; word-wrap: break-word; background-color: #fafafa; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dbdbdb;'>version bump
</pre>
</li>
<li>
<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/1d63a8a753285d5f3916a380c3508eb20de79d16" style="color: #1068bf;">1d63a8a7</a></strong>
<div>
<span> by Timo Aaltonen </span> <i> at 2022-11-21T10:11:42+02:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.8125rem; color: #303030; position: relative; font-family: "Menlo", "DejaVu Sans Mono", "Liberation Mono", "Consolas", "Ubuntu Mono", "Courier New", "andale mono", "lucida console", monospace; word-break: break-all; word-wrap: break-word; background-color: #fafafa; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dbdbdb;'>control: Fix pki-base-java to depend on default-jre-headless instead of a versioned one, it shouldn't be necessary to hardcode it anymore. (Closes: #1024462)
</pre>
</li>
<li>
<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/cc2c15cb73cbf691dbe4545c4c1a629263f564cf" style="color: #1068bf;">cc2c15cb</a></strong>
<div>
<span> by Timo Aaltonen </span> <i> at 2022-11-21T10:17:18+02:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.8125rem; color: #303030; position: relative; font-family: "Menlo", "DejaVu Sans Mono", "Liberation Mono", "Consolas", "Ubuntu Mono", "Courier New", "andale mono", "lucida console", monospace; word-break: break-all; word-wrap: break-word; background-color: #fafafa; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dbdbdb;'>drop upstreamed patch
</pre>
</li>
</ul>
<h4 style="margin-top: 10px; margin-bottom: 10px;">
30 changed files:
</h4>
<ul>
<li class="file-stats">
<a href="#ecae19c77a082e8b0487ab1eb8428f56f72e4341" style="color: #1068bf;">
.github/workflows/acme-tests.yml
</a>
</li>
<li class="file-stats">
<a href="#59aa675277e0d680e6ce78ba8f1b1e1d9918a617" style="color: #1068bf;">
.github/workflows/ca-tests.yml
</a>
</li>
<li class="file-stats">
<a href="#1f5479b96d388bf5ea248b689c8d27f6e6565a4f" style="color: #1068bf;">
.github/workflows/kra-tests.yml
</a>
</li>
<li class="file-stats">
<a href="#b0c8c439fb8797a70835207888b7917a361db129" style="color: #1068bf;">
.github/workflows/ocsp-tests.yml
</a>
</li>
<li class="file-stats">
<a href="#c7c6f24a599351c849a0dc534d96050b8134603a" style="color: #1068bf;">
.github/workflows/tks-tests.yml
</a>
</li>
<li class="file-stats">
<a href="#9f1a27ff46ff0e8b47b6d3bcf2a9518f2d9df62c" style="color: #1068bf;">
.github/workflows/tps-tests.yml
</a>
</li>
<li class="file-stats">
<a href="#f8b41ce76d7b80d2b47e91b5f92c15f00eccf187" style="color: #1068bf;">
.project
</a>
</li>
<li class="file-stats">
<a href="#40b1f54c1b9fb96b32aedb2fdde197cf55c623ba" style="color: #1068bf;">
base/ca/shared/profiles/ca/caServerKeygen_DirUserCert.cfg
</a>
</li>
<li class="file-stats">
<a href="#0253fd5ac5e6f94d68fcb3edefec82b92caae846" style="color: #1068bf;">
base/ca/src/main/java/com/netscape/ca/CAService.java
</a>
</li>
<li class="file-stats">
<a href="#8448000bd64051a41b0318a05367bf2741b26e88" style="color: #1068bf;">
base/ca/src/main/java/com/netscape/cms/profile/def/CAValidityDefault.java
</a>
</li>
<li class="file-stats">
<a href="#a8802dde975e4f403aabd0b8a0fc1b3dbcd53353" style="color: #1068bf;">
base/ca/src/main/java/com/netscape/cms/servlet/cert/scep/CRSEnrollment.java
</a>
</li>
<li class="file-stats">
<a href="#cf8700f8b960a200f689f1cd1a718c9672c40ba0" style="color: #1068bf;">
base/ca/src/main/java/com/netscape/cms/servlet/processors/CAProcessor.java
</a>
</li>
<li class="file-stats">
<a href="#0fd5ca840483306f46e7d02262ebda078c74448d" style="color: #1068bf;">
base/common/src/main/java/com/netscape/certsrv/account/Account.java
</a>
</li>
<li class="file-stats">
<a href="#9d0dd89a2557f40d2f422b72b1a566e008cb3741" style="color: #1068bf;">
base/common/src/main/java/com/netscape/certsrv/base/PKIException.java
</a>
</li>
<li class="file-stats">
<a href="#d3b0369d554dbb486ca2b2b582e1aa91bdd5107a" style="color: #1068bf;">
base/common/src/main/java/com/netscape/certsrv/base/RESTMessage.java
</a>
</li>
<li class="file-stats">
<a href="#c3fa4079ecb314d8aa16606261c8756c5b44db91" style="color: #1068bf;">
base/common/src/main/java/com/netscape/certsrv/cert/CertData.java
</a>
</li>
<li class="file-stats">
<a href="#ce5fd86daa931457e2c0c804a5b63ed8c0c78252" style="color: #1068bf;">
base/common/src/main/java/com/netscape/certsrv/cert/CertDataInfo.java
</a>
</li>
<li class="file-stats">
<a href="#4bfed38813e94a32f796d7a805169974a3d1890a" style="color: #1068bf;">
base/common/src/main/java/com/netscape/certsrv/cert/CertDataInfos.java
</a>
</li>
<li class="file-stats">
<a href="#8a8ef5837ddeeaf7293921a16ec778bf5e7e3384" style="color: #1068bf;">
base/common/src/main/java/com/netscape/certsrv/cert/CertEnrollmentRequest.java
</a>
</li>
<li class="file-stats">
<a href="#4ebe6373f29c991094928f9e1f949c0501150053" style="color: #1068bf;">
base/common/src/main/java/com/netscape/certsrv/cert/CertRequestInfo.java
</a>
</li>
<li class="file-stats">
<a href="#12e0883f2666b35d7b64af8e970f218feda7bd09" style="color: #1068bf;">
base/common/src/main/java/com/netscape/certsrv/cert/CertRequestInfos.java
</a>
</li>
<li class="file-stats">
<a href="#67f2b0314cc384bc0175751ba921517b6d1e8369" style="color: #1068bf;">
base/common/src/main/java/com/netscape/certsrv/cert/CertRetrievalRequest.java
</a>
</li>
<li class="file-stats">
<a href="#628466e191e5c46776f477d81051f1f9749fa7dd" style="color: #1068bf;">
base/common/src/main/java/com/netscape/certsrv/cert/CertRevokeRequest.java
</a>
</li>
<li class="file-stats">
<a href="#94e49c32d67e85622861e338c7865299ae10cb9b" style="color: #1068bf;">
base/common/src/main/java/com/netscape/certsrv/cert/CertSearchRequest.java
</a>
</li>
<li class="file-stats">
<a href="#d848e086f6d24fcd743e14dddcc61a53c78900c7" style="color: #1068bf;">
base/common/src/main/java/com/netscape/certsrv/key/AsymKeyGenerationRequest.java
</a>
</li>
<li class="file-stats">
<a href="#276cbf639e8d3f3c8e35b21a47bd7ba5d68c58eb" style="color: #1068bf;">
base/common/src/main/java/com/netscape/certsrv/key/KeyArchivalRequest.java
</a>
</li>
<li class="file-stats">
<a href="#d3e211896588a06758a63adf046d5f9330c82603" style="color: #1068bf;">
base/common/src/main/java/com/netscape/certsrv/key/KeyClient.java
</a>
</li>
<li class="file-stats">
<a href="#c2d47bd9ec49a8870946e5f175f6f41448f218aa" style="color: #1068bf;">
base/common/src/main/java/com/netscape/certsrv/key/KeyRequestInfo.java
</a>
</li>
<li class="file-stats">
<a href="#b21f9165a25bc1c8fd430a53b3391dbc5bf816cc" style="color: #1068bf;">
base/common/src/main/java/com/netscape/certsrv/key/KeyRequestInfoCollection.java
</a>
</li>
<li class="file-stats">
<a href="#4e7152c44b3e3470f958c9cf8ae885f03068c2aa" style="color: #1068bf;">
base/common/src/main/java/com/netscape/certsrv/key/SymKeyGenerationRequest.java
</a>
</li>
</ul>
<h5 style="margin-top: 10px; margin-bottom: 10px; font-size: 0.875rem;">
The diff was not included because it is too large.
</h5>
</div>
<div class="footer" style="margin-top: 10px;">
<p style="font-size: small; color: #666;">
—
<br>
<a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/compare/e9eddf60516fc3c248a05705685f8fc73f49d4c7...cc2c15cb73cbf691dbe4545c4c1a629263f564cf" style="color: #1068bf;">View it on GitLab</a>.
<br>
You're receiving this email because of your account on <a target="_blank" rel="noopener noreferrer" href="https://salsa.debian.org" style="color: #1068bf;">salsa.debian.org</a>. <a href="https://salsa.debian.org/-/profile/notifications" target="_blank" rel="noopener noreferrer" class="mng-notif-link" style="color: #1068bf;">Manage all notifications</a> · <a href="https://salsa.debian.org/help" target="_blank" rel="noopener noreferrer" class="help-link" style="color: #1068bf;">Help</a>
</p>
</div>
</body>
</html>