<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN" "http://www.w3.org/TR/REC-html40/loose.dtd">
<html lang="en" style='--code-editor-font: var(--default-mono-font, "Menlo"), DejaVu Sans Mono, Liberation Mono, Consolas, Ubuntu Mono, Courier New, andale mono, lucida console, monospace;'>
<head>
<meta content="text/html; charset=US-ASCII" http-equiv="Content-Type">
<title>
GitLab
</title>
<style data-premailer="ignore" type="text/css">
a { color: #1068bf; }
</style>
<style>img {
max-width: 100%; height: auto;
}
body {
font-size: 0.875rem;
}
body {
-webkit-text-shadow: rgba(255,255,255,0.01) 0 0 1px;
}
body {
font-family: var(--default-regular-font, -apple-system),BlinkMacSystemFont,"Segoe UI",Roboto,"Noto Sans",Ubuntu,Cantarell,"Helvetica Neue",sans-serif,"Apple Color Emoji","Segoe UI Emoji","Segoe UI Symbol","Noto Color Emoji"; font-size: inherit;
}
</style>
</head>
<body style='font-size: inherit; -webkit-text-shadow: rgba(255,255,255,0.01) 0 0 1px; font-family: var(--default-regular-font, -apple-system),BlinkMacSystemFont,"Segoe UI",Roboto,"Noto Sans",Ubuntu,Cantarell,"Helvetica Neue",sans-serif,"Apple Color Emoji","Segoe UI Emoji","Segoe UI Symbol","Noto Color Emoji";'>
<div class="content">
<h3 style="margin-top: 20px; margin-bottom: 10px;">
Timo Aaltonen pushed to branch upstream at <a href="https://salsa.debian.org/freeipa-team/jss">FreeIPA packaging / jss</a>
</h3>
<h4 style="margin-top: 10px; margin-bottom: 10px;">
Commits:
</h4>
<ul>
<li>
<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/jss/-/commit/c8478138aa554134ca2b4e70a5f4cd9927ee11b9">c8478138</a></strong>
<div>
<span> by Endi S. Dewata </span> <i> at 2022-12-05T11:48:06+07:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Update version number to 5.4.0-alpha1
</pre>
</li>
<li>
<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/jss/-/commit/2830f83aacc65dc9ec1271f546c92fb492195b59">2830f83a</a></strong>
<div>
<span> by Marco Fargetta </span> <i> at 2022-12-05T13:31:41+01:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Modify container cgroup
Systemd has some problem to run in docker container if the host uses
only cgroups2.
This could make the run container failing with the error:
Failed to create /init.scope control group: Read-only file system
Failed to allocate manager object: Read-only file system
[!!!!!!] Failed to allocate manager object.
Exiting PID 1...
Removing the cgroup option and use the default value.
</pre>
</li>
<li>
<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/jss/-/commit/47a95b1d21ece8f1ae700debb99f4bdcc068de34">47a95b1d</a></strong>
<div>
<span> by Marco Fargetta </span> <i> at 2022-12-06T11:07:46+01:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Fix import .p12 files with sha256 hash
Stop id the algorithm is not manged
Add custom hash algorithm
Add SHA1 HMAC for PBES2
Add sha1 hmac for pbes2
Fix total num of algs
Fis SonarCloud code smell about deprecated comment
Fix missing checks
Add SHA-384 and SHA-512 to MacData and KeyGen
Add SHA-384 and SHA-512 support into native key generation
Move the meck selection logic to the KeyGenerator
Move the key generation to a separate method
Add PBE to the list of provided algorithms
Revert hash algorithm definition and fix SHA1
Convert SHA_[] HMAC algorithms from CKM_* to SEC_OID_*
Convert SHA1 HMAC from CKM_SHA_1_HMAC to SEC_OID_HMAC_SHA1
</pre>
</li>
<li>
<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/jss/-/commit/842f4dd1fa4084b7af4d67a110731732448ed9e6">842f4dd1</a></strong>
<div>
<span> by Marco Fargetta </span> <i> at 2022-12-06T11:07:46+01:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Add ASN1 decoding of PBES2 algorithm in encrypted data
Key generated but decrypt paramter problem
Decrypt the content without generating the digest
The method doFinal will generate error for the decrypt operation so only
the update is used to parse the encrypted data.
Fix password conversion
The password for PBES2 EncryptedContentInfo needs the default password
converter in the majority of cases. The cusomt password converter as
adding extra bytes which were not managed by nss/openssl p12 code.
Fix optional keyLength parameter in PBKDF2
Fix formatting
</pre>
</li>
<li>
<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/jss/-/commit/486dd851acd54a4ac8c2b4917d283ab304777f86">486dd851</a></strong>
<div>
<span> by Marco Fargetta </span> <i> at 2022-12-07T09:44:49+01:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Update github-script action
Update github-script action to v6
See https://github.com/actions/github-script
</pre>
</li>
<li>
<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/jss/-/commit/dfb1fb2b9bd7a5808c6965a8ec65e8207566ccd8">dfb1fb2b</a></strong>
<div>
<span> by Marco Fargetta </span> <i> at 2022-12-13T15:36:31+10:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Fix pkcs7 serialisation when no signatures present
According the documentation [1]:
In the case of external signatures, the
content being signed is absent from the EncapsulatedContentInfo value
included
The current implementation always include the content but with length
equela to zero. This is modified to be consistent with the
specification.
1. https://www.rfc-editor.org/rfc/rfc5652#section-5.2
</pre>
</li>
<li>
<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/jss/-/commit/72bafe89ef4d8210a4a4509b1d54ddb23cefd381">72bafe89</a></strong>
<div>
<span> by Endi S. Dewata </span> <i> at 2022-12-14T20:40:24+07:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Consolidate initialization jobs
</pre>
</li>
<li>
<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/jss/-/commit/0c54ba6ed016b9cfc9278ae22b771466c03b2a9d">0c54ba6e</a></strong>
<div>
<span> by Endi S. Dewata </span> <i> at 2022-12-15T02:10:07+07:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Consolidate build jobs
The build jobs in test workflows have been consolidated into
build.yml such that the build will be created just once by the
build workflow, and the test workflows will use the same build
once it's completed.
https://github.com/lewagon/wait-on-check-action
</pre>
</li>
<li>
<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/jss/-/commit/8af83584934aa63443cbd185e2f942d740c860eb">8af83584</a></strong>
<div>
<span> by Endi S. Dewata </span> <i> at 2022-12-15T09:31:10+07:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Fix Eclipse warning due to missing encoding
</pre>
</li>
<li>
<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/jss/-/commit/f529098980ec139a94b2ca4c13cc4aba55e64425">f5290989</a></strong>
<div>
<span> by Endi S. Dewata </span> <i> at 2022-12-16T00:26:07+07:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Add jss-deps and jss-builder-deps images
The jss-deps and jss-builder-deps images have been added to
store the runtime and build dependencies, respectively.
</pre>
</li>
<li>
<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/jss/-/commit/1188c34009965f02a816979d2602a910a6d9fdc6">1188c340</a></strong>
<div>
<span> by Endi S. Dewata </span> <i> at 2022-12-16T22:32:14+07:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Cache jss-deps and jss-builder-deps images
The build job has been modified to cache the runtime and build
dependencies.
</pre>
</li>
<li>
<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/jss/-/commit/4ac1cddb6401d7c557db3e6748eb77c83a5524bc">4ac1cddb</a></strong>
<div>
<span> by Endi S. Dewata </span> <i> at 2022-12-20T06:40:35+07:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Add publish job
A new job has been added to publish JSS images to GH Packages
after the build job in the master branch is complete.
</pre>
</li>
<li>
<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/jss/-/commit/821dbbf6ca4ef1f72b4409ac6327d3b7961ff413">821dbbf6</a></strong>
<div>
<span> by Endi S. Dewata </span> <i> at 2022-12-22T00:56:56+07:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Drop default COPR repo
The GitHub workflows have been modified to no longer use a COPR
repo by default. Instead, it will install packages from GitHub
Packages. The Azure Pipelines still have a dependency on COPR.
It will be removed separately later.
</pre>
</li>
<li>
<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/jss/-/commit/61da19e69f862fac158cbb22b4fe0a07f0a25318">61da19e6</a></strong>
<div>
<span> by Endi S. Dewata </span> <i> at 2022-12-22T17:37:11+07:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Add jss-dist image
The CI has been modified to store the RPMs in an Alpine-based
image and publish it to GH Packages to reduce the size of the
distribution.
</pre>
</li>
<li>
<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/jss/-/commit/4c93da7fb60e82c4ae93d635d46d036250beffab">4c93da7f</a></strong>
<div>
<span> by Endi S. Dewata </span> <i> at 2022-12-23T01:16:01+07:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Remove obsolete references to builder images
The CI has been updated to no longer use *-builder images and
use *-dist images instead.
</pre>
</li>
<li>
<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/jss/-/commit/5e1b1bd0af5a4bfb8655e9d02d3088b8c8ebce63">5e1b1bd0</a></strong>
<div>
<span> by Marco Fargetta </span> <i> at 2022-12-22T19:44:49+01:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Remove ot modify expression which always evaluate the same
Following SonarCloud indications some expressions always verify the same
so they have been removed of modified
</pre>
</li>
<li>
<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/jss/-/commit/b0ab5cec549f15d5064f51dd3ea3abb0412eb92b">b0ab5cec</a></strong>
<div>
<span> by Endi S. Dewata </span> <i> at 2023-01-05T20:34:51+07:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Replace BASE64_MATRIX with BASE64_OS
Previously the BASE64_MATRIX parameter provided a mechanism
to test against multiple Fedora versions at once. However,
since the test resources are limited and only one of the
versions is eventually published, the parameter has been
replaced with a new BASE64_OS parameter which only supports
a single Fedora version.
https://github.com/dogtagpki/pki/wiki/Configuring-Test-OS
</pre>
</li>
<li>
<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/jss/-/commit/61bad4ff8381153bd9556b8e2182914af7035c97">61bad4ff</a></strong>
<div>
<span> by Endi S. Dewata </span> <i> at 2023-01-06T07:02:09+07:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Update publish workflow
The publish workflow has been modified to wait for the build
using lewagon/wait-on-check-action instead of on.workflow_run
such that it can be customized to publish the images with the
proper tag for the branch.
</pre>
</li>
<li>
<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/jss/-/commit/623cdc42a0db29e76e1249f2421475c1b82e341b">623cdc42</a></strong>
<div>
<span> by Chris Kelley </span> <i> at 2023-01-06T13:09:35+00:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Make update_version script update jss_config_version
In JSS there is an extra step required for updating where the
value of jss_config_version must be bumped in sync with the
version and phase. Currently this does not happen, which will
lead to irregularities in testing and potentially incompatible
config.
</pre>
</li>
<li>
<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/jss/-/commit/028573c02a298448ddfdbba4f3864668e82bc795">028573c0</a></strong>
<div>
<span> by Endi S. Dewata </span> <i> at 2023-01-06T23:34:37+07:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Convert sandbox test into GH job
Previously the sandbox test was written as a Dockerfile.
To make it easier to see the logs and for consistency with
other tests, it has been converted into a GH job.
</pre>
</li>
<li>
<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/jss/-/commit/c7a04aec952593f83c0fb1a5e4347717221f69da">c7a04aec</a></strong>
<div>
<span> by Marco Fargetta </span> <i> at 2023-01-10T11:58:35+01:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Fix several issues identified by SonarCloud
This commit will solve some of the most critical problem identified by
SonarCloud. In more details they are:
- buried exceptions: some `finally` clause where thrown exception hiding
the exceptions thrown in the try block. The code has been modified so
the finally exception is thrown only if the try block has not
exception, preserving the order of appearance;
- some conditions where always (or never) verified;
- possible NullPointerException in several points.
This whould also allow the code quality to go from "D" to "C" level.
</pre>
</li>
<li>
<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/jss/-/commit/3700e7304493e7322fad1e0dcf427d464f38ea18">3700e730</a></strong>
<div>
<span> by Matthew McClain </span> <i> at 2023-01-10T12:01:38+01:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>fix small memory leak with every open socket
</pre>
</li>
<li>
<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/jss/-/commit/f304f50993595b95455159583c9373bbe11baeaa">f304f509</a></strong>
<div>
<span> by Marco Fargetta </span> <i> at 2023-01-11T17:37:21+01:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Fix potential problem identifid by Covscan
For the error see:
https://cov01.lab.eng.brq2.redhat.com/covscanhub/task/269948//log/added.err
</pre>
</li>
<li>
<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/jss/-/commit/2c715d2db2b811fb26fc9dc87dccdd0a3f36fa2b">2c715d2d</a></strong>
<div>
<span> by Marco Fargetta </span> <i> at 2023-01-17T09:37:24+01:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Add test with postgresql
Add a new workflow testing ACME with postgresql. The connection to the
DB uses SSL and it is managed through JSS so this verify it is working with a third party applications.
See issue #610
</pre>
</li>
<li>
<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/jss/-/commit/cd7d932beb2e49f0a418d47f6158c63e1177850e">cd7d932b</a></strong>
<div>
<span> by Endi S. Dewata </span> <i> at 2023-01-18T20:31:19+07:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Add support for container registry configuration
The publish job has been modified to support container registry
configuration and will only run if the registry is configured.
The job will also no longer publish the runner image since it's
only used internally.
https://github.com/dogtagpki/pki/wiki/Configuring-Container-Registry
</pre>
</li>
<li>
<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/jss/-/commit/b9c099e49cdecae1df5f23fb0da44e3fa0dc48c4">b9c099e4</a></strong>
<div>
<span> by Endi S. Dewata </span> <i> at 2023-01-18T08:48:46-06:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Remove default container registry
</pre>
</li>
<li>
<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/jss/-/commit/9dfa97975fecc6991b35174c355a4d665e4af08b">9dfa9797</a></strong>
<div>
<span> by Endi S. Dewata </span> <i> at 2023-01-19T21:01:10+07:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Switch to Quay.io
</pre>
</li>
<li>
<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/jss/-/commit/084a4e161ba64e5915e528bc136166dd5e72fff0">084a4e16</a></strong>
<div>
<span> by Endi S. Dewata </span> <i> at 2023-01-20T10:02:31-06:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Clean up publish job
</pre>
</li>
<li>
<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/jss/-/commit/ca437800b9b4358d2c0a9daab36f29a24959fdce">ca437800</a></strong>
<div>
<span> by Marco Fargetta </span> <i> at 2023-02-23T14:58:34+01:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Fix warning for accessing `-Werror=maybe-uninitialized`
The error stop the building only with debug enabled and all warning
enabled. This is not a problem but it blocks the `sandbox-test` which
exit with error.
The error is arise only in fedora rawhide and not in fedora 37.
The current logic of the application does not change.
</pre>
</li>
<li>
<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/jss/-/commit/f5aa7b25bb745c17260497ddba4d9f55581674fe">f5aa7b25</a></strong>
<div>
<span> by Marco Fargetta </span> <i> at 2023-02-23T19:14:21+01:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Add test for connection with postgresql
</pre>
</li>
<li>
<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/jss/-/commit/0c4012e61d0fb921f754cb953a5271a2004c73d3">0c4012e6</a></strong>
<div>
<span> by Marco Fargetta </span> <i> at 2023-02-27T15:38:04+01:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Remove Postgrsql test using ACME
</pre>
</li>
<li>
<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/jss/-/commit/c8340502f84debb71bc4f9d066ea8bd0cc289d93">c8340502</a></strong>
<div>
<span> by Marco Fargetta </span> <i> at 2023-03-13T10:38:49+01:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Fix some Sonar Cloud issues
The method `toString()` does never return `null` and the subclasses should
maintain its original behaviour. Similarly, some syncronized methods were
overrided without the `syncronize` modifier.
Finally, some conditions were not possible.
</pre>
</li>
<li>
<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/jss/-/commit/ae20a54c6f47297ad75b2169f9d07fe02c8d6daa">ae20a54c</a></strong>
<div>
<span> by Marco Fargetta </span> <i> at 2023-03-20T19:02:30+01:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Fix decrypt for PBKDF1
Passwords for PBKDF1 and PBKDF2 in JSS have to be in different format
because they are handled by different nss libraries which work with
different data encoding.
Fix Bug 2115765
</pre>
</li>
<li>
<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/jss/-/commit/419944ed6968cd25b99310ae282dcc9a9db544b6">419944ed</a></strong>
<div>
<span> by Marco Fargetta </span> <i> at 2023-03-27T17:24:14+02:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Removde printStackTrace()
The `printStackTrace()` output should not be used in production because
it can leak information and cannot be disabled.
The method is deleted or converted to log.
Note: some tests and client code still use the method
</pre>
</li>
<li>
<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/jss/-/commit/ae94d977d0acde8938673ad6c4555567c655b6ba">ae94d977</a></strong>
<div>
<span> by Marco Fargetta </span> <i> at 2023-03-28T18:29:58+02:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Fix switch issue
Some `switch` cases are not closed by a break.
Actually, it is not a problem because following cases are safe or not
possible but `break` is added and exception in case of not reachable
case.
</pre>
</li>
<li>
<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/jss/-/commit/1cf9fcc554270207b54c219e175e2c5717e73cc5">1cf9fcc5</a></strong>
<div>
<span> by Marco Fargetta </span> <i> at 2023-03-31T20:30:59+02:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Tidy up some classes in provider crypto package
The change are
- remove some assertions which are already verified in conditions;
- move instance variable to local;
- clean up if else conditions;
- using instanceof with assignment;
- fix signature to java recommendation.
</pre>
</li>
<li>
<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/jss/-/commit/b9565b35ac0133304aeeb96b2024b72443e87cba">b9565b35</a></strong>
<div>
<span> by Marco Fargetta </span> <i> at 2023-04-03T15:12:58+02:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Fix some SonarCloud major bugs
Removed a block of code performing no operations.
Add back the interrupted flag in case of a sleep operation get
interrupted so the JVM behaviour is preserved.
</pre>
</li>
<li>
<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/jss/-/commit/413615d668bbbed34f920bf5bb272b2f0fff5fe4">413615d6</a></strong>
<div>
<span> by Marco Fargetta </span> <i> at 2023-04-03T17:16:33+02:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Deprecate RSAParameterSpec.getKeySize
The class RSAParameterSpec has been modified to extend the standard `java.security.spec.RSAKeyGenParameterSpec` but the method `getKeySize()` has a different capitalisation in the superclass so this was kept for compatibility.
However, all the *JSS* code has been updated to use the superclass method
and there is no use in other *PKI* tools so the old method is not used
and can be removed in the future.
The commit modifying the RSAParameterSpec extending the standard class
is:
https://github.com/dogtagpki/jss/commit/b995847206e21b696c697f1551b0ee61e17f9497
</pre>
</li>
<li>
<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/jss/-/commit/6132a478f1bcc8d415354ba3cbeb8af6b2176a72">6132a478</a></strong>
<div>
<span> by Endi S. Dewata </span> <i> at 2023-04-10T12:57:44-05:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Update version numbers in pom.xml and build test
</pre>
</li>
<li>
<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/jss/-/commit/53c00362a32d7bf6a54837c1ee65193f18d2beb9">53c00362</a></strong>
<div>
<span> by Endi S. Dewata </span> <i> at 2023-04-10T14:08:32-05:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Convert WITHOUT_JAVADOC into WITH_JAVADOC
The WITHOUT_JAVADOC variable in build.sh has been converted
into WITH_JAVADOC for clarity.
</pre>
</li>
<li>
<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/jss/-/commit/6d7fb1c66ca754be75b9a69af50baa4b13852706">6d7fb1c6</a></strong>
<div>
<span> by Endi S. Dewata </span> <i> at 2023-04-10T15:19:42-05:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Update Java.cmake
The javac(), jar(), javadoc(), and link() functions in Java.cmake
have been updated to no longer add targets into CMake's default
build target automatically to provide more control on the build
process.
</pre>
</li>
<li>
<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/jss/-/commit/40c9f2227a88355f659274a0ef0dd7a3e012173f">40c9f222</a></strong>
<div>
<span> by Endi S. Dewata </span> <i> at 2023-04-11T09:54:33-05:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Update javac() to support HEADER_DIR
The javac() function in CMake has been modified to provide an
option to specify where to generate the native header files.
The symkey module has been modified to use this option.
</pre>
</li>
<li>
<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/jss/-/commit/724c7bbb5dde57b0558c572e7e98e96420058bca">724c7bbb</a></strong>
<div>
<span> by Marco Fargetta </span> <i> at 2023-04-11T17:06:40+02:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Clean ASN1 packages
Removed some bugs/code smells from the `org.mozilla.jss.asn1` package.
These include:
- convert `Vector` to `ArrayList`
- remove or convert to real check some `assert` conditions
There are several layout changes made by eclipse but they are in the
javadoc comments.
</pre>
</li>
<li>
<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/jss/-/commit/9872c13427e737aee51684aae20902e292c6da1c">9872c134</a></strong>
<div>
<span> by Endi S. Dewata </span> <i> at 2023-04-11T14:29:02-05:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Move PKI build test into separate file
</pre>
</li>
<li>
<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/jss/-/commit/261d9808cf4576ba8d690aa52fc715a8beff17e0">261d9808</a></strong>
<div>
<span> by Endi S. Dewata </span> <i> at 2023-04-11T14:29:02-05:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Move CA test into separate file
</pre>
</li>
<li>
<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/jss/-/commit/c533fb7bbff737a214a2ed75048dbed63713de3a">c533fb7b</a></strong>
<div>
<span> by Endi S. Dewata </span> <i> at 2023-04-11T16:52:28-05:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Add PKI tools test
A new test has been added to test AES key using PKI tools which
can be used to validate JSS symmetric key library. Tests for
other types of key may be added later.
</pre>
</li>
<li>
<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/jss/-/commit/97d928ee68708eef1c2df26b6527da5d8cd40ac3">97d928ee</a></strong>
<div>
<span> by Endi S. Dewata </span> <i> at 2023-04-11T17:20:12-05:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Update CA test to use the latest builds
</pre>
</li>
<li>
<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/jss/-/commit/a278651055141333a0ce71f1b58084f270f78709">a2786510</a></strong>
<div>
<span> by Endi S. Dewata </span> <i> at 2023-04-12T09:01:17-05:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Add TPS test
A new test has been added to validate TPS token enrollment
which will expand the test coverage for JSS symmetric key
library.
</pre>
</li>
<li>
<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/jss/-/commit/11ecabc9086f8b797b7545356a7b2fb8c7e94677">11ecabc9</a></strong>
<div>
<span> by Marco Fargetta </span> <i> at 2023-04-12T16:56:38+02:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Reintroduce SHA1 algorithm
SHA1 algorithms were removed with the commit
f9d83e27ff6d22c9cefe4a7d1f651498782bb8cb but this generate problem when
dogtag is used on RHEL8 based systems. To solve the problem they are put back in place.
Fix Bug 2182085
</pre>
</li>
<li>
<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/jss/-/commit/427c10e721daeda82d6588742f33ae2ae317e289">427c10e7</a></strong>
<div>
<span> by Endi S. Dewata </span> <i> at 2023-04-12T10:13:10-05:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Update jss.spec to use Maven dependencies
</pre>
</li>
<li>
<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/jss/-/commit/e218f8e771717918f17dcf9eb39596c986f1db64">e218f8e7</a></strong>
<div>
<span> by Endi S. Dewata </span> <i> at 2023-04-12T10:13:10-05:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Add Maven module for symkey
A pom.xml has been added to define Maven module for symkey.
The build test has been added to compare the jss-symkey.jar
created by CMake and by Maven to ensure that they contain
the same files.
For now Maven will only build symkey Java code and SonarCloud
will ignore symkey native code.
</pre>
</li>
<li>
<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/jss/-/commit/8fa6df62f79aab0563b7809db89f8899927acd23">8fa6df62</a></strong>
<div>
<span> by Marco Fargetta </span> <i> at 2023-04-12T18:42:09+02:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Fix native filename
Running `mvn install` generate error for messing package name.
Investigating and checking the code the artificatId has to be the same
of the library generated.
https://stackoverflow.com/questions/25138413/java-jni-maven-native-maven-plugin-how-to-set-shared-library-final-name
https://github.com/mojohaus/maven-native/blob/master/native-maven-plugin/src/main/java/org/codehaus/mojo/natives/plugin/NativeInitializeMojo.java
The install phase is relevant to deploy in the artificat in the local
database and use the artifact as dependency
</pre>
</li>
<li>
<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/jss/-/commit/db58e21493675f795a37138250f57fe7d7ffe637">db58e214</a></strong>
<div>
<span> by Endi S. Dewata </span> <i> at 2023-04-12T13:34:43-05:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Move symkey native code to symkey/src/main/native
</pre>
</li>
<li>
<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/jss/-/commit/733ec27a99659ff367e248b643777b58493dd7d9">733ec27a</a></strong>
<div>
<span> by Marco Fargetta </span> <i> at 2023-04-13T16:11:52+02:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Make maven artifcat usabale
When parent version is managed with a `revision` property in the submodules the
generated artificats will have the `version` field not updated do they
cannot be consumed by other projects. The solution is to add a
plugin transforming the `pom.xml` for the artifact.
References:
- https://maven.apache.org/maven-ci-friendly.html#install-deploy
- https://jeanchristophegay.com/en/posts/maven-unique-version-multi-modules-build/
</pre>
</li>
<li>
<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/jss/-/commit/f339d700e371490da0ef1d33980254857b9a53bb">f339d700</a></strong>
<div>
<span> by Endi S. Dewata </span> <i> at 2023-04-13T09:54:47-05:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Merge jss-symkey.jar into jss.jar
The symkey Java library in jss-symkey.jar has been merged
into jss.jar. The symkey native library will remain in
libjss-symkey.so for now.
The symkey CMake project has been updated to no longer build
the Java library but it will continue the native library. The
symkey Maven module has been updated to build the native
library instead of the Java library.
For now the build.sh will continue to use CMake, but later it
might be changed to use Maven.
</pre>
</li>
<li>
<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/jss/-/commit/52be7df4bbb0c9eb5a1632864175e86839c7974a">52be7df4</a></strong>
<div>
<span> by Endi S. Dewata </span> <i> at 2023-04-13T12:03:45-05:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Ignore .flattened-pom.xml
</pre>
</li>
<li>
<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/jss/-/commit/de36feca5678436b4068b1dc9c1ab6d845beb781">de36feca</a></strong>
<div>
<span> by Endi S. Dewata </span> <i> at 2023-04-13T12:49:54-05:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Remove obsolete reference to jss-symkey.jar
</pre>
</li>
<li>
<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/jss/-/commit/69eee0269619812595f261a8a4aed5e4d47f7c39">69eee026</a></strong>
<div>
<span> by Endi S. Dewata </span> <i> at 2023-04-13T17:36:12-05:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Consolidate top level CMake targets
The top level CMake targets have been consolidated into "java"
and "native" in order to support building Java binaries and
native binaries separately.
</pre>
</li>
<li>
<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/jss/-/commit/7e5ac0ff2f057c4472e8e70f38cb9897b6307cb1">7e5ac0ff</a></strong>
<div>
<span> by Endi S. Dewata </span> <i> at 2023-04-14T09:41:19-05:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Add build.sh --without-java and --without-native
New options have been added into build.sh to support building
Java and native binaries separately.
</pre>
</li>
<li>
<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/jss/-/commit/45dbc1543fc06bc382a2a82d8f39012d26205c6e">45dbc154</a></strong>
<div>
<span> by Marco Fargetta </span> <i> at 2023-04-18T11:35:53+02:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Fix some bugs in org.mozilla.jss.pkix
The main issuees fixed are:
- override of equals and and hash code, (they should be done both)
- check byde read from stream
- removed not possible exceptions
- syntax compliant to Java best practice
</pre>
</li>
<li>
<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/jss/-/commit/a887db72ebe26dadc2c1daca9df7ba27337aeb1f">a887db72</a></strong>
<div>
<span> by Endi S. Dewata </span> <i> at 2023-04-19T12:09:14-05:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Publish to GitHub Maven registry
A new job has been added to build JSS with Maven and publish
the artifacts to GitHub Maven registry. Currently the native
and symkey modules have to be disabled due to a build issue.
The group ID and artifact ID have been renamed to follow the
more commonly used pattern.
</pre>
</li>
<li>
<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/jss/-/commit/808f42762bb63442ed3adfd5bd6346665db5f94f">808f4276</a></strong>
<div>
<span> by Chris Kelley </span> <i> at 2023-04-20T10:47:44+01:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Updating version to v5.4.0
</pre>
</li>
</ul>
<h4 style="margin-top: 10px; margin-bottom: 10px;">
30 changed files:
</h4>
<ul>
<li class="file-stats">
<a href="#354079a72b91a4280407c16a36f47d1986fd85a5">
.classpath
</a>
</li>
<li class="file-stats">
<a href="#05a721ebe3ba0754116825ed1359ff1785f4bbac">
<span class="new-file">
+
.dockerignore
</span>
</a>
</li>
<li class="file-stats">
<a href="#45dd6ae68bbab2aa0c25915703946c41a90426ab">
.github/workflows/build-tests.yml
</a>
</li>
<li class="file-stats">
<a href="#fe77d5d1439f26e353a42bbd38dece2467ff6558">
<span class="new-file">
+
.github/workflows/build.yml
</span>
</a>
</li>
<li class="file-stats">
<a href="#300e83ffb511c2255d6fa445d2d5ab9ac5221ca7">
.github/workflows/code-analysis-pull.yml
</a>
</li>
<li class="file-stats">
<a href="#0efd20854b65fbb9dc77808a85eb8ef282eea6d4">
.github/workflows/code-analysis.yml
</a>
</li>
<li class="file-stats">
<a href="#cc77230dff021a935d4bbcf8a06b71310c221562">
<span class="new-file">
+
.github/workflows/external-application-connection-tests.yml
</span>
</a>
</li>
<li class="file-stats">
<a href="#8689106d550f326ad472a818ab11799eb1f63ffe">
<span class="new-file">
+
.github/workflows/init.yml
</span>
</a>
</li>
<li class="file-stats">
<a href="#b2187c845b4c7703089d25a2365c76aa612505b4">
.github/workflows/known_failures.yml
</a>
</li>
<li class="file-stats">
<a href="#4acb09048a1509dc0c145cd94124306557a9f5f5">
.github/workflows/pkcs11-tests.yml
</a>
</li>
<li class="file-stats">
<a href="#db624a1c44c913dc4357b650289b40b4f3017f7f">
<span class="new-file">
+
.github/workflows/pki-build-test.yml
</span>
</a>
</li>
<li class="file-stats">
<a href="#043a2884f8c091abe1de785578e89de10e5dae72">
<span class="new-file">
+
.github/workflows/pki-ca-test.yml
</span>
</a>
</li>
<li class="file-stats">
<a href="#b942be00021967a6d08f5effdd1123159d59ba73">
.github/workflows/pki-tests.yml
</a>
</li>
<li class="file-stats">
<a href="#982ca828a8ebd164626af77e87d1762e26c1d8a0">
<span class="new-file">
+
.github/workflows/pki-tools-test.yml
</span>
</a>
</li>
<li class="file-stats">
<a href="#41c78cdfdff12c4a101b07b35137b8d117b3b75f">
<span class="new-file">
+
.github/workflows/pki-tps-test.yml
</span>
</a>
</li>
<li class="file-stats">
<a href="#4639989a2b9ca33671669f3e377b9d0308553f80">
<span class="new-file">
+
.github/workflows/publish.yml
</span>
</a>
</li>
<li class="file-stats">
<a href="#a0a4e24f2b814d1f708ec05ef552345379f5334c">
.github/workflows/tomcat-tests.yml
</a>
</li>
<li class="file-stats">
<a href="#a5cc2925ca8258af241be7e5b0381edf30266302">
.gitignore
</a>
</li>
<li class="file-stats">
<a href="#85aef4dd7ac54949c4d8a1fc9fb5fbe3e5867303">
<span class="new-file">
+
.settings/org.eclipse.core.resources.prefs
</span>
</a>
</li>
<li class="file-stats">
<a href="#9a2aa4db38d3115ed60da621e012c0efc0172aae">
CMakeLists.txt
</a>
</li>
<li class="file-stats">
<a href="#6651ddff6eb82c840ced7c1dddee15c6e1913dd4">
Dockerfile
</a>
</li>
<li class="file-stats">
<a href="#6938ebfea762ce0c7ba0c2da2004eb53baa6e9a4">
base/pom.xml
</a>
</li>
<li class="file-stats">
<a href="#49b65c50c8601d2e1935fd1c58ce4a5ed891704a">
base/src/main/java/org/mozilla/jss/CryptoManager.java
</a>
</li>
<li class="file-stats">
<a href="#57b8141f758fdaf71fb44b9cb305a8563885ed99">
base/src/main/java/org/mozilla/jss/JSSProvider.java
</a>
</li>
<li class="file-stats">
<a href="#91fd57fa405539dfee5ef51e57ae2cbdb01c343b">
base/src/main/java/org/mozilla/jss/asn1/ASN1Header.java
</a>
</li>
<li class="file-stats">
<a href="#8f8579f7fcc3d97f02e39d3fa2cb7792ed4f183a">
base/src/main/java/org/mozilla/jss/asn1/BIT_STRING.java
</a>
</li>
<li class="file-stats">
<a href="#8aa50858a0f9e631c07df0ccd181208304ab0229">
base/src/main/java/org/mozilla/jss/asn1/OBJECT_IDENTIFIER.java
</a>
</li>
<li class="file-stats">
<a href="#0349b568cf787909da185991dcb190d9dc5b4705">
base/src/main/java/org/mozilla/jss/asn1/SEQUENCE.java
</a>
</li>
<li class="file-stats">
<a href="#fa6071a6fa602c46b511915250bea8ebe175d269">
base/src/main/java/org/mozilla/jss/crypto/Algorithm.java
</a>
</li>
<li class="file-stats">
<a href="#b38865b5140616740589da3a54388b79567745a7">
base/src/main/java/org/mozilla/jss/crypto/EncryptionAlgorithm.java
</a>
</li>
</ul>
<h5 style="margin-top: 10px; margin-bottom: 10px; font-size: 0.875rem;">
The diff was not included because it is too large.
</h5>
</div>
<div class="footer" style="margin-top: 10px;">
<p style="font-size: small; color: #737278;">
—
<br>
<a href="https://salsa.debian.org/freeipa-team/jss/-/compare/09bccbb8a2c8613b8782c7d9dab55fdbd723a838...808f42762bb63442ed3adfd5bd6346665db5f94f">View it on GitLab</a>.
<br>
You're receiving this email because of your account on <a target="_blank" rel="noopener noreferrer" href="https://salsa.debian.org">salsa.debian.org</a>. <a href="https://salsa.debian.org/-/profile/notifications" target="_blank" rel="noopener noreferrer" class="mng-notif-link">Manage all notifications</a> · <a href="https://salsa.debian.org/help" target="_blank" rel="noopener noreferrer" class="help-link">Help</a>
</p>
</div>
</body>
</html>