<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN" "http://www.w3.org/TR/REC-html40/loose.dtd">

<html lang="en" style='--code-editor-font: var(--default-mono-font, "Menlo"), DejaVu Sans Mono, Liberation Mono, Consolas, Ubuntu Mono, Courier New, andale mono, lucida console, monospace;'>

<head>

<meta content="text/html; charset=US-ASCII" http-equiv="Content-Type">

<title>

GitLab

</title>

<style data-premailer="ignore" type="text/css">

a { color: #1068bf; }

</style>

<style>img {

max-width: 100%; height: auto;

}

body {

font-size: 0.875rem;

}

body {

-webkit-text-shadow: rgba(255,255,255,0.01) 0 0 1px;

}

body {

font-family: var(--default-regular-font, -apple-system),BlinkMacSystemFont,"Segoe UI",Roboto,"Noto Sans",Ubuntu,Cantarell,"Helvetica Neue",sans-serif,"Apple Color Emoji","Segoe UI Emoji","Segoe UI Symbol","Noto Color Emoji"; font-size: inherit;

}

</style>

</head>

<body style='font-size: inherit; -webkit-text-shadow: rgba(255,255,255,0.01) 0 0 1px; font-family: var(--default-regular-font, -apple-system),BlinkMacSystemFont,"Segoe UI",Roboto,"Noto Sans",Ubuntu,Cantarell,"Helvetica Neue",sans-serif,"Apple Color Emoji","Segoe UI Emoji","Segoe UI Symbol","Noto Color Emoji";'>

<div class="content">

<h3 style="margin-top: 20px; margin-bottom: 10px;">

Timo Aaltonen pushed to branch upstream-next at <a href="https://salsa.debian.org/freeipa-team/dogtag-pki">FreeIPA packaging / dogtag-pki</a>

</h3>

<h4 style="margin-top: 10px; margin-bottom: 10px;">

Commits:

</h4>

<ul>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/6eea322ff4727fdd792c22bb121b6d1b2c40cf69">6eea322f</a></strong>

<div>

<span> by Chris Kelley </span> <i> at 2022-05-06T14:05:46+01:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Update version to 11.2.0-0.4.beta3

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/567b9616a1e38a35123c146c3bea6199db8bde43">567b9616</a></strong>

<div>

<span> by Chris Kelley </span> <i> at 2022-05-06T16:14:10+01:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Clean up ConfigurationTest

* Remove unused method parameters and not-thrown exceptions

* The pin, port and subsystem type options are therefore not used, so

are removed also

* Remove unused variables

* Use switch expression</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/b26d94d141abb4175893a9d06ade6380ca348bec">b26d94d1</a></strong>

<div>

<span> by Jack Magne </span> <i> at 2022-05-06T17:43:10-07:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'> Bug 2017514 - Directory authentication plugin requires directory admin password just for user authentication (rhcs-11.0)

    Co-authored-by: Andrew Wnuk <awnuk@purestorage.com>

    Current directory authentication plugin works in two steps:

        it verifies ability to connect to the directory

        it retrieves password from user entry to compare it against password provided by user during enrollment

    Unfortunately in both steps, the directory authentication plugin is using directory admin password.

    It is also not the best security wise solution to retrieve a user's password just for comparison.

    If you would like to preserve two steps approach, then it would be better to

        anonymously access RootDSE in directory (to verify ability to connect to the directory or ignore this step)

        verify if plugin can authenticate as a user, with credential provided during the enrollment (additionally plugin could check user's membership attribute or specified attribute)

    This way you could avoid storing (in CS.cfg) and using directory admin credentials and retrieving user credentials.

    This fix accomplishes the above. Ported to the v10.12 branch.

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/a0ee9bf2ab6519f8c3f41406378bac63ec1e351b">a0ee9bf2</a></strong>

<div>

<span> by Chris Kelley </span> <i> at 2022-05-09T14:45:16+01:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Clean up UserPwdDirAuthentication

* Remove unnecessary semicolon, imports and casts</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/ca52102da6bf199bfa8fa9ee4374ab11cbadf2d3">ca52102d</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2022-05-10T11:42:48-05:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Fix COPR build failure

The .copr/Makefile has been updated to fix COPR build failure

caused by changes in Git 2.35.2:

fatal: unsafe repository (<current dir> is owned by someone else)

https://stackoverflow.com/questions/71901632/fatal-unsafe-repository-home-repon-is-owned-by-someone-else

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/ba2f22a24575d5b78078c4e481d8070b54682234">ba2f22a2</a></strong>

<div>

<span> by Chris Kelley </span> <i> at 2022-05-10T22:02:48+01:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Tidy up in RequestProcessor

* Remove count variable from updateValues() which doesn't get used

* Remove un-thrown exceptions.</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/dc9103df68fb8456e2d9fbc1d8f3c2985008b6e3">dc9103df</a></strong>

<div>

<span> by Chris Kelley </span> <i> at 2022-05-11T17:43:10+01:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Tidy up CAAdminServlet

* Remove un-thrown exceptions

* Simplify if-else statements that return Boolean literals

* Access static fields in a static manner

* Remove unused HttpServletRequest parameters</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/4ffd59243f7571d357295d70e54d256a5054676a">4ffd5924</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2022-05-11T20:38:27-05:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Update version number to 11.3.0-alpha1

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/160f7442f8fa3f7e42953c8d03a71da6d7cfe9bb">160f7442</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2022-05-12T12:18:43-05:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Add issuer param for NSSDatabase.__create_cert()

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/00c5901a1447c4c2c29bb4a7698b55a35ea27545">00c5901a</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2022-05-16T15:51:23+01:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Update NSSDatabase.__create_cert()

The NSSDatabase.__create_cert() has been updated to create

a temporary file to store the cert extension config.

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/a2f54c20ebc23963760941780117ee5325a0fbce">a2f54c20</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2022-05-17T15:10:24+01:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Add NSSDatabase.__create_basic_constraints_ext()

The code that creates the basic constraints extension config has

been moved into NSSDatabase.__create_basic_constraints_ext() such

that it can be reused by __create_cert().

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/4b17b76555211fde3b0f71a39a34874e43cb4145">4b17b765</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2022-05-17T15:10:24+01:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Add NSSDatabase.__create_key_usage_ext()

The code that creates the key usage extension config has been

moved into NSSDatabase.__create_key_usage_ext() such that it can

be reused by __create_cert().

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/b304b432b2742565f782aaf3596fd774c39df18c">b304b432</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2022-05-17T15:10:24+01:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Add NSSDatabase.__create_extended_key_usage_ext()

The code that creates the extended key usage extension config has

been moved into NSSDatabase.__create_extended_key_usage_ext() such

that it can be reused by __create_cert().

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/02e31915c5e72e6d3b0df8a9b77479a1b041fa05">02e31915</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2022-05-17T15:10:24+01:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Add NSSDatabase.__create_ski_ext()

The code that generates the subject key ID extension config has

been moved into NSSDatabase.__create_ski_ext() such that it can

be reused by __create_cert().

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/920b14b7162fffa7f3dba30eefe3c68d5ae48bdf">920b14b7</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2022-05-18T15:35:23+01:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Add NSSDatabase.__create_aki_ext()

The NSSDatabase.__create_aki_ext() has been added to generate

the authority key ID extension config for __create_cert().

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/2c58baeb26c338eb55c4530d71ea23db02749021">2c58baeb</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2022-05-18T15:35:23+01:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Add NSSDatabase.__create_aia_ext()

The NSSDatabase.__create_aia_ext() has been added to generate the

authority info access extension config for __create_cert().

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/bb8be414722a4e7da9f2c09065d986f37628ccd2">bb8be414</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2022-05-18T15:35:23+01:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Update PKISubsystem.temp_cert_create()

The PKISubsystem.temp_cert_create() has been modified to use JSS

(i.e. pki nss-cert-create) instead of NSS (i.e. certutil) to

generate a temporary SSL server cert since certutil is unable to

handle large serial numbers.

Resolves: https://github.com/dogtagpki/pki/issues/3996

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/19ce4b5e3daa1deaa3b971ab06cfab9e330f6cfe">19ce4b5e</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2022-05-18T18:47:16+01:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Fix installation with RSA/PSS

The pki ca-cert-import and pki nss-cert-import CLIs have been

modified to parse the cert data after initializing JSS to ensure

that it works with RSA/PSS.

Resolves: https://bugzilla.redhat.com/show_bug.cgi?id=2083575

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/77242c8f33d89cad1a907c5d00f0d9f5d501b9f0">77242c8f</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2022-05-18T18:47:16+01:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Add test for installing CA with RSA/PSS

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/1d4f51f463997e889e691023c2b14b9dfa74b39a">1d4f51f4</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2022-05-18T18:47:16+01:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Add doc for installing CA with RSA/PSS

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/13e608789a6afa5e4df84af2cd38f2e960f51c2f">13e60878</a></strong>

<div>

<span> by Chris Kelley </span> <i> at 2022-05-19T12:17:58+01:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Add missing @Override annotations</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/6985bb12f8f2f6c4049d1ddc249a8b0a16468fe3">6985bb12</a></strong>

<div>

<span> by Chris Kelley </span> <i> at 2022-05-24T12:57:38+01:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Simplify logic on RequestTransfer and RollingLogFile

* Don't return Boolean literals

* Remove unnecessary else clause</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/1ca4e256e058ef01d29649336c268db7e1e9259e">1ca4e256</a></strong>

<div>

<span> by Chris Kelley </span> <i> at 2022-05-26T14:15:37+01:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Set deactivateDefaultTyping() on JSONSerializer ObjectMapper objects

With this setting activated it is possible for bad actors to create

objects not of the type clazz - e.g. a class that extends clazz - which

could introduce malicious code into the application. Explicitly

disabling it guarantees that only an object of type clazz can be

produced.

The remaining ObjectMapper objects in the code should me migrated to use

this class.

Also throw the more specific JsonProcessingException instead of

Exception.</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/70f08778fa5ac4bfdbfe5f82fadd8fd4226f0cc8">70f08778</a></strong>

<div>

<span> by Marco Fargetta </span> <i> at 2022-06-07T12:18:45+02:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Add SonarCloud analysis action (#4013)

* Add SonarCloud analysis action

* Make cache key a parameter</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/82008840828a318a55ef50690028630622615fdc">82008840</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2022-06-07T14:36:46+01:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Update OCSP test

The latest OpenSSL OCSP client generates additional error

messages when it talks to an OCSP responder that does not

have any CRLs. The OCSP test has been updated to expect the

extra messages.

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/8318ff9d0b40fe60b53ffdd6cd6b48e3fe4c878a">8318ff9d</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2022-06-07T19:37:28+01:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Fix pki ca-cert-request-unassign

The pki ca-cert-request-unassign command is supposed to remove

the owner of a cert request. Previously the server would call

the RequestProcessor.processRequest() to set the request owner

attribute to an empty string. However, this value would violate

the LDAP schema so the command failed. The code has been fixed

to set the owner to null instead such that the attribute will

be removed from LDAP.

Resolves: https://bugzilla.redhat.com/show_bug.cgi?id=1858702

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/d55aad6d520d7230285a6c49f6392690eb1583dd">d55aad6d</a></strong>

<div>

<span> by Chris Kelley </span> <i> at 2022-06-08T13:47:24+01:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Make AuthenticatorData implement JSONSerializer

There is a common utility interface for this, so use it.</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/5db76dc98890057afa7773a0a1899bbabfd167f6">5db76dc9</a></strong>

<div>

<span> by Chris Kelley </span> <i> at 2022-06-08T13:47:47+01:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Make TokenData implement JSONSerializer

There is a common utility interface for this, so use it.</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/f7c831e3cc9e8ec9b7ada1f4ee60e88b573fa435">f7c831e3</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2022-06-08T14:00:25+01:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Fix pki-lint script

Previously the pki-lint script relied on sysconfig.get_path()

to get the RPM installation path of PKI module. In Fedora 36

the method no longer returns the RPM installation path so the

Python test has failed.

To fix the problem the pki-lint script has been modified to

go through sys.path entries to find the PKI module installed

on the system.

https://docs.fedoraproject.org/en-US/fedora/f36/release-notes/developers/Development_Python/

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/24a0f68b822aa17a5a38ce4848ef3c7225cf1f46">24a0f68b</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2022-06-08T14:38:36+01:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Update OpenLDAP clients to use -H option

The latest OpenLDAP clients no longer have the -h option so the

the docs and tests have been updated to use the -H option instead.

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/a30f1b99d66b8e33920c884461a291e6a4aae222">a30f1b99</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2022-06-08T15:18:00+01:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Remove unused SystemConfigService subclasses

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/b8b11e07681f1df245b3a011bc1cc6699660bbe8">b8b11e07</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2022-06-08T15:18:00+01:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Remove unused CMSEngine.createConfigurator()

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/92f787ee88dd0549bc9054ca5d092a4568601eca">92f787ee</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2022-06-08T15:18:00+01:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Remove unused Configurator subclasses

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/04379e99e655566d9172ab9541235055a6cc047f">04379e99</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2022-06-08T15:18:00+01:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Remove unused Configurator constants

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/a658e1354b14f63a000a388074acf1cc5218397e">a658e135</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2022-06-08T20:45:44+01:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Remove unused NSSDatabase.create_self_signed_ca_cert()

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/37560131cfc35b674d12d2083200359fe6cb6383">37560131</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2022-06-08T20:45:44+01:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Update log messages in CACertRequestSubmitCLI

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/86a9d285d845985ddbff6b9f9867094d099dc7f5">86a9d285</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2022-06-08T20:46:22+01:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Update log messages in UGSubsystem

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/d1d5f2be71b653ad2fc74bcf3fe25c37d17a9502">d1d5f2be</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2022-06-09T14:08:29+01:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Fix pylint warnings in pki module

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/952629186bfab3bb57c6abaa36693a9629c743cb">95262918</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2022-06-09T14:08:29+01:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Fix pylint warnings in pki.cli.pkcs12 module

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/29a9a8cdb05bdc972a1a911ec0e5cd69b0d70f40">29a9a8cd</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2022-06-09T14:08:29+01:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Fix pylint warnings in pki.nssdb module

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/a3528366e84f94124bf38b8d5ce351a0df6f72a4">a3528366</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2022-06-09T14:08:29+01:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Fix pylint warnings in pki.pkcs12 module

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/a8fe9f4f598d05ce5e6b617f10506f5670d5ecef">a8fe9f4f</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2022-06-09T14:08:29+01:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Fix pylint warnings in pki.profile module

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/87d07c02ffd2d954cd1fd21326c2c9fd2c38a38e">87d07c02</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2022-06-09T14:08:29+01:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Fix pylint warnings in pki.server module

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/ee77d9d8306d4435f239be0735fee0cdf59690c8">ee77d9d8</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2022-06-09T14:08:29+01:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Fix pylint warnings in pki.server.cli.audit module

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/4f95ffc9472798f8f12c724478e80c3ae146634e">4f95ffc9</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2022-06-09T14:08:29+01:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Fix pylint warnings in pki.server.cli.banner module

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/21b0f688d06414065fab72cc81dfeebf3ba0268d">21b0f688</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2022-06-09T14:08:29+01:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Fix pylint warnings in pki.server.cli.cert module

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/1b266888ec5f39973ee94c83dc87b212bff3f001">1b266888</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2022-06-09T14:08:29+01:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Fix pylint warnings in pki.server.cli.nss module

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/fd8e5f02a295be27be8e0548ee5199a0e5b48593">fd8e5f02</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2022-06-09T14:08:29+01:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Fix pylint warnings in pki.server.cli.nuxwdog module

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/6af42a75b1e71cc256e9e6159e75d3fd13dc0963">6af42a75</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2022-06-09T14:08:29+01:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Fix pylint warnings in pki.server.cli.subsystem module

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/e082a530e77f94ebd44a0aed88ddf4ecfcedd72f">e082a530</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2022-06-09T14:08:29+01:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Fix pylint warnings in pki.server.deployment module

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/70e75f40cfa2a41130c525c77a9218dd5a81b329">70e75f40</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2022-06-09T14:08:29+01:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Fix pylint warnings in pki.server.deployment.pkihelper module

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/13368b9bb3bfd087243ba3c18a722a47aeb5c2d3">13368b9b</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2022-06-09T14:08:29+01:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Fix pylint warnings in pki.server.deployment.pkimanifest module

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/673932a5ea340dda936ef96b3e477954fd9a8644">673932a5</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2022-06-09T14:08:29+01:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Fix pylint warnings in pki.server.deployment.pkiparser module

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/ce18f87df44b64bf9eac9d79609a094ef28d3a19">ce18f87d</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2022-06-09T14:08:29+01:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Fix pylint warnings in pki.server.deployment.scriptlets module

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/2ced95b102ad7c25b77b44516a2f39aa1adad9cc">2ced95b1</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2022-06-09T14:08:29+01:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Fix pylint warnings in pki.server.instance module

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/c96e02c23e82f978ac0eb4f0a15e4bb112d69dde">c96e02c2</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2022-06-09T14:08:29+01:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Fix pylint warnings in pki.server.pkidestroy module

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/80a7591fd89663f0ca84cb3057647635e3628318">80a7591f</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2022-06-09T14:08:29+01:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Fix pylint warnings in pki.server.subsystem module

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/45a601d1b4cb2bc2588cb15caaac8fc701615c19">45a601d1</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2022-06-09T14:08:29+01:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Fix pylint warnings in pki.upgrade module

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/dee60f0bb6d703c43a77a2be299110e6a5d478ab">dee60f0b</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2022-06-09T14:08:29+01:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Fix pylint warnings in pki.util module

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/1857aab9276d2243946ea023da48f1958797a865">1857aab9</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2022-06-09T14:08:29+01:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Fix pylint warnings in upgrade scripts

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/57b063516dd2041f306f940b2efc86a7cc3941df">57b06351</a></strong>

<div>

<span> by Chris Kelley </span> <i> at 2022-06-09T14:54:40+01:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Make remaining classes with to/fromJSON methods implement JSONSerializer</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/2e54172249b0eb146f41602927432336bd1c435d">2e541722</a></strong>

<div>

<span> by Chris Kelley </span> <i> at 2022-06-09T15:40:26+01:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Fix serial type in nss-cert-issue request in nssdb.py

The command expects a str input but we were providing numerical input.

We didn't notice before as this code path had no coverage but now we use

JSS instead of NSS for issuing temporary certs we now have coverage of

this method, unearthing this issue.</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/47b3affc0dd576cb11dc93561cafffe1a25c2e8e">47b3affc</a></strong>

<div>

<span> by Chris Kelley </span> <i> at 2022-06-09T15:52:04+01:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Replace raw use of ObjectMapper with JSONObject

Ensures consistency of mapped JSON objects</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/2056910d0221dadec97bf9627348a23b2608a5f8">2056910d</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2022-06-10T18:16:07+01:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Fix incorrect Obsoletes: for symkey

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/3659ef28c434a100a0a20a13dcb034b27f8572f8">3659ef28</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2022-06-10T18:43:57+01:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Move CTest into %build stage

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/749e38215454b78532959cee3c3f08198b9ab14f">749e3821</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2022-06-10T18:44:01+01:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Update CMake NSS_DEFAULT_DB_TYPE

The CMake NSS_DEFAULT_DB_TYPE variable has been changed into

"sql" by default so it's no longer necessary to specify it

in pki.spec.

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/e1eb44a9628c0ee5226909a66d23127dadb0a202">e1eb44a9</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2022-06-10T18:44:01+01:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Update CMake VERSION variable

Previously the CMake VERSION variable contained both the version

and the release numbers. For clarity the version and the release

numbers are now stored in separate variables, and the combined

numbers are now stored in IMPL_VERSION variable.

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/4e893243d72ad766558c10c907841f5f9c047055">4e893243</a></strong>

<div>

<span> by Chris Kelley </span> <i> at 2022-06-10T23:36:35+01:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Disable access to external entities when parsing XML

This reduces the vulnerability of XML parsers to XXE (XML external

entity) injection.

The best way to prevent XXE is to stop using XML altogether, which we do

plan to do. Until that happens I consider it worthwhile to tighten the

security here though.</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/4a88cdd4f7d23a5286fdf05ee7134339837dd62d">4a88cdd4</a></strong>

<div>

<span> by Chris Kelley </span> <i> at 2022-06-13T13:57:24+01:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Remove redundant type specification</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/6bc4706b1d59fb764f417fcc60f10a9ef9f4489b">6bc4706b</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2022-06-13T15:36:39+01:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Replace %package_option macro

Previously the %package_option macro was used to include

packages into the build or exclude them from the build

depending on whether the build.sh was called using

--with-pkgs or --without-pkgs param. The problem is the

code has become complicated and difficult to maintain.

To simplify the code the macro has been replaced with a

simple %bcond_without, then the build.sh will convert it

into %bcond_with if the package is excluded.

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/0a5e1866847ac3dcc9b8577f014f8f513760bb11">0a5e1866</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2022-06-15T08:05:16-05:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Update build.sh

The build.sh has been updated to parse the spec file using

regular expressions to get the version and release numbers

instead of relying on rpmspec which may not be available on

all platforms.

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/be72be097bb679c2c555beabf75e9e446aa33730">be72be09</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2022-06-15T08:31:39-05:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Update IPA test

The IPA test has been updated to check the certs for DS, PKI,

and HTTPD.

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/4a18916d8dea1a5f68afe67d564359b2e737532c">4a18916d</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2022-06-15T18:06:52-05:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Fix incorrect install() commands

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/a755b94bd525926da755fe5a4ba61549e26352dc">a755b94b</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2022-06-15T18:58:25-05:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Update pki-healthcheck install dirs

Previously pki-healthcheck script and library were installed by

the setup.py into locations which might not match BIN_INSTALL_DIR

or PYTHON3_SITE_PACKAGES depending on the environment.

To avoid the problem the install dirs have been changed into fixed

locations under CMAKE_CURRENT_BINARY_DIR.

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/b5c892185daf3b1b81755661d04d642212d92c78">b5c89218</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2022-06-16T09:03:15-05:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Update log messages in AuthInfoAccessExtDefault

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/9543d4bcb2e13fe2d4dc85d3e881d193a77ad14c">9543d4bc</a></strong>

<div>

<span> by Chris Kelley </span> <i> at 2022-06-16T17:59:03+01:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Fix incorrect record parsing in EnrollDefault

Some refactoring to improve the code caused a regression.

The original code is restored, with the exception of the unnecessary else clause.

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/a1c58a83eeaf92f207fb730efe25f34dcc399ac8">a1c58a83</a></strong>

<div>

<span> by Marco Fargetta </span> <i> at 2022-06-16T22:46:16+02:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Split SonarCloud in two workflows (#4025)

* Split SonarCloud in two workflow

The pull request fork run in a separate workflow triggered by the main

solarcloud workflow.

NOTE: additional tests for pull requests to secondary branch should be

done but these are less frequent

* Move the build for PR forks to the run workflow

* Fix dependencies problems</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/599a9099c88eaf61626105f2a75ba72b5b23a494">599a9099</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2022-06-16T16:32:04-05:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Move com.netscape.cms.crl to pki-ca

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/bb0620f1754ff20e7a8fe4a4e30e45cd0b305665">bb0620f1</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2022-06-16T16:32:04-05:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Move ICMSCRLExtension and ICMSCRLExtensions to pki-ca

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/db97bbf2ab5bfc9599d09ecc01b90da64e5fbf21">db97bbf2</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2022-06-16T16:32:04-05:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Convert IConnector into Connector class

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/204fef64b955dadded6b5d044d38434b8341f26f">204fef64</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2022-06-16T16:32:04-05:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Merge IHttpConnection into HttpConnection

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/be0412964cb0b6264ccd4f83fb23fdc7ef84b240">be041296</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2022-06-16T16:32:04-05:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Merge IKeyRepository into KeyRepository

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/1cd939a2a48e981a7ee7317660a959ab84473088">1cd939a2</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2022-06-16T17:05:23-05:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Merge IKeyRecordList into KeyRecordList

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/6e77f2d4b06529e8a5ee572a3dbb10fde6b16d63">6e77f2d4</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2022-06-16T17:05:23-05:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Merge IKeyRecord into KeyRecord

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/1a63c0b04feb5f18ef6106806db87bb299f59f48">1a63c0b0</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2022-06-16T17:05:23-05:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Merge IRepository into Repository

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/877e8461a131493b8b5912c15c8fbde471b7772f">877e8461</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2022-06-16T17:05:23-05:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Merge IRepositoryRecord into RepositoryRecord

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/fb8670ca0db8b2c9140fa3c1cfeeb478cda52c19">fb8670ca</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2022-06-16T18:50:44-05:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Move FlatFileAuth to pki-ca

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/b7b10fa9efc0543e899e0b3371ff08b226e5a444">b7b10fa9</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2022-06-16T19:16:08-05:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Move constants from EnrollProfile to Profile

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/86f1c9d73953e19cc069c510cc26951548e45159">86f1c9d7</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2022-06-16T19:19:49-05:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Move EnrollProfile to pki-ca

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/47b506a97ef18f3f606068210b1f680a1d93e7ee">47b506a9</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2022-06-16T19:19:49-05:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Move EnrollInput to pki-ca

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/5a67692592f2616f822490e853777e36c5404fdb">5a676925</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2022-06-16T19:19:49-05:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Move EnrollOutput to pki-ca

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/a937d9eaace7cb5f8b37db92f45eddcdaf098587">a937d9ea</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2022-06-16T19:22:50-05:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Move SubsystemGroupUpdater to pki-ca

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/658a292c236383b0c5e21b645146974cd7830ccb">658a292c</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2022-06-16T20:16:29-05:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Merge IProofOfArchival into ProofOfArchival

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/961ef6f051a51d918f4fab5ad9636e6c4c8a6454">961ef6f0</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2022-06-16T20:24:24-05:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Update TempCRLIssuingPointRecord hierarchy

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/66343a3862f20c65af6f9fdfb397d4b90dc277d0">66343a38</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2022-06-16T20:39:38-05:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Merge ICRLIssuingPointRecord into CRLIssuingPointRecord

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/83a1f7698a578fafe9ccdb3aca0c766dc7c76531">83a1f769</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2022-06-17T09:47:29-05:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Refactor CAInstallerService.createCert()

Previously the CAInstallerService.createCert() would get the

request type and CSR from the REST API parameters. Since these

values are actually already stored in the request record in the

CA database, the code has been modified to get the values from

the database instead.

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/881115471153f6af1d450da31674ea471c1ef203">88111547</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2022-06-17T09:47:29-05:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Remove unused fields in SystemCertData

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/2fd97a24e43a5a01144652dc84473b1661dda27c">2fd97a24</a></strong>

<div>

<span> by ckelleyRH </span> <i> at 2022-06-17T15:47:32+01:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Add SonarCloud badge to README.md</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/b9d64edd92c6da0ae9bb38bba1d5df053039d2cc">b9d64edd</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2022-06-17T12:07:20-05:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Update pki.spec and build.sh

The pki.spec has been modified to call build.sh, and the

build.sh has been modified to call CMake. This way build.sh

should work on platforms that do not support RPM, and later

on it would be easier to replace CMake with Maven.

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/16cfccaeaa1f05f29ac8b04b1d455e525f72c021">16cfccae</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2022-06-20T09:10:19-05:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Update docs

The docs have been updated to reflect the latest changes.

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/28fabe09cae9f2cc6fe9412b307573a10816d68c">28fabe09</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2022-06-20T09:11:03-05:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Add Azure pipeline

An Azure pipeline has been added to build and install PKI

on Fedora without RPM. In the future the pipeline will be

expanded to test PKI operations and to run on other

platforms as well.

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/6fdf8dc7f794891faff1fe09370476bd1e79a22f">6fdf8dc7</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2022-06-20T11:42:48-05:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Clean up ConfigurationTest

Most of the code in ConfigurationTest has been removed since

it doesn't actually perform an installation/configuration test.

The remaining code that generates a CRMF request is left intact

for future investigation. It might be possible to use the code

in some tools.

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/05e590be00d79fca1948975f2c34c68792f61bc7">05e590be</a></strong>

<div>

<span> by Chris Kelley </span> <i> at 2022-06-21T13:20:41+01:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Remove legacy acceptance tests</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/53cd7accac25876cd56b306fbee07692ffdc3792">53cd7acc</a></strong>

<div>

<span> by Chris Kelley </span> <i> at 2022-06-21T13:23:30+01:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Remove unnecessary casts</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/46c57840332db0e18e88d6f67424006e71b64e28">46c57840</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2022-06-21T09:19:27-05:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Add build.sh --product-name, --product-id, and --theme options

New build options have been added to customize product name,

product ID, and theme.

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/990c14d5d8e387017aaf1a6bb5da08011392c930">990c14d5</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2022-06-21T09:29:26-05:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Fix missing SKI in CSR

The NSSCertRequestCLI has been modified to provide a public key

to the NSSExtensionGenerator such that it can be used to generate

an SKI extension for the CSR.

The NSSExtensionGenerator.createExtensions() has been extended

to support CSR (with subject key) and cert (with issuer and

request).

The NSSExtensionGenerator.createSKIDExtension() has been modified

to take a subject key instead of PKCS10 object.

The preop.cert.signing.subject_key_id config param is no longer

needed since the value is only used within the same process (i.e.

pkispawn) so it has been removed.

The CA test has been updated to validate pki_req_ski=DEFAULT. The

support for pki_req_ski=<hex> will be restored separately later.

Resolves: https://bugzilla.redhat.com/show_bug.cgi?id=2099312

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/350606574a7b32a934ae505684f25d21cb2e70b5">35060657</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2022-06-21T18:13:23-05:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Update build and install logs

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/6c116bf52f9691a5e7727d087a615f5009474316">6c116bf5</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2022-06-22T10:35:14-05:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Troubleshooting improvement for ExternalProcessKeyRetriever

The ExternalProcessKeyRetriever has been updated to provide

more detailed log messages and to perform proper JsonNode

validations of the result to help troubleshooting.

A new constructor has been added to create a JSONObject from

a String.

https://github.com/dogtagpki/pki/issues/4032

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/1d456ba33e84bab22c7ca4edb238827778e0eff0">1d456ba3</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2022-06-23T14:44:34-05:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Restore support for custom SKI in CSR

The NSSExtensionGenerator.createSKIDExtension() has been updated

to support custom (user-provided) SKI.

The Python code has been updated to transform the hex value from

pki_req_ski into the format required by NSSExtensionGenerator.

The CA test has been updated to use pki_req_ski=<hex>, but for

now the result will need to be validated manually in the CI.

Resolves: https://bugzilla.redhat.com/show_bug.cgi?id=2099312

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/2466f0338457a3d88901362d49b2598440bb9d06">2466f033</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2022-06-24T09:35:46-05:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Add build.sh --python-exec and --python-dir options

New build.sh options have been added to specify the Python

executable and modules locations.

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/6b33e65d585f5684b8fea7f736d838adbe2ffeaf">6b33e65d</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2022-06-24T09:35:46-05:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Add test for PKI CLI in Azure pipeline

The Azure pipeline has been updated to perform basic tests

using PKI CLI (which is partially Python) without building an

RPM. However, for this to work the Python module installation

directory needs to be hard-coded due to changes in F36:

https://docs.fedoraproject.org/en-US/fedora/f36/release-notes/developers/Development_Python/

Currently PKI modules are installed into "purelib" directory.

Inside RPM build environment this directory translates into

/usr/lib/python3.10/site-packages which works just fine.

Outside RPM build environment this directory translates into

/usr/local/lib/python3.10/site-packages, but for some reason

Python could not load modules from this directory.

As a workaround the build command was updated to install the

modules into the same directory used in RPM build environment.

Further investigation might be needed to see if there's a

better solution that works consistently in any environment.

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/8434768362f9b50a04d03eeb8186e5141cd58810">84347683</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2022-06-24T13:18:43-05:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Clean up build logs

The build tool has been modified to show deprecation warnings

in verbose mode only.

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/6088c67c7921e3804efbe491bd82bfc2929bf5c7">6088c67c</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2022-06-24T13:26:36-05:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Fix anchors in CONTRIBUTING.md

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/d3356b8d61804a3e8355e30ebbda9c4e37a58113">d3356b8d</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2022-06-24T13:36:39-05:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Convert IProfileUpdater into ProfileUpdater

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/11c6942ac71f8622bc0cc1beacca523d3f9dfa3e">11c6942a</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2022-06-24T13:43:06-05:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Remove unused Resender.mAuthority

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/55006f4dc01464e172c1da5acd11026995afb364">55006f4d</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2022-06-24T13:43:06-05:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Remove unused HttpConnFactory.mSource

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/20fa4330bccf1b79f471492d8f6798a0652b8d6d">20fa4330</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2022-06-24T13:43:06-05:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Remove unused HttpConnector.mSource

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/4f951298d1a1a0c6789ec98b5d7c48ed52e57833">4f951298</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2022-06-24T13:52:42-05:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Update EnrollProfile.getAuthority() to return CertificateAuthority

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/e0ed581075df99f244c7b2764a607a43be4b40a7">e0ed5810</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2022-06-24T13:52:45-05:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Update CAPublisherProcessor.getAuthority() to return CertificateAuthority

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/6bb027fc877eb2541319abb7b34b9d787f522f3d">6bb027fc</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2022-06-24T15:53:09-05:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Remove unused CMSServlet.getRelPath()

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/78d0c36e36b19bc126d025a79c4368b71607f352">78d0c36e</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2022-06-24T17:49:38-05:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Fix config class hierarchy

Some config classes have been modified to extend ConfigStore

directly.

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/0ec49f62ae6aaa27d2e1dad4bfb2f1029e7d8267">0ec49f62</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2022-06-27T08:06:28-05:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Refactor PolicyAdminServlet

Previously the PolicyAdminServlet.init() contained both CA and

KRA-specific code so the class had to be stored in a common

base/server folder and it could only access CA and KRA objects

indirectly through a generic IAuthority interface which made it

difficult to maintain.

The servlet has been split into CAPolicyAdminServlet and

KRAPolicyAdminServlet which are stored in base/ca and base/kra

folders and have their own init() methods. This way the code can

access CA and KRA objects directly using CertificateAuthority

and KeyRecoveryAuthority classes.

The web.xml files have also been updated to use the new classes.

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/7ac8f66001d5676631a27ef23ddf8615571e859b">7ac8f660</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2022-06-27T12:08:18-05:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Update log messages in EnrollConstraint and EnrollDefault

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/32e8e3371a44d6eefaa3b9b841d712263e0bac07">32e8e337</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2022-06-27T12:38:59-05:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Refactor Profile.init()

The Profile.init() has been updated to take a PluginRegistry param

to reduce the dependency on CMSEngine.

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/94799103e3bd0bb3a4f3527005d1862d5f1cbea2">94799103</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2022-06-27T12:45:12-05:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Add Profile.engineConfig and BootstrapProfile.engineConfig

The Profile and BootstrapProfile have been modified to store the

engine config.

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/7b9719d2b0ca227b956d38d9df8935d64c0c8a89">7b9719d2</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2022-06-27T12:45:12-05:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Add PolicyDefault.engineConfig

The PolicyDefault has been modified to store the engine config.

The mConfig in EnrollDefault and NoDefault has been moved into

PolicyDefault as well.

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/3c137c156cf2057e13fc8f9d1ef8bc2aae5aa1f3">3c137c15</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2022-06-27T13:42:37-05:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Update ProfileUpdater.init()

The ProfileUpdater.init() has been updated to remove the unused

Profile parameter.

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/6489ca15155756a323704a5308e41a639f7fb617">6489ca15</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2022-06-27T14:59:42-05:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Update ProfileAuthenticator.init()

The ProfileAuthenticator.init() has been updated to remove the

unused Profile parameter.

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/dbb7633e386b3fdf53beeb2a8152683912bad9c4">dbb7633e</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2022-06-27T14:59:42-05:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Move request-related Profile constants to Request

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/d35d7b2d77b2e3ac50bac9f33c58273ba2300052">d35d7b2d</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2022-06-27T14:59:42-05:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Move Profile classes to pki-ca

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/14eb3209cadce577f47f6d2a3aba47511cdc0935">14eb3209</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2022-06-27T15:14:53-05:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Replace CMSEngine with CAEngine in pki-ca

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/366a3f33b20e81b1ae8ad1617de3ad6658b1e6eb">366a3f33</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2022-06-27T15:15:50-05:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Replace CMSEngine with KRAEngine in pki-kra

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/c9d64023e4e2173d10a1a329dc9ed7770669b478">c9d64023</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2022-06-28T09:32:43-05:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Add error message for pki ca-profile-add

The pki ca-profile-add has been modified to display an error

message instead of generating an exception if the input file

does not exist.

Resolves: https://bugzilla.redhat.com/show_bug.cgi?id=2015151

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/d407224a084ba3e29df7669553916557540bf3ec">d407224a</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2022-06-28T09:33:26-05:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Remove unused CMSStartServlet

In the past the CMSStartServlet was used to start and shut down

the CMSEngine in each PKI subsystem, but that role has actually

been replaced sometime ago by the ServletContextListener in the

CMSEngine itself, so now the servlet can be removed.

The code in CommandQueue.registerProcess() that checks whether

the currentServlet is not an instance of CMSStartServlet has

been removed since it has always been true (the servlet does

not call this method).

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/733f79d0ab2556fb4ee7942fc50f0768e17cfe05">733f79d0</a></strong>

<div>

<span> by Marco Fargetta </span> <i> at 2022-06-29T17:31:14+02:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Build a single package (#4043)

* Build a single package

The build option --with-pkgs does not work for sub-systems if not the

server package is specified. This will build the server in case it is

needed although only the rpm for the specified packages are generated.

Fix #4039

* Immprove macro expression on subpackage build

* Remove useless comment

* Move the server package inclusion to cmake</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/f4416a6a2bf2b7ae31b0dd61a92bbed76f953e97">f4416a6a</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2022-06-30T08:53:25-05:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Merge SecurityDomainHostService into SecurityDomainService

The SecurityDomainHostService has been merged into

SecurityDomainService to avoid duplicate code errors reported

by SonarCloud.

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/494d1ff06cdc45aec163553c99386ccd8c9756f3">494d1ff0</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2022-06-30T08:53:25-05:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Refactor security domain services

Previously the CA, KRA, and OCSP subsystems would check the

engine's state/config at startup to see if they needed to

create security domain services. This code created a startup

dependency on the engine object and the service availability

could not be changed without restarting the server.

To avoid these issues the subsystems have been modified to

always create the security domain services using subsystem-

specific subclasses. The code that checks the engine's

config has been moved into these classes so they will be

executed when a request comes in. The code that checks the

engine's state has been removed since it's redundant.

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/04f87f811124ca24e88a65c5e3b8c5a07e486bbf">04f87f81</a></strong>

<div>

<span> by Marco Fargetta </span> <i> at 2022-06-30T15:58:22+02:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Override cmake cache (#4045)

Building two subpackages in different runs does not work because cmake

will set the list of packages in the first run and cache it for the

following runs. The patch force to update the list of packages at each run.</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/8d70edece3fdb9286a04b98b64f7d581b08a2d58">8d70edec</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2022-06-30T11:55:25-05:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Move CMSServlet.getCertRecord() to GetBySerial

The CMSServlet.getCertRecord() has been moved to GetBySerial

since it's only used by that servlet.

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/906d548fdfb38eba35a751305779ac7bcf19e38e">906d548f</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2022-06-30T12:43:16-05:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Remove IAuthority.registerPendingListener()

The IAuthority.registerPendingListener() has been replaced with

direct calls to CMSEngine.registerPendingListener().

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/7881e2e6fa95ac0657417e677dd9e4f5082f957e">7881e2e6</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2022-06-30T12:43:57-05:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Remove IAuthority.registerRequestListener()

The IAuthority.registerRequestListener() has been replaced with

direct calls to CMSEngine.registerRequestListener().

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/a15927a1529d93d2b26320c7526fd1d56ca86889">a15927a1</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2022-06-30T12:44:07-05:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Remove ICertificateAuthority.getCAService()

The ICertificateAuthority.getCAService() has been replaced with

direct calls to CAEngine.getCAService().

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/8830e98953ad5c5e88c950be924c902e94cd8210">8830e989</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2022-06-30T12:44:14-05:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Remove ICertificateAuthority.getRequestNotifier()

The ICertificateAuthority.getRequestNotifier() has been replaced

with direct calls to CMSEngine.getRequestNotifier().

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/44e1bf48ea13649574d6b45f0f13075b452423d2">44e1bf48</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2022-06-30T12:44:20-05:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Remove ICertificateAuthority.getRequestListener()

The ICertificateAuthority.getRequestListener() has been replaced

with direct calls to CMSEngine.getRequestListener().

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/c8dd9d7162c1eb85e9712437a2e43959736b9cd7">c8dd9d71</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2022-06-30T12:44:25-05:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Remove ICertificateAuthority.removeRequestListener()

The CertificateAuthority.removeRequestListener() has been

replaced with direct calls to CMSEngine.removeRequestListener().

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/7a140b899d5ed19d869846a43b0552a070040f3e">7a140b89</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2022-06-30T12:44:30-05:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Remove ICertificateAuthority.registerRequestListener()

The ICertificateAuthority.registerRequestListener() has been

replaced by direct calls to CMSEngine.registerRequestListener().

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/e79cdb8e3636c52eea31cccecb1bae4869bb8504">e79cdb8e</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2022-06-30T12:49:09-05:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Remove unused methods in CertificateAuthority

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/030d489e3667189554a6edfe2a09d6f170ab8bbd">030d489e</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2022-06-30T16:13:58-05:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Refactor LdapRule.init()

The LdapRule.init() has been modified to take mapper and

publisher instances instead of a PublisherProcessor object.

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/87f645d10c699ac93fdf135f8e8e531196607d49">87f645d1</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2022-06-30T16:19:19-05:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Move some PublisherProcessor constants to LdapRule

The constants in PublisherProcessor that are only used by

LdapRule have been moved to LdapRule.

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/19711b972130c44faa537f327890fb58f98aa661">19711b97</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2022-06-30T16:24:50-05:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Move publishing classes to pki-ca

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/a47ed00baf5dbc7719b0266b121c41267e238d66">a47ed00b</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2022-06-30T16:45:43-05:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Move com.netscape.cms.publish.publishers to pki-ca

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/b3d7ae7bca37ba20f80fef5827c59b953ca519db">b3d7ae7b</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2022-06-30T16:45:43-05:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Move com.netscape.cms.publish.mappers to pki-ca

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/5d4d8011186efd40ba95f74925617aff3ab1cd77">5d4d8011</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2022-06-30T16:45:43-05:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Move com.netscape.cmscore.ldap to pki-ca

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/8d76e26b8ee1105caf6e5c2e1278fff2b0e7f357">8d76e26b</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2022-06-30T16:45:43-05:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Move RegistryAdminServlet to pki-ca

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/b66b2994b6402b7c46c567bc578b4e5e8f622687">b66b2994</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2022-06-30T16:45:43-05:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Move policy classes to pki-ca

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/e0c48baaa21fd5ee011bfdad2866136c50864803">e0c48baa</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2022-07-06T10:13:24-05:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Remove non-functional cache for build dependencies

The cache for build dependencies in the CI was originally added

in 66a6e594ae0e89e0d0411f78d2ac7c716f7cc9e7 to reduce build time

but it never worked properly so it has been removed.

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/5bc2aca0c777704d004894a3240a79b818655613">5bc2aca0</a></strong>

<div>

<span> by Fraser Tweedale </span> <i> at 2022-07-07T09:18:43+10:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>PKIService: add more general variants of resolveFormat

PKIService.resolveFormat is used to check a media type, or list of

media types (possibly including wildcards) against the default list

of content types understood and produced or processed by Dogtag.

The current variants compare the parameter against a hardcoded list

of supported content types.  However, it would be useful to also

provide general variants that allow the caller to specify both the

candidate type(s) and the valid/accepted types.  This commit adds

those variants.

Related: https://github.com/dogtagpki/pki/issues/3297

Signed-off-by: Fraser Tweedale <ftweedal@redhat.com>

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/70496404fb32063c76d5c7f545b12fbe9ed45ce4">70496404</a></strong>

<div>

<span> by Fraser Tweedale </span> <i> at 2022-07-07T10:48:55+10:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>cli: handle t.getCause() == null in exception handler

It is possible that the cause of a ProcessingException is not set.

In that case, t.getCause() returns null.  As a consequence,

handleException() throws an unhandled NullPointerException.

Check that the cause Throwable is non-null before "drilling down" to

it.

Signed-off-by: Fraser Tweedale <ftweedal@redhat.com>

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/536b9923470beab9c543c3c8d21111e277a845c2">536b9923</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2022-07-07T11:15:26-05:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Move ACL classes into pki-server

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/f99cb9f6fc06dd040e98be664e9f48caa57d1c15">f99cb9f6</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2022-07-07T11:15:28-05:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Merge IACLEntry into ACLEntry

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/f42b0dc4d631f2242a30e310d11676211f1cf433">f42b0dc4</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2022-07-07T11:15:31-05:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Merge IACL into ACL

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/0eaee9dd469d391e73900181249dd705d7346d08">0eaee9dd</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2022-07-07T11:15:34-05:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Merge IRemoteAuthority into RemoteAuthority

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/57259630bf89bbe85be191d8fe464eb9c691ccac">57259630</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2022-07-07T11:15:36-05:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Merge IRequestEncoder into HttpRequestEncoder

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/c7411261116cd8efeba4baffafaed853ef96baf0">c7411261</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2022-07-07T11:15:41-05:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Move com.netscape.certsrv.template into pki-ca

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/b4539f231426dd8f18800203c117054bcc92e4f3">b4539f23</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2022-07-07T11:15:43-05:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Move com.netscape.certsrv.pattern into pki-ca

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/d691f9e55aa14bc95cdee9de755cb967986cbf4c">d691f9e5</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2022-07-07T16:19:05-05:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Move ISharedToken into pki-server

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/001d0549041b2c9fe2cd2f3639d11a29e8ba1a10">001d0549</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2022-07-07T16:20:29-05:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Move IAccessEvaluator into pki-server

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/4362ad6418ae27a02badd2e58f4a705c669253c4">4362ad64</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2022-07-07T16:20:29-05:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Remove duplicate AuthCredentials

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/a7607a8c09c5fd4517634fceb5ece5e54ad1e8ae">a7607a8c</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2022-07-07T16:20:29-05:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Merge IAuthCredentials into AuthCredentials

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/8b0c2c85175c8685682f33e0f778c1f880c8651d">8b0c2c85</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2022-07-07T17:18:58-05:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Update ISharedToken.getSharedToken() to take AuthToken

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/04d8af02b64f10d9423a0125ad9dde59737fcd09">04d8af02</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2022-07-07T17:27:35-05:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Update ExternalAuthToken to extend AuthToken

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/c57074b55e98391a070f3e23c56f51a88e5aa193">c57074b5</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2022-07-07T17:32:22-05:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Merge IAuthToken.set() into AuthToken

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/8de7111fec8661ac5a0b8a250c0c043224a83238">8de7111f</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2022-07-07T20:24:06-05:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Merge IAuthToken.getInByteArrayArray() into AuthToken

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/8752b5fe665b87adcbf3ed7bccbefdeccf52e9ca">8752b5fe</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2022-07-07T20:24:10-05:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Merge IAuthToken.getInCertificates() into AuthToken

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/6e49c530128e17bd96e065d2376e0ea956d846dd">6e49c530</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2022-07-07T20:24:10-05:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Merge IPKIProcessor into PKIProcessor

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/61fdd18937113bc27a94a2e2a156e2fa047b9efe">61fdd189</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2022-07-07T20:24:10-05:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Update PKIProcessor to use AuthToken

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/563f9e6a2c832172cf4bcdb63d66cc775240000c">563f9e6a</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2022-07-07T20:24:10-05:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Update HashAuthentication.mData to use AuthToken

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/7689b4153db93182a8c805f16514c1439d79f5d0">7689b415</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2022-07-07T20:24:10-05:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Update PKIPrincipal.authToken to use AuthToken

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/df7e14e16bfa3c080bf7a3991c137e1061321daa">df7e14e1</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2022-07-07T20:24:10-05:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Update AuthManager.authenticate() to return AuthToken

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/c6664c1752414a4c9f4881c5911b9ea08baf4679">c6664c17</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2022-07-07T20:24:10-05:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Update AuthSubsystem.authenticate() to return AuthToken

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/613900a94f91e46beda8a54c94a675514f45c43d">613900a9</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2022-07-07T20:24:10-05:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Update CMSServlet.authenticate() to return AuthToken

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/dd6a58bf6e9a0cbb407dcf958d8f244d17c0ff8f">dd6a58bf</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2022-07-07T20:24:10-05:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Update CAProcessor.authenticate() to return AuthToken

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/e5f7151b125e07cc7989dfbc5832e3df6a319759">e5f7151b</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2022-07-07T20:24:10-05:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Update CRSEnrollment.authenticate() to return AuthToken

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/a3fa0f94cce7d31fdd402dc05feaff15b918b618">a3fa0f94</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2022-07-08T10:48:04-05:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Update Maven project

New pom.xml files have been added to define Maven modules

for PKI. The dependencies have also been updated to match

the available packages on Fedora.

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/9503bd0128bc4ce6ed61699f8061e0314713e2e8">9503bd01</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2022-07-08T10:48:04-05:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Update build test

The build test has been updated to build PKI with Maven and

compare the build artifacts with the original CMake build

artifacts.

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/a9616e2c695efa594120558dba6c41e0217d5fab">a9616e2c</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2022-07-08T10:52:14-05:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Merge pki-cmsbundle.jar into pki-cms.jar

It's not clear why the message bundles were originally stored

separately in pki-cmsbundles.jar, but that doesn't seem to be

needed anymore. To simplify the packaging the pki-cmsbundle.jar

has now been merged into pki-cms.jar.

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/3157e6495dae2f359ef96cea45d4eb182d724641">3157e649</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2022-07-08T13:50:20-05:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Clean up TPS tests

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/228d0883454f79e3bc600a014e2cdd218137c966">228d0883</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2022-07-11T17:03:29-05:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Fix missing dependency on jss-symkey.jar

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/b81eb0c3359c7d191aab9657f9716944777e3eba">b81eb0c3</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2022-07-11T18:01:36-05:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Update Request ext data to use AuthToken

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/cefd382b2e583ed3ec35f15f55d1d04efaccbf10">cefd382b</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2022-07-11T18:01:46-05:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Update CMSServlet.authorize() to take AuthToken

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/0920111dc82b9811d71c9a7bc5d561ff7036e874">0920111d</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2022-07-11T18:02:41-05:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Update CAProcessor.authorize() to take AuthToken

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/d937237f64b01f8b06b07c992bd1ff31efd12f37">d937237f</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2022-07-11T18:02:41-05:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Update AuthzSubsystem.checkRealm() to take AuthToken

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/a39fa3bfe860cdaf2cb759e7356524a04814c4bc">a39fa3bf</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2022-07-11T18:03:07-05:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Update IAuthzManager.authorize() to take AuthToken

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/9f35728446bd5fc0b41e70c2a058d57bc619423a">9f357284</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2022-07-11T18:05:16-05:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Update Profile.submit() to take AuthToken

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/05433c35975c8c5742ffd68eae7d83c0c811b116">05433c35</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2022-07-11T18:08:19-05:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Update ProfileAuthentica.populate() to take AuthToken

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/7f073626a218a3ebe15566975d486087f3a87b82">7f073626</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2022-07-11T18:11:29-05:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Update CMCUserSignedAuth.verifySignerInfo() to return AuthToken

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/97221023a01d4fafb9140881605df935ddf3f7f9">97221023</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2022-07-11T18:14:05-05:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Update SubjAltNameExt to use AuthToken

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/1d85f994560236f0a3d89557de3ca9c5f7afea72">1d85f994</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2022-07-12T12:53:53-05:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Update pki nss-key-create/find to support AES

The pki nss-key-create command has been updated to support

creating AES keys. The pki nss-key-find command has been

updated to include symmetric keys in the result. A new test

has been added to validate these changes.

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/0f18146b86baf9fe0b06f204c4f63344092290c1">0f18146b</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2022-07-12T13:15:07-05:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Clean up pki-server ca-cert-remove

The pki-server ca-cert-remove has been modified to use

CertificateRepository instead of direct LDAP connection.

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/3ecb3ab96b04fc7af53da27e044369d80eb3932c">3ecb3ab9</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2022-07-12T15:39:43-05:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Fix key type validation

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/77fd08d7f46b5808adede59342527403378c1608">77fd08d7</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2022-07-12T15:44:52-05:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Update IAccessEvaluator to use AuthToken

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/51b19238da17db58c47dd3261ead238226ccd94c">51b19238</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2022-07-12T15:57:21-05:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Move remaining IAuthToken methods into AuthToken

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/4394a3992872b78d4d47a627b6655d4a98a050e2">4394a399</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2022-07-12T16:00:48-05:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Move IAuthToken constants into AuthToken

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/c7441fde85c146b24c36c2663513990a2ebe1098">c7441fde</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2022-07-12T16:56:48-05:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Merge IAuthToken into AuthToken

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/2e7c342cc4d76540afcd3203ea73f6c85c349a4e">2e7c342c</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2022-07-12T17:13:08-05:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Add getters/setters for CMSEngine.id/name

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/3b3c48ad4004278413c4d12222c33b3630dac6e5">3b3c48ad</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2022-07-12T17:13:13-05:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Rename ACMEEngine.name to id

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/d745b39015f16dc4689592162e1f8f50f171082a">d745b390</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2022-07-12T17:13:13-05:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Clean up CMSEngine.start()

The code that stores the CMSEngine instance and registers a

PKIRealm has been moved out of CMSEngine.start().

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/4cc8264fcc375ba89a3749f883ba09597c3a96cf">4cc8264f</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2022-07-13T08:32:28-05:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Move PKICertImport into base/tools

PKICertImport is part of pki-tools package so the sources have

been moved into base/tools.

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/68ddbcb81f9d0012df0136c8ca037f03143bdc9f">68ddbcb8</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2022-07-13T08:35:59-05:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Update pki nss tests

The pki nss tests for RSA, EC, and HSM have been updated to

validate pki nss-key-create/find by creating a new key first

then use the key to issue a certificate.

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/39e6feb90a311082507ea8ae8c8316bcd2a85173">39e6feb9</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2022-07-13T08:46:02-05:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Remove obsolete references to IAuthToken

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/f4aeb60346d59d10d2ae3b213ba407b4df9dbeaa">f4aeb603</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2022-07-13T12:15:58-05:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Add WebListener classes

Previously the engine classes were marked as WebListeners so the

the engine instances would be created and destroyed automatically

by Tomcat. However, this also means that it's not possible to

customize the engine using a custom class.

To avoid the problem, new WebListener classes have been added

which will explicitly create and destroy the engine instances.

This way it will be possible to add a config parameter that

will specify the custom engine class in the future.

Note: Currently the ACMEEngine does not inherit from CMSEngine

so the ACMEWebListener cannot inherit from PKIWebListener either.

In the future it might be possible to merge these classes.

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/346de07e1d5b5a38d5e1f879209a2ccdc520a851">346de07e</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2022-07-13T12:31:00-05:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Fix validation error in pki nss test for HSM

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/9fc7717f1940d8922324107b071688cba64df664">9fc7717f</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2022-07-13T14:30:18-05:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Replace CMSEngine with CAEngine in pki-ca

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/8cd91c1d43392056cdd31ac1be2b78b82e3f823f">8cd91c1d</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2022-07-13T19:00:48-05:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Update CAEnrollDefault.getCAKeyIdentifier() to take X509CertImpl

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/24dab1f9940593391079a774dcc649edf41ebb72">24dab1f9</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2022-07-13T19:01:31-05:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Update AuthorityKeyIdentifierExtDefault.createExtension() to take KeyIdentifier

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/bfe475f276daee05038af8acb3bd2f66e76e1c10">bfe475f2</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2022-07-13T20:09:51-05:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Remove ICertificateAuthority.noncesEnabled()

The ICertificateAuthority.noncesEnabled() has been replaced with

direct calls to CAEngine.getEnableNonces().

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/c40eddab4868e566f67ac289266c3d079495eb5d">c40eddab</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2022-07-13T20:10:13-05:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Remove ICertificateAuthority.allowExtCASignedAgentCerts()

The ICertificateAuthority.allowExtCASignedAgentCerts() has been

replaced with direct calls to CAEngine.getAllowExtCASignedAgentCerts().

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/0c54a65895202b42abb5e74fcc722ce49f1c40e3">0c54a658</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2022-07-13T20:13:31-05:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Remove ICertificateAuthority.getPolicyProcessor()

The ICertificateAuthority.getPolicyProcessor() has been replaced

with direct calls to CAPolicy.getPolicyProcessor().

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/9793d3901691ae6bb767a2cec65c6e9cc993566a">9793d390</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2022-07-13T20:17:15-05:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Remove ICertificateAuthority.publishCRLNow()

The ICertificateAuthority.publishCRLNow() has been replaced with

direct calls to CRLIssuingPoint.publishCRL().

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/ddbee9f7407f98c43c466d83d40076c0fa9774dd">ddbee9f7</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2022-07-13T20:20:51-05:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Remove unused ICertificateAuthority.updateCRLNow()

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/ae4e234888b7a25e7371f3a04c5a76eba972eb4e">ae4e2348</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2022-07-13T20:22:57-05:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Remove unused ICertificateAuthority.getIssuanceProtCert()

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/60b66c37a787979956680465b00e7d91756421bd">60b66c37</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2022-07-13T20:26:33-05:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Remove ICertificateAuthority.getIssuanceProtPubKey()

The ICertificateAuthority.getIssuanceProtPubKey() has been replaced

with direct calls to CAEngine.getIssuanceProtectionPublicKey().

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/b01ca9bcc2f1d5faad3ff7e15861d8f0063c0bb1">b01ca9bc</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2022-07-14T11:18:19-05:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Add SigningUnitConfig

The SigningUnitConfig class has been added to encapsulate the

config params for CA, OCSP, and CRL signing units. The SigningUnit

classes have been updated to use this class.

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/f5f183cde87b5d3a370df50efd888a015a4462b5">f5f183cd</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2022-07-14T15:59:50-05:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Replace EngineConfig with CAEngineConfig in pki-ca

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/7f7ca83ad2ae26c18fbfb6d36347675526877790">7f7ca83a</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2022-07-14T16:00:33-05:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Replace EngineConfig with KRAEngineConfig in pki-kra

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/c0f541e1f93ea8e214bc89125b02f5f5cd7f41c0">c0f541e1</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2022-07-14T16:04:26-05:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Replace EngineConfig with OCSPEngineConfig in pki-ocsp

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/db3d14e98e5fd5770e515adeaba05041b7c3f850">db3d14e9</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2022-07-14T16:04:26-05:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Replace EngineConfig with TKSEngineConfig in pki-tks

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/9e03d25b97078c3b6af3e95681e65515c9907ec1">9e03d25b</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2022-07-14T16:04:26-05:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Replace EngineConfig with TPSEngineConfig in pki-tps

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/571c4d80910e479ec75a56c7aca8b17f355ff37d">571c4d80</a></strong>

<div>

<span> by Fraser Tweedale </span> <i> at 2022-07-15T08:45:20+10:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>AuthorityService: recognise .../authorities/host-authority/(chain|cert)

The LWCA REST API recognises the special identifier "host-authority"

in the getCA method, as well as as a parameter in some other methods

(e.g. nominating the parent CA when creating a new LWCA).  However,

"host-authority" is not recognised when retrieving the certificate

or certificate chain of a CA.  The following resources respond with

400 Bad Request because "host-authority" is not a UUID:

   /ca/rest/authorities/host-authority/(chain|cert)

Update these resources to recognise "host-authority" as referring to

the primary CA in the instance.

As well as being a general improvement to the API, this work was

undertaken specifically to make cert chain retrieval easier for the

EST service.

Related: https://github.com/dogtagpki/pki/issues/3297

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/2475fdf9b640d3a766edf76cbd2340fdbd7dc3d8">2475fdf9</a></strong>

<div>

<span> by Fraser Tweedale </span> <i> at 2022-07-15T08:45:34+10:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>AuthorityClient: add getChainPEM method

Extend AuthorityClient with a method to retrieve the certificate

chain of a LWCA.

This enhancement is required by the EST feature.

Related: https://github.com/dogtagpki/pki/issues/3297

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/56e41d23690bb69abca638d51b95e9d28734b8a0">56e41d23</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2022-07-15T09:05:29-05:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Add offline support for CAValidityDefault

Previously the CAValidityDefault could only be used inside the

server since it got the signing cert from the signing unit object

which was only available if the server was running.

To improve its usability the code has been modified to get the

signing cert from the signing unit config if it's running outside

of the server, so it no longer needs the signing unit object.

The SigningUnitConfig.getFullName() has been added to get the

signing cert fullname like in CASigningUnit.init().

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/345ebb0483c954b594186cfb675f4aa197891edb">345ebb04</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2022-07-15T15:48:44-05:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Fix missing console build option

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/6e4375d21dd1481eeaf41525ef77e7f213336276">6e4375d2</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2022-07-15T15:48:46-05:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Rename base/console/templates to base/console/bin

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/58af54d0ca560105896054744a51b03159b467e2">58af54d0</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2022-07-18T10:00:21-05:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Add offline support for AuthorityKeyIdentifierExtDefault

Previously the AuthorityKeyIdentifierExtDefault could only be used

inside the server since it got the signing cert from the signing

unit object of a certificate authority (identified by its ID) which

was only available if the server was running.

To improve its usability the code has been modified to get the

signing cert from the signing unit config if it's running outside

of the server, mainly for installation. Since there will be only

one certificate authority during installation (the host CA), this

is not going to be an issue.

The CAValidityDefault.getSigningCert() has been moved into

EnrollDefault so that it can be reused. The code has also been

modified to optionally take a certificate authority ID.

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/47015a9b880ab7ba6b2a82f76ca264dbc5a57e32">47015a9b</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2022-07-18T14:18:01-05:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Update CryptoUtil.decodeKeyID()

The CryptoUtil.decodeKeyID() has been updated to handle key IDs

that start with "0x".

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/a5e9e8df7b457a8d595f6512022855b9c5f2376f">a5e9e8df</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2022-07-19T09:07:09-05:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Add offline support for AuthInfoAccessExtDefault

Previously the AuthInfoAccessExtDefault could only be used inside

the server since it got the port number for the OCSP URL from the

engine object, which obtained the port from the config files (see

CMSEngine.configurePorts()) on startup.

To improve its usability the code has been modified to get the

port number directly from the config files if it's running outside

of the server.

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/92b918ca075e0578e4bbb77ad3f66247e7b08132">92b918ca</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2022-07-19T09:10:23-05:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Remove EnrollProfile.getAuthority()

The EnrollProfile.getAuthority() has been replaced with direct

calls to CAEngine.getCA().

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/9044bc195b4ceebb7a03092abad1ccf98bc73f3f">9044bc19</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2022-07-19T09:10:23-05:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Remove EnrollProfile.getIssuerName()

The EnrollProfile.getIssuerName() has been replaced with direct

calls to CertificateAuthority.getX500Name().

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/a3d2648d18441f9dd61bc01277ce58b16b337ba1">a3d2648d</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2022-07-19T09:10:23-05:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Remove CertificateAuthority.getDefaultValidity()

The CertificateAuthority.getDefaultValidity() has been replaced

with direct calls to CAEngine.getDefaultCertValidity().

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/426533667c306479666544ebce366e9c1563a235">42653366</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2022-07-19T09:10:23-05:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Clean up CertificateAuthority.getCertificateRepository()

Calls to CertificateAuthority.getCertificateRepository()

in pki-ca have been replaced with direct calls to

CAEngine.getCertificateRepository().

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/fe4f5801085b9c3ee93eed488654a9ef0dce2caf">fe4f5801</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2022-07-19T17:01:10-05:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Fix AuthInfoAccessExtDefault.getBuiltinOCSPPort()

The AuthInfoAccessExtDefault.getBuiltinOCSPPort() has been

modified to check for null or empty proxy.unsecurePort.

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/6dbc9b9f7b348d94e8a24b8b4e2e70b4d7331bea">6dbc9b9f</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2022-07-19T19:24:30-05:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Merge ICRLIssuingPoint into CRLIssuingPoint

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/430b36920fec36c16027076f1b0f7c2e119faa89">430b3692</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2022-07-19T19:32:58-05:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Remove CertificateAuthority.getReplicaRepository()

The CertificateAuthority.getReplicaRepository() has been replaced

with direct calls to CAEngine.getReplicaIDRepository().

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/44c7cd5857730825cf5b101227b4e5d1431ddafe">44c7cd58</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2022-07-19T19:42:45-05:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Move ChallengePhraseAuthentication constants to Request

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/2e4cdf7be25d2a9c0fe738f43dc45d61cf972c3b">2e4cdf7b</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2022-07-20T10:19:55-05:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Add pki-server ca-cert-create

The CAInstallerService.createCert() has been converted into

pki-server ca-cert-create CLI. The CLI provides a way to create

a system certificate without the server running, which would be

useful for system recovery.

The installer has been updated to call CASubsystem.create_cert()

which will call the CLI.

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/c50cbcdd8b4cfa1aedae07c5454b8a08451d6185">c50cbcdd</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2022-07-20T18:23:36-05:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Remove unused CAInstallerService.initSubsystem()

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/fc0699e7d01bcbe44c082fb79cace158e47a06d6">fc0699e7</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2022-07-20T18:23:36-05:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Move CRL methods in ICertificateAuthority to CertificateAuthority

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/e98bd6cdff9b5d2fd60a650f6c48f309d9a8a4b5">e98bd6cd</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2022-07-20T18:23:36-05:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Add CRLConfig

The CRLConfig has been added to encapsulate the config params

for CRL, replacing the generic ConfigStore.

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/56c8e250d1b2f831884504e912d49250c4e0cfae">56c8e250</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2022-07-20T18:23:36-05:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Add CRLConfig.getCRLIssuingPointConfig()

The CRLConfig.getCRLIssuingPointConfig() has been added to

get the CRL issuing point config params.

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/5111b771e887924a173147ffb7b9242f9dd516da">5111b771</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2022-07-20T19:13:50-05:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Update CRLIssuingPoint.init()

The CRLIssuingPoint.init() has been updated to take

CertificateAuthority and CRLIssuingPointConfig params.

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/6f99946de9f9bc3611d30f7e0f21ccab8c17d356">6f99946d</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2022-07-20T19:14:04-05:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Update log messages in LdapCaSimpleMap.formDN()

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/3f2446aaded538f9f31f15483fe9070e305e7a5f">3f2446aa</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2022-07-20T19:14:04-05:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Clean up file-based CRL publishing test

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/358d0dc0eb23fecd17530e13e6fe343043c83c8a">358d0dc0</a></strong>

<div>

<span> by Chris Kelley </span> <i> at 2022-07-21T12:32:25+01:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Run shellcheck as GitHub action in PKI CI

* Rename sonarcloud.yml to code-analysis.yml, add any additional future

linters/scanners into this workflow.

* Temporarily fail only on error, when errors have been fixed remove

that and fix the warnings too.</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/3081b35cdad6a564bc1351591fd0f473c5438425">3081b35c</a></strong>

<div>

<span> by Chris Kelley </span> <i> at 2022-07-21T16:49:17+01:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Fix shellcheck errors in pki

Ignore the legacy tests.</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/8ae0690dd92f57c007fd5d9ae3148feb2cc43272">8ae0690d</a></strong>

<div>

<span> by Chris Kelley </span> <i> at 2022-07-21T17:01:32+01:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Remove legacy dogtag acceptance tests we no longer use</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/5050685df5a9d647f521a9776902ee6aa07c6864">5050685d</a></strong>

<div>

<span> by Chris Kelley </span> <i> at 2022-07-21T17:17:31+01:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Tidy bash in build.sh

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/f63efd21162a8d97abab9586715e0aafd4c06e23">f63efd21</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2022-07-21T16:51:33-05:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Replace ICertificateAuthority in pki-ca with CertificateAuthority

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/e7bbb37ab7ea5c1daa7a74e087c3a5e03224942b">e7bbb37a</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2022-07-21T16:51:40-05:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Move lightweight CA methods in ICertificateAuthority to CertificateAuthority

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/743c9f9e8200f66f53d30afa85e70d21040e8cef">743c9f9e</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2022-07-21T16:51:40-05:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Move OCSP methods in ICertificateAuthority to CertificateAuthority

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/ffcf78216b5e316cd8a01408000daa8c9f2e778a">ffcf7821</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2022-07-21T16:51:40-05:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Move serial number methods in ICertificateAuthority to CertificateAuthority

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/7af983187cf19e1060af2fcb82f57c6bde9dd904">7af98318</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2022-07-21T16:51:40-05:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Move algorithm methods in ICertificateAuthority to CertificateAuthority

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/8a089da64909140441e35e5b2785af968e080e47">8a089da6</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2022-07-21T16:51:40-05:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Move signing methods in ICertificateAuthority to CertificateAuthority

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/a09be812e0c5a2f178b514704e2bd818dea89552">a09be812</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2022-07-21T16:51:40-05:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Move cert methods in ICertificateAuthority to CertificateAuthority

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/734bf0432fb08eaab05a1fe2948ca62a23d8b4fb">734bf043</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2022-07-21T16:51:40-05:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Move CA-only methods in ICertificateAuthority to CertificateAuthority

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/3ea5209e1db8566970fdcb1964b3af60efc09a0e">3ea5209e</a></strong>

<div>

<span> by Marco Fargetta </span> <i> at 2022-07-22T09:59:29+02:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Rebase to master before analyse the pull request (#4069)

* Rebase to master before analyse the pull request

* Fix remote name</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/65cc1f34a911975f631cc650c8c349794657e42c">65cc1f34</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2022-07-22T11:24:14-05:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Add CRLIssuingPointExtensionsConfig

The CRLIssuingPointExtensionsConfig has been added to encapsulate

the config params for CRL issuing point extensions.

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/c94add30ed1975f8dcf1d618639bbc86a69488a5">c94add30</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2022-07-22T12:22:47-05:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Update file-based CRL publishing test

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/3083301413e9d9056bddc82c7fc9283a02412869">30833014</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2022-07-22T12:23:00-05:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Clean up OCSP test

The OCSP test has been updated to parse command outputs and store

the values into variables for clarity.

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/14dcbe64ff972b33652532533ac86814d7a564aa">14dcbe64</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2022-07-22T12:23:06-05:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Update standalone OCSP test to use separate CA

The standalone OCSP test has been updated to generate the system

certs using a separate CA subsystem instead of NSS database.

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/01c0b18a903f549bff6d9be9ef2907be283ff082">01c0b18a</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2022-07-25T12:37:22-05:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Add test for CMC shared token

A new test has been added for issuing a user cert using CMC

shared token authentication.

The files in base/ca/auth/ds provide a sample authentication

database.

The files in base/server/examples/cmc provide a sample CMC

configuration for generating the issuance protection cert.

The file in base/tools/examples/certs provides a sample pki

nss CLI configuration for generating a CSR for the user cert.

The files in base/tools/examples/cmc provide a sample CMC

configuration for generating the user cert.

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/afc0e01cd88c4b0b0ae434169be518072313eff9">afc0e01c</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2022-07-25T13:26:16-05:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Add test for LDAP-based CRL publishing

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/12857e0944fe44b6bbec48dd15865bc09c34d445">12857e09</a></strong>

<div>

<span> by Marco Fargetta </span> <i> at 2022-07-26T15:26:50+02:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Make the base branch generic (#4073)

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/f4208182f5a509fdb8905acae7b107d62eabe38c">f4208182</a></strong>

<div>

<span> by Chris Kelley </span> <i> at 2022-07-26T15:02:43+01:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Run RPMInspect against new builds</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/327fea57f9627f261e1002d6269a947893311843">327fea57</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2022-07-26T11:04:32-05:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Update PKIDeployer.create_cert()

Previously during installation PKIDeployer.create_cert() would

always call the server to generate a cert ID (using either legacy

or random generator), then call pki ca-cert-create CLI to create

a cert with that ID.

The code has been modified such that in case random ID generator

is used it will no longer call the server but instead it will let

the CLI generate the random cert ID locally. For legacy generator

it will still call the server since legacy generator can only work

inside the server.

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/ef6b42907088e370f9c26d1bbc6a35d0d965acf1">ef6b4290</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2022-07-27T15:42:24-05:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Update deprecation URLs

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/ffa72379e964298e7b97287b43e219d05a561acf">ffa72379</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2022-07-27T16:17:33-05:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Merge IKeyService into KeyRecoveryAuthority

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/84720a991ded080ad955147a60b56b6b5cfa8f32">84720a99</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2022-07-27T16:21:43-05:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Rename AJobBase to Job

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/1ea375ae3ff1db972131925b2bcc7c3f3bbe7227">1ea375ae</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2022-07-27T16:43:18-05:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Merge IJob into Job

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/6fdabda5809de383fc9da7a62b21c4464b988584">6fdabda5</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2022-07-27T16:43:18-05:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Merge IJobCron into JobCron

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/3b636b197c4cf8c99d3648d7e387c96d9e9c20e4">3b636b19</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2022-07-27T17:46:32-05:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Merge ISelfTestSubsystem into SelfTestSubsystem

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/84bec247d36b69d4f2af87f6e361c7908ecb9b7a">84bec247</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2022-07-27T17:48:51-05:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Rename ASelfTest to SelfTest

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/74af9a71c6e597eee77b9a38c854aeb02a7868f2">74af9a71</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2022-07-27T17:50:32-05:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Merge ISelfTest into SelfTest

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/6f119dedb4d952f877d6a3756ed3658a5ae1a98d">6f119ded</a></strong>

<div>

<span> by Marco Fargetta </span> <i> at 2022-07-28T14:31:02+02:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Fix broken PKICertImport test (#4075)

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/13da472dbb748e06427426c4538d91df9a6bcf1e">13da472d</a></strong>

<div>

<span> by Chris Kelley </span> <i> at 2022-07-28T15:57:24+01:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Replace exclusion of i686 with new %{java_arches} macro

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/dce39143ef77de286a36c7a3ee1009af317d7571">dce39143</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2022-07-28T13:58:12-05:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Merge pki-cmsutil.jar into pki-certsrv.jar

pki-cmsutil.jar has been merged into pki-certsrv.jar since they

are distributed in the same RPM package and usually used together.

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/009de42830ebae73fa48670ba9b1635efb5c49cb">009de428</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2022-07-28T19:50:15-05:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Remove remaining references to base/util

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/f5e0b815e65b06b1ed86ae265adce0d91ed0efce">f5e0b815</a></strong>

<div>

<span> by Christian Heimes </span> <i> at 2022-07-29T11:18:11+02:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Don't use deprecated python-ldap options (#4082)

- `OPT_X_TLS` is deprecated since python-ldap 3.3.0 and was removed in

  3.4.2.

- `OPT_X_TLS_DEMAND` is not a valid option key.

`ldap.set_option(ldap.OPT_X_TLS_REQUIRE_CERT, ldap.OPT_X_TLS_DEMAND)` is

sufficient to enforce cert validation.

Closes: #4081</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/1109294dbe9ec9bb8b7c89e8ceb79c64058df827">1109294d</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2022-07-29T08:45:58-05:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Bump redhat-rpm-config dependency

java_arches macro was add into redhat-rpm-config in version 201

on F35 and in version 219 on F36 or later.

https://src.fedoraproject.org/rpms/redhat-rpm-config/c/1926c37598951ae30749eb212b2412973a0300e5?branch=f35

https://src.fedoraproject.org/rpms/redhat-rpm-config/c/42b3f9289ae0764e3737eb380e620d3028dc6ce3?branch=f36

https://src.fedoraproject.org/rpms/redhat-rpm-config/c/f8b207df3be5c6de96864d25514d22e136b1fe87?branch=rawhide

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/148c6883b9a376abaa8247cae059f3b572e77116">148c6883</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2022-07-29T13:15:49-05:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Remove default serverCertNickFile attribute

Previously during installation the server.xml was always created

with a serverCertNickFile attribute. This attribute is supposed

to point to serverCertNick.conf which stores the nickname of the

SSL server cert. If the attribute exists, Tomcat JSS will read

the attribute, load the file, then load the cert. Since the

installation also calls some pki-server commands that depend on

Tomcat JSS, a temporary SSL server cert had to be created early

to prevent failures.

In the future the process might be optimized to reduce/eliminate

the need of a temporary SSL server cert, so the code has been

changed as follows:

- the server.xml will no longer include the attribute by

  default

- the create_temp_sslserver_cert() will be called only if

  the server needs to be started

- the set_sslserver_cert_nickname() will add the attribute

  into the server.xml

- the get_sslserver_cert_nickname() will read the attribute

  from server.xml instead of using a hard-coded value

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/6f395f0231bc978144bef9bee4d8189e7b08667b">6f395f02</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2022-07-29T13:37:12-05:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Add test for CA cert publishing

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/3ecc58672490cb1af36e9418d662ff6eff45b2c3">3ecc5867</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2022-07-29T15:26:01-05:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Clean up configuration.py

The configuration.py has been updated to replace the temporary

SSL server cert with the permanent one only when installing the

first subsystem.

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/dfc50e235e26fff58d0553e1e71634c2e86fdac6">dfc50e23</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2022-07-29T19:06:16-05:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Clean up configuration.py (part 2)

The configuration.py has been modified to always install the

permanent SSL server cert when installing the first subsystem.

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/fee7cca9c23814c676aefb0c7241524095841a96">fee7cca9</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2022-08-01T09:27:13-05:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Reduce server startup during installation

Previously during installation the server had to be started twice.

First it had to be started with a temporary SSL cert so the server

could generate system certs (including the permanent SSL cert),

then it had to be restarted in order to use the permanent cert.

If the server is configured without legacy ID generators it's no

longer necessary to start the server with a temporary cert since

now the system certs can be created offline, so the code has been

updated to skip the first startup for that particular case.

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/40bcb3fb6531fd7b689ddca1a09e1831cf7e26af">40bcb3fb</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2022-08-01T12:36:44-05:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Add ProfileSubsystemConfig

The ProfileSubsystemConfig has been added to encapsulate the

config params for profile subsystem.

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/ec0cc7dce75400efffb99705ed9aa97cfe255d9d">ec0cc7dc</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2022-08-01T12:36:44-05:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Add ProfileEntryConfig

The ProfileEnryConfig has been added to encapsulate the config

params for profile entries in CS.cfg.

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/d05e53561d9f1c2c7ec334403e48098d5c492730">d05e5356</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2022-08-01T12:36:44-05:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Add ProfileConfig

The ProfileConfig has been added to encapsulate the actual

profile configuration (in file or LDAP).

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/00b9889e058c1470c1b07408fe16d6e295f5e8f6">00b9889e</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2022-08-01T12:36:44-05:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Update pkispawn/pkidestroy logging

pkispawn and pkidestroy have been updated to use a basic console

logging by default. The pkilogging.enable_pki_logger() has been

updated to optionally configure file logging.

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/3e1698acd413d3e28f1216a8c6325a1336773021">3e1698ac</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2022-08-01T14:56:41-05:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Clean up log messages in pkispawn/pkidestroy

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/8bc92891c755a6048bfc947735c4183ff6c9113a">8bc92891</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2022-08-02T09:00:40-05:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Update PKIConfigParser.validate_user_config()

Previously the PKIConfigParser.validate_user_config() would

generate a deprecation warning for pkispawn params listed in

the DEPRECATED_PARAMS list and show the new section and/or

the replacement param.

The code has been updated to generate a removal warning if

there is no new section or param name specified in the list.

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/f3f28b5fe23ea9bebb1c947c361c7b808f50a580">f3f28b5f</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2022-08-02T09:00:40-05:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Remove pki_restart_configured_instance

In the past when installing an additional subsystem (after the

first one) the subsystem had to be started first to execute some

installation steps, then restarted to actually run the subsystem.

The pki_restart_configured_instance param provided an option to

skip the restart to optimize the installation process in IPA.

Now the subsystem no longer needs to be restarted since those

steps can be executed offline, so the code has been modified to

skip the initial startup. The param has been removed as well

since it's no longer used. The DEPRECATED_PARAMS list has also

been updated to generate a removal warning for this param.

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/30b33810dc7a70a921a9e52dcfd5a53a2444b1f4">30b33810</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2022-08-02T09:01:42-05:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Add test for publishing CRL to OCSP responder

The standalone OCSP test has been modified to configure the CA

to publish the CRLs to the OCSP responder.

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/4b1ace4afb0d0f068a01815fc20cab8374034568">4b1ace4a</a></strong>

<div>

<span> by Fraser Tweedale </span> <i> at 2022-08-03T23:21:37+10:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>fix LWCA key replication

Commit 47b3affc0dd576cb11dc93561cafffe1a25c2e8e refactors the JSON

handling in ExternalProcessKeyRetriever.  It introduced a regression

that causes lightweight CA key replication to fail.  It scrutinises

an empty node instead of the JSON node containing the object loaded

from the InputStream.  Update the code to scrutinise the correct

node.

Separately, commit 6c116bf52f9691a5e7727d087a615f5009474316 enhanced

the ExternalProcessKeyRetriever diagnostic output.  It also broke

key retrieval.  The `wrapped_key` field value is expected to be a

text node containing base64-encoded data.  We retrieve its decoded

value using `.binaryValue()`.  That commit added a check that throws

an exception if `node.isBinary()` is false.  However, the node is

parsed as a com.fasterxml.jackson.databind.node.TextNode, for which

`.isBinary()` returns false.  This commit removes the check.

`.binaryValue()` will (as before) throw an `IOException` if base64

decoding fails.

Fixes: https://github.com/dogtagpki/pki/issues/4032

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/5eb7fec3c8546db3a897967ab5d8b8b2695fad0f">5eb7fec3</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2022-08-03T17:54:02-05:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Clean up CA install test with existing certs (part 1)

The pki commands in CA install test with existing certs have

been modified to generate JSON output.

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/fb3256081413bb5c292f56567a78033319988729">fb325608</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2022-08-03T17:54:08-05:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Clean up CA install test with existing certs (part 2)

The pki commands in CA install tests with existing certs have

been modified to use the default NSS database.

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/cdab3f3d4b8357d10f8feddc5b521b0085fde27a">cdab3f3d</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2022-08-03T17:54:08-05:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Clean up CA install test with existing certs (part 3)

The CA install test with existing certs has been modified to

use the basic sample CA config file with random serial numbers.

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/e7b79f2cdbc1f4709f77697941dedf40b54fa3ad">e7b79f2c</a></strong>

<div>

<span> by Marco Fargetta </span> <i> at 2022-08-04T10:22:35+02:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Fix miss email in sonarcloud rebase (#4091)

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/13fb7ddf437df9b32f8992a7df00de9ccb51d7e7">13fb7ddf</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2022-08-04T09:33:57-05:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Add pki_self_signed_nickname

Previously the installation code was using the same nickname for

the temporary (self-signed) and permanent SSL server certs, so

the permanent cert could not be imported into the NSS database

until the temporary one is removed.

The pki_self_signed_nickname parameter has been added to define a

separate nickname for the temporary cert, allowing the permanent

cert to be imported earlier along with other system certs.

The PKIDeployer.temp_sslserver_cert_created is no longer used so

it has been removed.

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/115e8bea62f36cce4987684baa9c68ac7551db0a">115e8bea</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2022-08-04T09:41:42-05:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Merge IPluginInfo into PluginInfo

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/2fc3a5815a6f40f9ff44d7b1cf047ea086a59977">2fc3a581</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2022-08-04T09:48:08-05:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Merge IXcertPublisherProcessor into PublisherProcessor

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/37fdf993de68129861ba5e16b1edb0ebc6b77b1a">37fdf993</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2022-08-04T09:53:14-05:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Merge INotify into IRequestNotifier

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/d99ae9a10f6002fcf28805a86ea9a8505e1ebe3b">d99ae9a1</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2022-08-04T13:06:25-05:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Merge IRequestNotifier into RequestNotifier

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/a3d82ca6d11427d745a86f3d66b868f3245617a4">a3d82ca6</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2022-08-04T20:21:22-05:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Merge PKIDeployer.import_perm_sslserver_cert()

The code in PKIDeployer.import_perm_sslserver_cert() that imports

the permanent SSL server cert into NSS database has been merged

into setup_system_cert(). The code that fixes the NSS database

permissions has been moved into setup_system_certs().

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/afeea91818756a9af9a0f852a865db940b21199f">afeea918</a></strong>

<div>

<span> by Christina Fu </span> <i> at 2022-08-05T17:41:14+01:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Bug2070766-caServerKeygen_DirUserCert subject constraints

This patch replaces input of cert subject to that of the auth token.

fixes https://bugzilla.redhat.com/show_bug.cgi?id=2070766

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/bf1ed2ba14c19c863bff069afbb1428e6739907d">bf1ed2ba</a></strong>

<div>

<span> by Christina Fu </span> <i> at 2022-08-05T17:42:59+01:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Bug2070766 - upgrade-caServerKeygen_DirUserCert-profile

This patch provides the upgrade script to change the profile

 caServerKeygen_DirUserCert.cfg in an existing ca instance.

fix 2 for bug https://bugzilla.redhat.com/show_bug.cgi?id=2070766

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/d97adfa0fa9d788bda71254f2ddb1ac9c2c7a31e">d97adfa0</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2022-08-05T11:53:35-05:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Fix pki-server run

The pki-server run command was supposed to run the server on

the foreground for troubleshooting and for future containers,

but it was not working due to missing JVM parameters.

The code has been updated to include the --add-opens options

as defined in Tomcat configuration:

/etc/tomcat/conf.d/java-9-start-up-parameters.conf

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/852885d9565e4d58d27ff72e8579eef8435e6312">852885d9</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2022-08-05T14:20:30-05:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Add test for pki-server upgrade

A new test has been added to verify the pki-server upgrade tool

using a basic upgrade script.

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/bd264c0711ea6cbe938fe7fb73f430bd1c21cd4e">bd264c07</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2022-08-08T13:37:48-05:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Clean up log messages in AddCRLServlet

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/d696b6a6faceb4406e713428965eac7e48bf4af4">d696b6a6</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2022-08-08T13:37:48-05:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Clean up log messages in DefStore

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/503605f395ed1ad4057e5ff128fd11139f28bb30">503605f3</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2022-08-08T13:37:48-05:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Clean up log messages in OCSPAuthority

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/e235965fcc55840e3ebe84d567fe46409c7f19e7">e235965f</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2022-08-08T14:40:09-05:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Clean up log messages in LDAPStore

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/92f8ceaf40073df27a9ded3498c27766fb081d0a">92f8ceaf</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2022-08-08T17:12:32-05:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Update basic CA test to use RSNv3

The basic CA test has been updated to use RSNv3. The RSNv3

test has been converted into a test for migrating from

sequential serial numbers to RSNv3.

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/78772e4f54cd1c68d37ab30a11cd9e5ac6928ebc">78772e4f</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2022-08-09T09:07:22-05:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Remove pki_<tag>_cert_path default values

The pki_external_<tag>_cert_path params had been deprecated some

time ago and replaced with pki_<tag>_cert_path, but they were

still included in the man page. These params also had default

values which were redundant since the admin would override them

during installation.

Similarly, the pki_external_<tag>_csr_path params had also been

deprecated some time ago and replaced with pki_<tag>_csr_path,

but they were also still included in the man page. These params

did not actually have default values even though the man page

said otherwise.

Now the man page has been updated to include the new params with

no default values. The default.cfg has also been updated to remove

pki_external_<tag>_cert_path default values.

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/0802887914611755ed423053c7672f634af65f60">08028879</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2022-08-09T09:08:38-05:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Add test for OCSP with LDAP-based CRL publishing

A new test has been added to verify that OCSP can consume the

CRL published by CA through LDAP.

The tests for CA cert and CRL publishing have been updated to

use the same DN pattern, predicate, and search filter for

consistency.

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/6762d57c5750f7e390bb0a611f1ad583faa717e6">6762d57c</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2022-08-09T13:23:47-05:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Remove unused preop.internaldb.dbuser

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/629760d304ec4bdf6152e1ceb76420a6d4b2957b">629760d3</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2022-08-09T13:31:14-05:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Add PKIDeployer.configure_tps()

The code that configures TPS params has been moved into

PKIDeployer.configure_tps().

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/39c3e2a0ae8492d6a0d995cef541f27f64871799">39c3e2a0</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2022-08-09T13:31:22-05:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Add PKIDeployer.configure_kra()

The code that configures KRA params has been moved into

PKIDeployer.configure_kra().

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/537ed38aafaff3954cbfd47761bcdf21c0c4e093">537ed38a</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2022-08-09T14:03:04-05:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Add PKIDeployer.configure_ca()

The code that configures CA params has been moved into

PKIDeployer.configure_ca().

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/2b76fb860a7608c56efc3c686d64c5c07f599430">2b76fb86</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2022-08-09T14:03:04-05:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Add PKIDeployer.configure_subsystem()

The code that configures general subsystem params has been

moved into PKIDeployer.configure_subsystem().

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/3f1f6fb23e21bff97c21dcec1aa883227570209d">3f1f6fb2</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2022-08-09T15:24:45-05:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Add PKIDeployer.finalize_tps()

The code that finalizes TPS installation has been moved into

PKIDeployer.finalize_tps().

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/73e43848f07cfe12c2aeadd4539d5068c41df1ff">73e43848</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2022-08-09T15:25:12-05:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Add PKIDeployer.finalize_ocsp()

The code that finalizes OCSP installation has been moved into

PKIDeployer.finalize_ocsp().

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/d3a430257c5429cbdb30cacd2a9122e4251401b8">d3a43025</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2022-08-09T15:25:19-05:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Add PKIDeployer.finalize_kra()

The code that finalizes KRA installation has been moved into

PKIDeployer.finalize_kra().

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/42f9558bac7fca443345061b674108687bcb46f7">42f9558b</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2022-08-09T15:25:28-05:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Add PKIDeployer.finalize_ca()

The code that finalizes CA installation has been moved into

PKIDeployer.finalize_ca().

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/2f9ce26417a8fdcb49b2d1a3a042c6c1b15b8a63">2f9ce264</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2022-08-09T15:25:37-05:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Add PKIDeployer.finalize_tks()

The code that finalizes TKS installation has been moved into

PKIDeployer.finalize_tks().

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/f704c428c0534dc544b1d7dc5dc6bec321d44c8e">f704c428</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2022-08-09T18:47:01-05:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Clean up PKIDeployer.load_admin_cert()

The conditional in PKIDeployer.load_admin_cert() has been updated

to return early, eliminating the else clause.

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/3145706e1cbd53151e896e72f0a77d44ea816dd2">3145706e</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2022-08-09T18:47:16-05:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Refactor PKIDeployer.load_admin_cert() (part 1)

The PKIDeployer.load_admin_cert() has been updated to load/store

the admin cert from/into pki_admin_cert_file in PEM format.

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/080ec41a2a767e7ab50b335cc71f189a42c630e1">080ec41a</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2022-08-09T18:47:18-05:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Refactor PKIDeployer.load_admin_cert() (part 2)

The PKIDeployer.load_admin_cert() has been updated to load the

admin cert from the NSS database in PEM format.

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/37331ede85eb4ef6df9294d04a777adbc8c730f4">37331ede</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2022-08-09T19:09:32-05:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Refactor PKIDeployer.load_admin_cert() (part 3)

The PKIDeployer.load_admin_cert() has been updated to load the

admin cert from pki_admin_cert_file only if the file exists.

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/914a2a386339b305f4f399a090819409529a3cd6">914a2a38</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2022-08-09T19:09:40-05:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Refactor PKIDeployer.load_admin_cert() (part 4)

The PKIDeployer.load_admin_cert() has been updated to load the

admin cert only if the pki_admin_cert_path is specified.

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/73d226b017a2000c5ec084f7af90a78a9db50989">73d226b0</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2022-08-09T19:10:02-05:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Update PKIDeployer.load_admin_cert() to return PEM cert

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/cbb4cf128c3917003405505369e82324b2648ffa">cbb4cf12</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2022-08-09T20:14:46-05:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Update PKIDeployer.create_admin_cert() to return PEM cert

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/d822268108a7abc000db4e6acc7067f29a159cb4">d8222681</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2022-08-09T20:15:23-05:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Update PKIDeployer.request_cert() to return PEM cert

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/9526b5cbc1889006c8dedada2cc341c222a8bd26">9526b5cb</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2022-08-09T20:15:23-05:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Update PKIDeployer.store_admin_cert() to take PEM cert

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/ba743e6f80da8ff16111091aad233da1adcf7968">ba743e6f</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2022-08-09T20:15:23-05:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Update PKIDeployer.get_admin_cert() to return PEM cert

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/bd107524588f9e3758142cc372a9d5a69eaef819">bd107524</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2022-08-10T19:09:46-05:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Update PKIDeployer.setup_admin_user() to take PEM cert

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/04dd08de3675039cf3dbd43f2a74de88558779c3">04dd08de</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2022-08-10T19:09:46-05:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Add PKIDeployer.is_using_legacy_id_generator()

The code that checks whether the subsystem uses a legacy ID

generator was moved to PKIDeployer.is_using_legacy_id_generator().

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/a8e1e3e86afc57593c434cffdb376460731c839d">a8e1e3e8</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2022-08-10T19:09:46-05:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Fix PKIDeployer.load_admin_cert()

The pki_admin_cert_file is supposed to be used to import the

admin cert, and the pki_client_admin_cert is supposed to be

used to export the cert, so the PKIDeployer.load_admin_cert()

has been updated accordingly.

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/12df899ead2cfd24d2b143efcca7562619fc0230">12df899e</a></strong>

<div>

<span> by Chris Kelley </span> <i> at 2022-08-12T00:14:58+01:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Fix shellcheck warnings

Don't run checks against legacy tests

There was a typo in test_PKICertImport which should probably have caused

a test to fail, but it didn't.

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/6a6775876a8a2c1223588a9aec3ec4375628d27f">6a677587</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2022-08-11T20:53:25-05:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Rename PKIDeployer.get_admin_cert() to setup_admin_cert()

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/76f387e0f0c40d2e16a6210aad1b8652114a02e8">76f387e0</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2022-08-11T20:53:25-05:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Clean up PKIDeployer.setup_admin_cert()

The PKIDeployer.setup_admin_cert() has been updated to store/export

the admin cert as needed, then return early.

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/bc9addd31fefb1e4a999e3407c03f85d52d0f3dd">bc9addd3</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2022-08-11T20:53:25-05:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Clean up PKIDeployer.load_admin_cert()

The code that exports the admin cert into pki_client_admin_cert

has been merged into store_admin_cert().

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/29ef0791ac944564bc8fd8908a6f9c54a298f363">29ef0791</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2022-08-11T20:53:25-05:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Consolidate code for importing existing admin cert

The code that determines whether to import an existing admin

cert has been moved into PKIDeployer.setup_admin_cert().

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/be46ec4fb6222859e64fc7df1632754e9f9ff797">be46ec4f</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2022-08-11T20:53:25-05:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Remove redundant code in PKIDeployer.setup_admin_cert()

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/c1641915f829a20afed442f86373bfa98ba9e098">c1641915</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2022-08-11T20:53:25-05:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Refactor PKIDeployer.load_admin_cert()

The code that loads the admin cert from pki_admin_cert_path has

been moved into setup_admin_cert().

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/220ce1e921dc0c711434bf51fae81fd6d8d64645">220ce1e9</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2022-08-15T17:22:50-05:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Update test for installing CA with existing certs

The test for installing CA with existing certs has been updated

to include existing subsystem, SSL server, and admin certs in

addition to CA signing, CA OCSP signing, and CA audit signing

certs.

The test has been updated to validate the system certs and keys

by comparing the original certs and keys and the ones actually

installed on the server.

The test has also been updated to validate the admin cert by

using the original cert for authentication against the server.

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/ce9011e1c8a4b321315f066267958f4121927843">ce9011e1</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2022-08-15T17:23:22-05:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Merge IDBSearchResults into DBSearchResults

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/86e56a9fe3d22c07f46f4b22aa31f5dd273711c6">86e56a9f</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2022-08-15T17:23:22-05:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Convert ElementProcessorStub into ElementProcessor

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/c1bd5db5a6f8642be13417869116499991400665">c1bd5db5</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2022-08-15T17:23:22-05:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Merge IElementProcessor into ElementProcessor

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/52585e78cf9eda4ddebcfe0b65086887af5ff22e">52585e78</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2022-08-15T17:23:22-05:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Convert IFilterConverter into FilterConverter

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/10444464f338c88c0f647b15883d49172f7c5763">10444464</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2022-08-16T09:29:20-05:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Update build test

The build test has been updated to ensure that CMake installs

the same files included in RPM packages (except for RPM-specific

files).

In the future the CI tests might be modified to use CMake build

instead of RPM packages to shorten the execution time.

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/dba33a1077a0f201ec77bc111a6155d0cdf7fb42">dba33a10</a></strong>

<div>

<span> by Jack Magne </span> <i> at 2022-08-16T18:20:57-04:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Fix: Bug 2094066 - CC: missing audit event CLIENT_ACCESS_SESSION_ESTABLISH when CS instance acting as a client and fails to connect

This simple fix allows a testing scenario where faiiled connections attempts when the given CS subsystem is acting as a client can be

viewed properly early during the subsystme's startup sequence. This is needed because the CA often attempts to make a pool of persistent SSL connections

to it's ldap server. This fix solves this issue with 2 approaches.

1. We establish an undocumented test-only config setting that allows the subsystem at startup to skip the early connection test to LDAP.

The reason we want to do this is because this test takes place very early in the startup sequence, well before the audit logging system or

the logging system has had a chance to come up. This can result in unreported connection failures.

This can be set simply like this in the CS.cfg:

cms.password.skipLdapConnTest=true

This setting will always default to false since we only want to skip this test very rarely.

2. Slightly switch the order of startup in a subysystem by  making sure the ldap DB section is started up before

the logging section. This allows any failures to establish the previously mentioned connection to be properly logged

in the audit log.

audit 3.

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/393017b1b080fb3ca162dce50985379581a766ce">393017b1</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2022-08-16T18:13:44-05:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Add FULL_VERSION variable in build.sh

The FULL_VERSION variable has been added to store the version

number and the development phase.

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/4608848a651d36f8095eff0dbbc6217f5cf3c34c">4608848a</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2022-08-16T18:49:10-05:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Update help message for pki-server <subsystem>-user-add

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/c87bf294fe5cd9663c970980d4a6f3b872379ff6">c87bf294</a></strong>

<div>

<span> by Christina Fu </span> <i> at 2022-08-17T08:29:46-07:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Bug2093114-cs-tls-client-ciphers

This patch fixes the issue introdued when the JSS engine was replaced

and the original control (inherited from server.xml) of ciphers when

acting as a client no longer works.

The controls are in two places.  One for when connecting with internal

ldap, while the other when a cs instance is connecting with each other.

It also narrowed the suggested cipher lists, such as the removal of the

SHA1 ciphers.

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/a45af4176e2de49c51c05f0217e4aa69059f97d8">a45af417</a></strong>

<div>

<span> by Christina Fu </span> <i> at 2022-08-17T08:29:46-07:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Bug2093114-performance-improvement-for-cs-tls-client-ciphers

This patch added the performance improvement that was tabled from

earlier check-in due to time concern.

Instead of per socket-level cipher setting, we opt for cipher

setting at thread level in the class constructors.

fixes https://bugzilla.redhat.com/show_bug.cgi?id=2093114

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/11feb6c96ecc0f60da9db3ccec50e1fd81328772">11feb6c9</a></strong>

<div>

<span> by Chris Kelley </span> <i> at 2022-08-17T17:14:32+01:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Use ternary operator in BasicConstraintsExtDefault</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/621cf9c9a17a43d48912b90a388575bbc998f54c">621cf9c9</a></strong>

<div>

<span> by Chris Kelley </span> <i> at 2022-08-17T17:40:07+01:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Reorder modifiers in DefStore

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/6df365140570f6450bb953fcd652775470884027">6df36514</a></strong>

<div>

<span> by Christina Fu </span> <i> at 2022-08-17T10:51:34-07:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>simple comment changes for Bug2093114

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/412b79fe4464ddac9c8a2a54542356b25a1d2ee7">412b79fe</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2022-08-18T11:05:27-05:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Fix typos in OCSP test

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/f805cc71ee713c4675f4d55ecff9ad16d23c7c79">f805cc71</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2022-08-18T16:22:32-05:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Remove unused pki_ca_hostname and pki_ca_port params

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/6fe2934e513f95b3333a976f564dfd4fc3456d79">6fe2934e</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2022-08-18T16:40:31-05:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Remove unused SSL range slots

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/a03e5d225b7e7540c1b7f9a672396122ffcb10d8">a03e5d22</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2022-08-18T16:54:18-05:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Remove unused TOMCAT_CFG slot

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/352e570e814e3ec03484476d87fc9a02cd3cb2fa">352e570e</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2022-08-18T16:54:19-05:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Replace PKI_SECURITY_MANAGER slot with direct substitution

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/9ac1fc71822fb548a10fbde2bf9b22f31fbda80a">9ac1fc71</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2022-08-18T16:54:48-05:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Replace MASTER_CRL_ENABLE slot with direct substitution

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/ba131378c73ed211a07648db27865766fca46757">ba131378</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2022-08-18T16:54:49-05:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Replace PKI_SYSTEMD_SERVICENAME slot with direct substitution

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/5819cec9ae94d55da937507af4519590c3d3ecae">5819cec9</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2022-08-18T16:54:49-05:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Replace PKI_TMPDIR slot with direct substitution

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/d835109e03fcd271574053218c908a149fc1f26d">d835109e</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2022-08-18T16:54:49-05:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Replace TPS_DIR slot with direct substitution

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/2bd0d3f45811b0ef77c74340c1c311ebe0a045e0">2bd0d3f4</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2022-08-18T16:54:49-05:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Replace PKI_PIDDIR slot with direct substitution

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/3b9243a1af906acce2f42adfb1b5a1532363e713">3b9243a1</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2022-08-18T16:54:49-05:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Replace INSTALL_TIME slot with direct substitution

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/73f920c34ab19fa6e06f36582d85c6ab2fb6dca2">73f920c3</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2022-08-18T16:54:49-05:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Replace APPLICATION_VERSION slot with direct subtitution

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/61bcddbf16eb52d73c2df3e76940c842653afb04">61bcddbf</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2022-08-18T17:00:43-05:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Replace TOMCAT_LOG_DIR log with direct substitution

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/ecb84f8e09fd84149466798a94d0ec09078be7eb">ecb84f8e</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2022-08-18T17:10:48-05:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Replace TOKENDB_HOST slot with direct substitution

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/a970f2700b96ab3c81b2c0c66aedcfbb6213357e">a970f270</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2022-08-18T17:12:01-05:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Replace TOKENDB_ROOT slot with direct substitution

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/29375718515eb66c26e174f515b951a5732d0741">29375718</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2022-08-18T17:14:08-05:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Replace PKI_SSL_SERVER_NICKNAME slot with direct substitution

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/6d04dbd4000ada80f2f1b59ad9556601938012c2">6d04dbd4</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2022-08-18T17:17:39-05:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Replace PKI_RANDOM_NUMBER slot with direct substitution

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/458020615696bf9e0ebc9857ac5f2bd812757f2a">45802061</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2022-08-18T21:05:22-05:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Update comments in instance_layout.py

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/b08d27aa9fe35e0eb004b9004e7cae3a1fbf7f32">b08d27aa</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2022-08-18T22:13:44-05:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Move server startup to finalization.py

The code that starts the systemd service during installation

has been moved into finalization.py.

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/520bbadeaeee9237adaac3ad1aaa089c9c14efde">520bbade</a></strong>

<div>

<span> by Stanislav Levin </span> <i> at 2022-08-19T06:37:23+01:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>flake8: Fix whitespace warning

New `pycodestyle` 2.9.0 introduced:

> E275: requires whitespace around keywords

https://pycodestyle.pycqa.org/en/latest/developer.html#changes

`flake8` 5.0 that integrates `pycodestyle` found 1 issue in code:

```

./base/server/healthcheck/pki/server/healthcheck/clones/plugin.py:133:11: E275 missing whitespace after keyword

        if(ca_subsystem):

          ^

```

Fixes: https://github.com/dogtagpki/pki/issues/4101

Signed-off-by: Stanislav Levin <slev@altlinux.org>

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/60bfe6cdb4dbdd5ff5cd96c56c884da0806356b1">60bfe6cd</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2022-08-19T11:24:40-05:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Update tests for CRL publishing

The CA tests with file-based and LDAP-based CRL publishing and

the OCSP tests with direct OCSP and LDAP-based CRL publishing

have been updated to call the UpdateCRL service to publish the

initial CRL.

Since the CRL update happens asynchronously the tests will wait

for a few seconds before using the initial CRL.

Since the initial CRL is a valid CRL that contains no revoked

certs, the OCSP will return a "good" status to the clients

(instead of returning an error like in case it has no CRLs at

all).

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/74057f0dea7f5c4f4ea89a77764c613869cdc254">74057f0d</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2022-08-19T14:20:02-05:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Remove unused registry_instance

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/c5a2530067e897d08bd446faff73c64cf4c2d447">c5a25300</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2022-08-19T14:50:40-05:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Remove unused PKI_WEBAPPS_NAME slot

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/eb7532b9a906d20f42909f74e1ebb41993af79e1">eb7532b9</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2022-08-19T14:50:42-05:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Remove unused PKI_SERVER_XML_CONF slot

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/9cb98d2a4c5ad18182d4ab5ec9a7f0e39a91cab2">9cb98d2a</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2022-08-19T14:50:42-05:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Remove unused PKI_REGISTRY_FILE slot

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/41069583bb8cd8425084b5b5bcbb072096ac23f0">41069583</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2022-08-19T14:50:42-05:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Remove unused PKI_CFG_PATH_NAME slot

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/e5e0b10d0a6cff8c21224b71234c306c85439f43">e5e0b10d</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2022-08-19T14:50:42-05:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Remove unused PKI_EE_SECURE_CLIENT_AUTH_PORT_SERVER_COMMENT slot

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/bacc6905879a797386b0b8f07d4329d92d797025">bacc6905</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2022-08-19T14:50:42-05:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Remove unused PKI_EE_SECURE_CLIENT_AUTH_PORT_UI slot

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/51eaac5d56d89e41c9c29e844780d3e430df7441">51eaac5d</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2022-08-19T14:51:05-05:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Remove unused PKI_EE_SECURE_PORT_SERVER_COMMENT slot

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/c9afd9acefd4140edb2a047cfb2ebd34f26a4487">c9afd9ac</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2022-08-19T15:08:58-05:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Replace PKI_SECURE_PORT_CONNECTOR_NAME slot with direct substitution

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/8d98a29e8afa63268a9d8a77dd6db9d3b4f36250">8d98a29e</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2022-08-19T15:08:58-05:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Replace PKI_SECURE_PORT_SERVER_COMMENT slot with direct substitution

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/8cfbce721c0246a857393d471ba9e405724a8934">8cfbce72</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2022-08-19T15:08:58-05:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Replace PKI_UNSECURE_PORT_CONNECTOR_NAME slot with direct substitution

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/687dd72f6b1e98934dc2466aa4982699a91127b8">687dd72f</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2022-08-19T15:09:52-05:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Replace PKI_UNSECURE_PORT_SERVER_COMMENT slot with direct substitution

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/836fbc23ae0e3944345816cf1d74e97a66e3380f">836fbc23</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2022-08-19T15:27:00-05:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Replace PKI_USER slot with direct substitution

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/d8763e3ed359896facea30755813598892292878">d8763e3e</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2022-08-19T15:27:00-05:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Replace PKI_GROUP slot with direct substitution

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/f2e19933c002ea554b6f802a6c9ebf09755a611a">f2e19933</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2022-08-19T15:27:00-05:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Replace TOMCAT_PIDFILE with direct substitution

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/405d1510b489dda3210d7b42a339e1c00723ee13">405d1510</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2022-08-19T15:27:00-05:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Update PKIDeployer.export_admin_pkcs12()

The PKIDeployer.export_admin_pkcs12() has been updated to use

the absolute path of the PKCS #12 file to get its directory.

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/edafef3cb90202340a2c82289c2a5df8159b8b60">edafef3c</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2022-08-22T09:56:11-05:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Add pki_systemd_service_create

The pki_systemd_service_create param has been added to support

installing PKI server without systemd service.

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/95978fe964a7ddbb2fa794824a0bcee033f2b410">95978fe9</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2022-08-22T09:56:11-05:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Add basic CA container

The Dockerfile has been updated to define a basic container

image for CA with some limitations. The pki-ca-run has been

added to create a CA instance and run it in foreground.

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/3aaabfdea39b02af37da6efe1a134b04f1155969">3aaabfde</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2022-08-22T09:56:11-05:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Add test for CA container

A new test has been added to create a CA container and perform

some basic operations.

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/49b53a75c4937a4b0e9694ea9fe3ea50b1f03650">49b53a75</a></strong>

<div>

<span> by Fraser Tweedale </span> <i> at 2022-08-23T13:17:32+10:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>ExternalProcessConstraint: fix copy/paste mistake in initialisation

Initialsation of "timeout" config incorrectly references the

"executable" config.  This is the result of a copy/paste mistake.

Fix the behaviour to refer to the correct variable.

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/d6b743b32edfa44ee3f79d9b9c6276ed109cd4ab">d6b743b3</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2022-08-23T08:52:49-05:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Update CA container to use existing certs and keys

The pki-ca-run has been modified to create the system certs

and admin cert first, then create the CA using these certs.

In the future the script will support using certs and keys

created outside of container as in pki-acme-run.

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/c32df519038af529cb93fef8b83603f411a25439">c32df519</a></strong>

<div>

<span> by Rob Crittenden </span> <i> at 2022-08-23T09:22:16-05:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Add user and group options for the NSSDatabase class

The user and group options were not used in the NSSDatabase class.

Call chown() for any files/directories created and use runuser

for any external commands if a user is defined.

This is important for filesystem permissions when managing

certificates and private keys inside a software PKCS#11 module

like softHSM.

Signed-off-by: Rob Crittenden <rcritten@redhat.com>

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/518a3e5c4415e7683baf9392bc8725b3fb587a9f">518a3e5c</a></strong>

<div>

<span> by Rob Crittenden </span> <i> at 2022-08-23T09:22:16-05:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Use pki_sslserver_token if set for the sslserver cert

The installer was using pki_token_name for all certificates

regardless of whether a specific value for a certificate

was requested by the user.

This allows a user to not store the sslserver cert in the

PKCS#11 token but instead leave it in the NSS softokn.

Signed-off-by: Rob Crittenden <rcritten@redhat.com>

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/b8aa0339be01a181f7ca99b95f015ce94e884e41">b8aa0339</a></strong>

<div>

<span> by Rob Crittenden </span> <i> at 2022-08-23T09:22:16-05:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Disable cli return value check when adding certificates

NSS trust is stored in its own token database which needs

to be authenticated to in order to modify trust. certutil has

a bug where tries over and over to authetnicate to a PKCS#11

token to set the trust which inevitably fails because that

isn't where trust needs to be written. So all attempts to

set trust will fail with SEC_ERROR_TOKEN_NOT_LOGGED_IN

Disable the return value check because when adding certs

the trust is ,, anyway so there is nothing to lose.

Signed-off-by: Rob Crittenden <rcritten@redhat.com>

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/fed6a96ee0d2a8b2d74d550662dcd80af8876382">fed6a96e</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2022-08-24T08:35:01-05:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Make pki_hsm_modulename and pki_hsm_libfile optional

The pki_hsm_modulename and pki_hsm_libfile params have been

modified to become optional since they are not needed for

installation with SoftHSM.

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/795d577bd52593267ccbc72ff245f9a3cb8a84a8">795d577b</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2022-08-24T08:35:01-05:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Add test for installing CA with HSM

A new GH job has been added to test CA installation with HSM. In

this case all system certs and keys will be created in HSM except

for the SSL server cert and key (needs further investigation). All

system certs will exist in the internal token as well, but only

the SSL server cert has a key. Certs that have a key in the same

token will have "u" trust flags.

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/7c6406db86c3e33d41b1718c683715b934e82b12">7c6406db</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2022-08-24T18:26:25-05:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Refactor TPSSubsystem.loadTokenStateTransitions()

The TPSSubsystem.loadTokenStateTransitions() has been modified

to take the param value instead of the ConfigStore object.

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/9e1440d20a537097922a375ccf7228d700708455">9e1440d2</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2022-08-24T18:26:43-05:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Rename TPSTokendb to TokenDB

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/696dbde1e6efab60a106b3717b9adca8c29110f6">696dbde1</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2022-08-24T18:26:43-05:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Add TokenDBConfig

The TokenDBConfig has been added to encapsulate the config

params for TokenDB.

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/61cfd7b848d1dd269d988809c1a4c62d8b018280">61cfd7b8</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2022-08-24T18:26:43-05:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Clean up TPS test

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/e24b6166bd356a0ae75d3e49138e644dbd1c89a6">e24b6166</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2022-08-25T09:26:47-05:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Update CA container to support existing certs

The pki-ca-run has been modified to import existing system and

admin certs if provided, otherwise it will create new ones.

The test for CA container has been updated to create the certs

first, then create the CA container with these certs.

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/25de84873b379b650d129a839b62534472aa6bb5">25de8487</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2022-08-25T13:02:40-05:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Refactor RequestListByStatus to extend RequestList

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/21ade70f4aadb130203782be1f76f25d59daf8ef">21ade70f</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2022-08-25T13:02:48-05:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Refactor SearchEnumeration to extend RequestList

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/1825fbf02c6fc57086a786b76548b65daad582e0">1825fbf0</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2022-08-25T13:02:54-05:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Merge IRequestList into RequestList

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/dd0fb6cda4be24664b786ff82724b7fa6d2adf71">dd0fb6cd</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2022-08-25T13:02:54-05:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Merge IRequestScheduler into RequestScheduler

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/174c10ab44581ed44695d19c784f96014c07412d">174c10ab</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2022-08-25T13:09:50-05:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Merge IReqParser into ReqParser

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/c40715a9749e8a8b545ca246a6101d977e8f139e">c40715a9</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2022-08-25T13:13:16-05:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Merge IResender into Resender

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/451e76a6e96502dfde86c82f6d23a0c9cf360b63">451e76a6</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2022-08-25T13:13:16-05:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Rename DBVirtualList to LDAPVirtualList

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/6707cee12a78c16a0842698d44d1f02f37838948">6707cee1</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2022-08-25T13:13:16-05:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Fix typo in CA container test

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/3606cedd2d4cc9766ddef3ac71d1891b0ad1a939">3606cedd</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2022-08-25T13:13:16-05:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Fix javadoc warning

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/29d5606066a817c0dec78d5b5447db6c524acff2">29d56060</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2022-08-25T18:18:50-05:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Remove tokendb.hostport

The tokendb.hostport parameter in TPS's CS.cfg is no longer

used so it has been removed.

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/1cba007532405a50a9e2670acc54f41ed6feffc3">1cba0075</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2022-08-25T19:54:50-05:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Fix pkidestroy to support NSS database without password

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/8887c409baeeb524c2f298d3b05fcac5b9ddcc40">8887c409</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2022-08-26T08:42:47-05:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Reorganize test for basic CA

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/33ae19209b502103a615ef85b3f7803b0ace2af8">33ae1920</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2022-08-26T08:42:47-05:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Reorganize test for CA with ECC

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/68e9f7197b39009957346e52b6954486a4aa1381">68e9f719</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2022-08-26T08:42:47-05:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Reorganize test for CA with RSA/PSS

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/b3f8aaaa8e952780d5c029490795509177ec3c88">b3f8aaaa</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2022-08-26T09:28:31-05:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Add pki-server ca-cert-find --status

The pki-server ca-cert-find has been modified to provide an

option to search certs by status. Additional options may be

added later.

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/3502f32f1e9eb9e8dcba856e2e2388dc4929debc">3502f32f</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2022-08-26T09:58:45-05:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Add test for CA installation with existing NSS database

A new test has been added to create a PKI server, create an

NSS database, generate the system certs in it, then create

a CA using the certs already in the NSS database. This

process allows the admin to fully control how the keys and

certs are created.

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/2657127fb24ab493451700665c4af1b9cdf5f705">2657127f</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2022-08-26T10:01:37-05:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Update CA container to use existing NSS database

pki-ca's Dockerfile has been updated to create a PKI server and

an NSS database just like in pki-server's Dockerfile.

The pki-ca-run has been updated to import the system certs into

the server's NSS database (or generate the certs directly in it),

then create a CA with the certs already in the database just like

in pki-server-run.

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/d63a4fe2d258990da5f4cf82a652fb99a481bc57">d63a4fe2</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2022-08-26T11:53:26-05:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Refactor user deployment config creation

The code that creates the user deployment config in subsystem

registry folder has been moved from infrastructure_layout.py to

subsystem_layout.py.

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/8e928bfdb9682abda56a2b46f684619ec4415177">8e928bfd</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2022-08-26T14:10:31-05:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Add properties for subsystem folders

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/6bcab460020a949a8d28c1dbee4f32967b8129ac">6bcab460</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2022-08-26T14:10:36-05:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Refactor subsystem folders creation

The code that creates subsystem folders has been moved into

PKISubsystem.create(), create_conf_dir(), and create_log_dirs().

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/acb4b27bbdd7c10077b60dca34786f50c93eecc9">acb4b27b</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2022-08-26T14:10:36-05:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Refactor subsystem folders removal

The code that removes subsystem folders has been moved into

PKISubsystem.remove(), remove_conf_dir(), and remove_log_dirs().

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/913ef0872d08630efba409acf0e46e1fbc0f7bb2">913ef087</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2022-08-26T17:49:57-05:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Move database.ldif to database/ds/config.ldif

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/447db7751bc6594db5f411ec909ce4e4298e124c">447db775</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2022-08-26T17:49:57-05:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Move schema.ldif to database/ds/schema.ldif

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/a9e2951740706cf0036ae1b6f2e28a193585c0ea">a9e29517</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2022-08-26T17:49:57-05:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Move db-access-*.ldif to database/ds/db-access-*.ldif

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/b0cc3f457691d71de3b84f26dd31eecbcd2a3bfe">b0cc3f45</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2022-08-26T17:49:57-05:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Move db.ldif to database/ds/create.ldif

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/d884dd63d62885ce5fd096a8c48205d14929ccfb">d884dd63</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2022-08-26T17:49:57-05:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Move acl.ldif to database/ds/acl.dif

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/1a1a02705b681e5a9e6d0272b5c6c014bdac295b">1a1a0270</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2022-08-26T17:49:57-05:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Move index.ldif to database/ds/index.ldif

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/4a377ee5e6df42b3296b9ffb0f8f13e73a5837f8">4a377ee5</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2022-08-26T17:49:57-05:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Move indextasks.ldif to database/ds/indextasks.ldif

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/b17d09325c46e3cac42342025a76a441c074ff4c">b17d0932</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2022-08-26T17:49:57-05:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Move vlv.ldif to database/ds/vlv.ldif

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/c26bebc74597adc86f58827412b184a5dcd0c0f5">c26bebc7</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2022-08-26T17:49:57-05:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Move vlvtasks.ldif to database/ds/vlvtasks.ldif

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/632fb85f568a843f524eeed6f24c9e2e9f325545">632fb85f</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2022-08-29T08:34:28-05:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Reorganize test for basic sub-CA

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/4af415c6e5d2ab00ce51ef1ae0adf62e61ba331e">4af415c6</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2022-08-29T08:34:28-05:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Reorganize test for sub-CA with CMC

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/0e085db958f93ea0c4923d7104706a9d82d71132">0e085db9</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2022-08-29T08:34:28-05:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Reorganize test for sub-CA with external cert

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/fd19666e0655975c2d30feba63753ef40005b1b8">fd19666e</a></strong>

<div>

<span> by Rob Crittenden </span> <i> at 2022-08-29T10:05:41-05:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Fix HSM installation where the token password differs from internal

In some cases only one password will be passed. Send the the one

that NSS will most likely need.

If there is a token, in general provide the token password.

If modifying certificate trust, always provide the internal password

since that is where trust is stored.

Signed-off-by: Rob Crittenden <rcritten@redhat.com>

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/25d68dc2fd7f77ebc427fb130911c6dadcb5c8f1">25d68dc2</a></strong>

<div>

<span> by Rob Crittenden </span> <i> at 2022-08-29T10:05:41-05:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Don't use JSS to add the system certificates to the NSS db

When use_uss=True the command pki nss-cert-import is called

which does not provide a password to the generated

certutil command. The end-user must provide it interatively

for the four service certificates during pki-spawn.

When use_jss=False set runas to True so that software-based

tokens (softhsm) will generate correct ownership.

Utilize the tmpdir provided by the class to remove the

try/finally block.

Signed-off-by: Rob Crittenden <rcritten@redhat.com>

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/a115418c19e5a2115c0305ed9889392339a74372">a115418c</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2022-08-29T10:17:58-05:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Clean up test job names

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/0f04fcc18b1ae751a787965e45f0506ddc60a466">0f04fcc1</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2022-08-29T11:37:29-05:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Add PKIDeployer.setup_database()

The code that sets up the database during installation has been

moved into PKIDeployer.setup_database().

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/df7b27b055ff3646b9226e5992abd4a9d5b0f37b">df7b27b0</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2022-08-30T08:30:21-05:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Reorganize test for CA with existing certs

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/e0b953cc790defdaa1cc61654e1d24d7c43e4604">e0b953cc</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2022-08-30T08:30:21-05:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Reorganize test for CA with existing NSS database

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/dc864f6a806af320e6b75c812ebdf55ae37937a6">dc864f6a</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2022-08-30T08:30:21-05:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Reorganize test for CA with shared token

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/7332dedeeb001f4d71e40758f669edf2c9abb387">7332dede</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2022-08-30T13:16:28-05:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Add test for CA installation with existing DS

A new pki_ds_setup parameter has been added for setting up the

DS during installation (default: True).

A new test has been added to set up the DS before installing CA,

then install the CA without setting up the DS again.

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/99aabd413019d2fd6b45436c73af829b2e6dd864">99aabd41</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2022-08-30T13:16:28-05:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Update test for CA container to use existing DS

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/d43096409e9f85deaeb9c61f14ba9d46e49a103e">d4309640</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2022-08-30T13:26:08-05:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Clean up CA tests

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/320afd2b5f5b6439d0da5b31abe1919a2fa68ed8">320afd2b</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2022-08-30T15:30:28-05:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Rename IDBVirtualList to DBVirtualList

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/69aced56758eb9f89ee426783cf9b37e5fdcc5ef">69aced56</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2022-08-30T15:34:41-05:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Merge DBVirtualListDefaultStub into DBVirtualList

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/0eba12068357577c98eab2797c58015528869c8d">0eba1206</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2022-08-30T15:43:25-05:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Merge IPasswordCheck into PasswordChecker

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/6ec97894ae89d9708d56614a8e7f836c3b325fe8">6ec97894</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2022-08-31T10:38:13-05:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Reorganize test for CA with HSM

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/96d0f3e8476cca6017571fc0791eb34c739623a4">96d0f3e8</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2022-08-31T10:38:13-05:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Reorganize test for CA container

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/5d73f70c2b7894bb0332535a0b8453f4e2c85ab9">5d73f70c</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2022-08-31T10:38:13-05:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Reorganize test for CA clone

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/ae28009ea09d150cc5ddd663fe7e78559a83079f">ae28009e</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2022-08-31T10:38:13-05:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Reorganize test for CA with secure DS

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/5375da8ba0b2c69ee216e5c403bb6000b8ada514">5375da8b</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2022-08-31T10:38:13-05:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Reorganize test for CA clone with secure DS

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/66b441c1e0836e2e04eede7c2e71071f1038830d">66b441c1</a></strong>

<div>

<span> by jmagne </span> <i> at 2022-08-31T09:47:50-07:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Fix Bug 2122409 - pki-tomcat/kra unable to decrypt when using RSA-OAEP padding in RHEL9 with FIPS enabled (#4130)

This fix allows the "pki kra-key" cmds the ability to specify OAEP wrapping of the sesssion key before sending the request to the server.

    Ex:

    pki -d . -v -oaep -n  "PKI KRA Administrator for CA RSA" -h  test.host.com -p 19443   kra-key-archive --clientKeyID ID-1 --passphrase 1234

    This example will archive the key using oaep to wrap the session key before sending to the server. If the server / kra is configured to use oaep

    instead of pkcs1, the operation will be successful.

    There will be a similiar "-oaep" switch available fo the kra-key-retrieve cmd as well.</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/f4dece6875deebe0e5e7aa54172ee5b9db1af275">f4dece68</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2022-08-31T13:51:58-05:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Add docs for publishing config classes

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/80200a76eddd398b2273a11b31898249dc4f477d">80200a76</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2022-08-31T13:52:04-05:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Add PublishingConfig.isEnabled()

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/82615d08a6dc4409057fb63b45f680d67c49e6d9">82615d08</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2022-08-31T13:52:04-05:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Add PublishingConfig.isCertEnabled()

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/9d7e7ab364ea5f8e2bed33a6301938f496aa3558">9d7e7ab3</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2022-08-31T13:52:04-05:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Add PublishingConfig.isCRLEnabled()

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/e36cb85799e12a070f281d17e12c7e8a6de66302">e36cb857</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2022-08-31T13:52:38-05:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Display request IDs in hex

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/83ebbbd5e0d4e71c2c80be23a5d853a5fc24f0e0">83ebbbd5</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2022-08-31T16:03:34-05:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Update log messages in CRL classes

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/3b4208072d4a2cce1ae0b2b239972b5d6bc05946">3b420807</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2022-08-31T16:03:34-05:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Update log messages in publishing classes

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/c386888dd877cb6f9b75a0bc235fb6e869276bb7">c386888d</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2022-09-01T10:01:52-05:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Add test for user cert publishing

A new test has been added to verify user cert publishing in CA.

When a new cert is issued, it will be added into the user entry

in LDAP. If the cert is revoked, it will be removed from the

user entry. If the cert is unrevoked, it will be restored into

the user entry.

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/fcbd231f10209b552d251d2266acb91511884134">fcbd231f</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2022-09-01T16:03:11-05:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Fix artifacts gathering in CA container test

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/d4b3e178b1b4b6c25240f90696d0e46bf0f900da">d4b3e178</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2022-09-01T17:01:55-05:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Update CA test names

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/9601b66acb02f2cca24a8cdcf5db625e0cc75e57">9601b66a</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2022-09-02T08:33:59-05:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Reorganize test for CA with RSNv1

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/056b518f359f126184506349a27839830adc3fab">056b518f</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2022-09-02T08:33:59-05:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Reorganize test for CA with sequential serial numbers

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/b86e8cc022199b42ccaafe7970d11327649a2745">b86e8cc0</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2022-09-02T08:33:59-05:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Reorganize test for CA with CA cert publishing

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/22b00c4d5cc0f3924df2a62ce23628610c7f7f8b">22b00c4d</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2022-09-02T08:33:59-05:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Reorganize test for CA with file-based CRL publishing

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/d17308ef55a7525236bdb61be831ed83586aa652">d17308ef</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2022-09-02T08:33:59-05:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Reorganize test for CA with LDAP-based CRL publishing

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/86ad5909c1d6cf84c01646739e965fa1f55b8a31">86ad5909</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2022-09-02T08:33:59-05:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Reorganize test for SCEP responder

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/b3e193aaad0f3c01ffb193991397c17f28983c16">b3e193aa</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2022-09-02T10:25:43-05:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Use ExcludeArch on older platforms

java_arches macro is only available on newer platforms, so

the spec file has been modified to use ExcludeArch on older

platforms.

The build dependency on redhat-rpm-config has been dropped

since it is installed automatically by the build system.

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/7368867181e805a34ce92c5df1732f4c5b3ad5f5">73688671</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2022-09-02T10:43:48-05:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Update CA container to support existing database user

The CA container test has been modified to set up a database

user before starting up the CA container. The pki-ca-run has

been modified to use the existing (i.e. shared) database user.

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/e9a7cbfd84b071b5d200c96ae209d79d4737fbde">e9a7cbfd</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2022-09-02T15:52:08-05:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Clean up installation summary

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/65827fd9682dcf3ce77e311decba8456a62f1f70">65827fd9</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2022-09-02T15:52:11-05:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Clean up CA test name

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/69fa10d6e6d740631030a50ff454b05a53601bfe">69fa10d6</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2022-09-02T15:52:11-05:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Consolidate PKISubsystem.configure_security_domain() calls

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/568d33d7b3aa4e6be572c6f20deb423ad0f6256f">568d33d7</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2022-09-02T18:21:24-05:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Add pki-server sd-create --name option

The pki-server sd-create command has been modified to provide

an option to specify the security domain name.

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/a6bd0f7e06101f81b1e65b7ca3ac16cfaeb4f61d">a6bd0f7e</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2022-09-02T21:15:06-05:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Add PKIDeployer.setup_security_domain_manager()

The code that sets up the security domain manager has been moved

to PKIDeployer.setup_security_domain_manager().

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/14a3c475212bb0d0511b1f415bfa77a1a4028e14">14a3c475</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2022-09-02T21:15:13-05:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Add PKIDeployer.setup_security_domain()

The code that sets up the security domain has been moved into

PKIDeployer.setup_security_domain().

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/56f607d0ee88cfe918f72d61d10ff15c8a9c20fa">56f607d0</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2022-09-06T11:37:15-05:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Update CA container to support existing admin user

A new pki_admin_setup parameter has been added to set up the

admin user during installation (default: True).

The CA container test has been updated to set up an admin user

before creating the CA container. The pki-ca-run has been

modified to use the existing admin user.

The test has also been updated to use the existing certs already

in the client container to ensure they can be used to access the

CA container.

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/0e25678eed0d5bdbcfb900149e13d730cb1d30da">0e25678e</a></strong>

<div>

<span> by Chris Kelley </span> <i> at 2022-09-07T14:53:04+01:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Fix TPS UI elements broken by XML -> JSON migration

The field names were erroneously changed by not adding JSON tags to

rename the fields like the original XML implementation.

Some new code was introduced that depended on the new, incorrect name,

so that is also fixed.</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/e6c3462132805e51bcc00566e2a5a3dafa8dc91e">e6c34621</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2022-09-07T08:59:38-05:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Fix Azure pipeline

Due to recent changes in Azure or Fedora it's no longer possible

to run tests with the standard Fedora image.

To fix the problem, the Dockerfile has been updated to define a

new Fedora image that provides a systemd service. The Azure job

has been updated to build the image, create a container with the

image, then run the tests with it. The job has also been updated

to test creating a server, starting it up, checking the status,

shutting it down, and removing the server.

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/3c9e278be518d99e1da7ca36ff1e44ce4a34b55e">3c9e278b</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2022-09-07T09:00:09-05:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Update CA container to skip security domain setup

A new pki_security_domain_setup parameter has been added to

set up a security domain and create a subsystem user during

installation (default: True).

The CA container has been modified to skip security domain

setup and subsystem user creation since it's not needed for

container deployments.

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/dd97eb8cf506c6ee5512babfeaef5991d2e1e21b">dd97eb8c</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2022-09-07T12:40:16-05:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Reorganize test for basic KRA

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/714cd0a05f5925c1b52b317c6297e1a4f9a51025">714cd0a0</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2022-09-07T12:40:16-05:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Reorganize test for KRA on separate instance

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/a642ce2702d18191d69a2dcacbae24e77cd71c28">a642ce27</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2022-09-07T12:40:16-05:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Reorganize test for KRA with external certs

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/3ddfcd7c1505895a6c69af042ab14f1ea074cf1f">3ddfcd7c</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2022-09-07T12:40:16-05:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Reorganize test for KRA with CMC

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/7e37e5e654a9aec9cb24149f510fa9c2316b4bd0">7e37e5e6</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2022-09-07T12:40:16-05:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Reorganize test for KRA clone

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/98d95f1f5c7090aa6658f25f667ca99f749c248a">98d95f1f</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2022-09-07T12:40:16-05:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Reorganize test for standalone KRA

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/f7f633c6499e21287d60fdb2f14772106ec71db4">f7f633c6</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2022-09-07T12:40:16-05:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Reorganize test for KRA with RSNv3

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/4e5da18474c8da2b4bc2f3d03fc40056b59e1037">4e5da184</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2022-09-07T12:40:43-05:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Reorganize test for ACME with certbot

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/4db17b7ebcc5df02a5895deea570790203eb665b">4db17b7e</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2022-09-07T12:40:43-05:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Reorganize test for ACME server switchover

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/5b02f64f9c19b3b0deb69a263e28e910014e3dd5">5b02f64f</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2022-09-07T12:40:43-05:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Reorganize test for ACME container

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/18859d2733f56ab66c02c89f19d3de2d71a9605d">18859d27</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2022-09-07T20:33:22-05:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Update log messages in EnrollProfile

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/d70ef172086a5b5c35baa27b6b03620eef960486">d70ef172</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2022-09-07T20:33:38-05:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Update log messages in CAEnrollProfile

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/a5f074aa1f1170530569d8f3dafe37b3e9762e18">a5f074aa</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2022-09-07T20:33:54-05:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Update log messages in EnrollServlet

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/b87b989766f315e9e8d09225fa38615217ba8cd0">b87b9897</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2022-09-07T20:34:14-05:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Update log messages in RevocationProcessor

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/7cc33dbab46f7d5d69a78cfe7d3994d2880018fd">7cc33dba</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2022-09-07T20:34:26-05:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Update log messages in RevocationRequestListener

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/23e0bf61feb3087105f98d43b25345737fe7c7bd">23e0bf61</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2022-09-07T20:34:35-05:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Update log messages in PublisherProcessor

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/081f99f7cbdc8ba083b540699d815c78369e5b3a">081f99f7</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2022-09-07T20:35:06-05:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Update log messages in LdapEnrollmentListener

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/7a31eaf5ee28dd74d8d91806c721087aee79243b">7a31eaf5</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2022-09-07T20:35:38-05:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Update log messages in RunListeners

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/5eee267f3c0a632d3b20cc6fb25c67f90854fe7b">5eee267f</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2022-09-07T20:39:08-05:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Update log messages in RequestNotifier

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/6f5a07c070dae05edf23d85047b9181861edfa7e">6f5a07c0</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2022-09-07T20:39:08-05:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Update log messages in CertRequestService

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/7b922b6bfc2644d9a949722f57668bedf4fb7baa">7b922b6b</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2022-09-07T20:39:08-05:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Update log messages in AccountService

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/1c30ccbd641d475fd7f67fde82d6e7ddba1462d9">1c30ccbd</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2022-09-08T18:48:19-05:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Update CA container to skip system certs import

A new pki_import_system_certs parameter has been added

to import externally provided system certs into the LDAP

database during installation (default: True).

The CA container has been modified to skip importing the

provided system certs into LDAP database since they are

not needed for the CA to be functional. The system certs

will still be imported into the NSS database so the CA

can use them.

The CA container test has been updated to perform cert

enrollments to verify that it is functional without the

system certs in the LDAP database.

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/122165e3d06a279558026978b2fe0996ba0c7c48">122165e3</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2022-09-09T10:02:59-05:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Fix Java home directory

Previously the build.sh would convert the Java home directory

provided by pki.spec into an absolute path which would point

to a specific OpenJDK release used to build the package. This

prevented PKI from running with other OpenJDK releases.

The build.sh has been modified to use the original Java home

directory provided by pki.spec which is a generic path that

will work across multiple OpenJDK releases.

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/09a0b705a7f84e9f9c5b6e9a5ff37dc0dceecc77">09a0b705</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2022-09-09T10:03:17-05:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Reorganize test for PKICertImport

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/2bff2660b0cd10422a197129da5f6f1804c19b3e">2bff2660</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2022-09-09T10:03:17-05:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Reorganize test for PKI NSS CLI with RSA

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/7965f3623f884ddca5a38f95e5ca8a5ec67b739b">7965f362</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2022-09-09T10:03:17-05:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Reorganize test for PKI NSS CLI with ECC

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/a6451f195e4b05d5b2c1913833a691282f74aeac">a6451f19</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2022-09-09T10:03:17-05:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Reorganize test for PKI NSS CLI with AES

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/5312ef8e05a020da4e677e0f7d30ed75f2b22c59">5312ef8e</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2022-09-09T10:03:17-05:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Reorganize test for PKI NSS CLI with HSM

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/ba8faa03f34cfbfcfe6f270d206d210c40a2e4b5">ba8faa03</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2022-09-09T10:03:17-05:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Reorganize test for PKI NSS CLI with Extensions

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/ffc56d223b978410a1f17ab14808baa76a2d0ccb">ffc56d22</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2022-09-09T10:03:17-05:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Reorganize test for PKI PKCS7 CLI

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/b8d5bab36c7cc3c046791128b5f44cb42eee312a">b8d5bab3</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2022-09-09T10:03:17-05:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Reorganize test for PKI PKCS11 CLI

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/438b55073fa510f780e869d2a8c7e0e060872478">438b5507</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2022-09-09T10:03:17-05:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Reorganize test for PKI PKCS12 CLI

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/abf23d38a5f51860d80eee674cc22c8839ad5749">abf23d38</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2022-09-09T10:03:17-05:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Reorganize test for rpminspect

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/42baad13f17bedd62adec6849997bf89c3ef99e5">42baad13</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2022-09-09T10:03:33-05:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Reorganize test for basic server

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/a7c1d3582bf735d10544b75c7af762ea57c5253e">a7c1d358</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2022-09-09T10:03:33-05:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Reorganize test for HTTPS connector with PEM files

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/43fcb04c7d49d008479a4c66355506659783dac9">43fcb04c</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2022-09-09T10:03:33-05:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Reorganize test for HTTPS connector with JKS file

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/ae444b5216bf0a2844c36649c65f0ffadb40ef81">ae444b52</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2022-09-09T10:03:33-05:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Reorganize test for HTTPS connector with PKCS #12 file

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/da537d42222b74d758aa76046f53e97d9ad0daca">da537d42</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2022-09-09T10:03:33-05:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Reorganize test for HTTPS connector with NSS database

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/fc2dcfbc88c5515f589d0e3441b26815f17e9684">fc2dcfbc</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2022-09-09T10:03:33-05:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Reorganize test for server upgrade

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/ab199e3ad3eeae4f0f8f11b1be5581b35ec3224c">ab199e3a</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2022-09-09T10:03:33-05:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Reorganize test for server container

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/df66fa77941417c51192df2c0779c9aa5fbe2b3c">df66fa77</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2022-09-09T10:03:53-05:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Reorganize test for basic OCSP

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/f9c2bbd4eeb4dbac78538427899486a3c83b4aa3">f9c2bbd4</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2022-09-09T10:03:53-05:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Reorganize test for OCSP on separate instance

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/e84cc7e0f2cf08bd98865d425a7b34c9fbb88914">e84cc7e0</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2022-09-09T10:03:53-05:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Reorganize test for OCSP with external certs

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/3752a3fdefd5167d723b507bb0a1921a9a0198da">3752a3fd</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2022-09-09T10:03:53-05:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Reorganize test for OCSP with CMC

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/6325588ad40164609599d5afdb1f34f46aae52e9">6325588a</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2022-09-09T10:03:53-05:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Reorganize test for OCSP clone

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/c009ff54d7a0ec9046ba5ce37204855d5d3f9091">c009ff54</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2022-09-09T10:03:53-05:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Reorganize test for OCSP with direct CRL publishing

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/490a1a3070c512d5f5f8206881a9aa626248862e">490a1a30</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2022-09-09T10:03:53-05:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Reorganize test for OCSP with LDAP-based CRL publishing

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/cf43337ab038e38fbbb25e088e825fee82ddcce5">cf43337a</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2022-09-09T10:04:08-05:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Reorganize test for basic TKS

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/58b8e36045f9c0e2cca787570c4c61d2aa017679">58b8e360</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2022-09-09T10:04:08-05:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Reorganize test for TKS on separate instance

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/001b24593e4a044bab4ce9a06dc688a2f1a9ca7a">001b2459</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2022-09-09T10:04:08-05:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Reorganize test for TKS with external certs

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/011f587e7c2ff6540d5ab0869409fa625023b6da">011f587e</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2022-09-09T10:04:08-05:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Reorganize test for TKS clone

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/e2741451c132dbfce090d32fd458aa8ccfb938e6">e2741451</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2022-09-09T10:04:23-05:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Reorganize test for basic TPS

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/77f0339281dbd63bfcd38d671fe7a767ccbba412">77f03392</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2022-09-09T10:04:23-05:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Reorganize test for TPS on separate instance

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/74db731579b9d54aae9bff3243ef298c5d07d630">74db7315</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2022-09-09T10:04:23-05:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Reorganize test for TPS with external certs

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/685631a21eb91caf87fd8e8a06e6e8e3bbe39231">685631a2</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2022-09-09T10:04:23-05:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Reorganize test for TPS clone

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/8838a92fdc57285509778c924f52bfa5d27387f1">8838a92f</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2022-09-09T10:04:48-05:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Reorganize test for basic IPA

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/f48cc554ae62cfd86c854d9fc8d6be0524658322">f48cc554</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2022-09-09T10:04:48-05:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Reorganize test for IPA ACME

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/5ded80751954c1f5d190d58339b907323d457dbe">5ded8075</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2022-09-09T10:04:48-05:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Reorganize test for IPA clone

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/427ae28b9ad57126f9556033b35f070c8a8947d3">427ae28b</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2022-09-12T09:11:09-05:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Update user cert publishing test

The test for user cert publishing has been updated to create a

short-lived user cert, then verify that the expired cert will

be unpublished (i.e. removed) from the user entry in LDAP.

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/adc2a870a741aeb3bb97b091e886e7937014f2df">adc2a870</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2022-09-12T17:24:13-05:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Update log messages in RequestInQListener and RequestInQueueJob

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/3da98a06979b328be40946ba4fb73d31167d5f73">3da98a06</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2022-09-13T09:23:28-05:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Fix request in queue notifications

Previously the RequestInQListener was not initialized during

startup so the CA did not generate email notifications when

it received certificate requests.

To fix the problem the CAEngine.startupSubsystems() has been

updated to call initRequestInQueueListener() properly.

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/37a81ad464c2578b6a55b125ab5ddbe1101a87ab">37a81ad4</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2022-09-13T09:23:28-05:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Update RequestInQListener to use hex request ID

The RequestInQListener has been modified to generate email

notifications with hexadecimal request IDs.

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/71453bd013b5cc34a1a943742b19705a00277c62">71453bd0</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2022-09-13T09:23:28-05:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Add test for CA with request notification

A new test has been added to verify the request in queue

notifications.

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/61e9b217074fbe7ccde885c075f0ddc465a40bfe">61e9b217</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2022-09-13T13:25:07-05:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Update Job.init() to take JobsScheduler param

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/0741c2bef751bb92a39d03e1aa97149885240099">0741c2be</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2022-09-13T13:25:07-05:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Add JobsSchedulerConfig

The JobsSchedulerConfig has been added to encapsulate

jobsScheduler.* params in CS.cfg.

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/04ca623c13155a98677e83b18d65b508dcc88770">04ca623c</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2022-09-13T13:25:07-05:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Add JobPluginsConfig

The JobPluginsConfig has been added to encapsulate

jobsScheduler.impl.* params in CS.cfg.

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/bd74763343c4e3d845252310398f81b3a2541969">bd747633</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2022-09-13T13:25:07-05:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Add JobsConfig

The JobsConfig has been added to encapsulate jobsScheduler.job.*

params in CS.cfg.

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/c8dbd6e773e4ca6980b865c5642da4d1ca55ecb9">c8dbd6e7</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2022-09-13T14:14:04-05:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Refactor ConfigStore.makeSubStore()

Similar to ConfigStore.getSubStore(), the makeSubStore() has

been updated to allow the caller to specify the class name of

the sub-store to be created.

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/b6c1ef803e58e41d379401b0353cf457544410be">b6c1ef80</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2022-09-13T14:19:26-05:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Add JobConfig

The JobConfig has been added to encapsulate

jobsScheduler.job.<id>.* params in CS.cfg.

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/66d3284f53d27a927dae8523f7c46ddf22eb10ea">66d3284f</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2022-09-13T14:22:09-05:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Add JobsConfig.createJobConfig()

The JobsConfig.createJobConfig() has been added to create

jobsScheduler.job.<id>.* params in CS.cfg.

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/67bd461800cd364f4cea454476cd5ef39cb729b6">67bd4618</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2022-09-13T14:32:17-05:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Add JobsConfig.removeJobConfig()

The JobsConfig.removeJobConfig() has been added to remove

jobsScheduler.job.<id>.* params in CS.cfg.

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/5c1b03ccea20bb4338c38e69ac24d780dbb47940">5c1b03cc</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2022-09-14T12:53:16-05:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Add JobConfig.isEnabled()

The JobConfig.isEnabled() has been added to encapsulate

jobsScheduler.job.<id>.enabled param in CS.cfg.

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/982b49989e6770f004a7e6f03051382802462efc">982b4998</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2022-09-14T12:53:20-05:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Add JobConfig.getPluginName() and setPluginName()

The JobConfig.getPluginName() and setPluginName() have been

added to encapsulate jobsScheduler.job.<id>.pluginName in

CS.cfg.

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/0ed3c4f8d0090f088cd1e64e03f4bf89733a3c82">0ed3c4f8</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2022-09-14T12:53:20-05:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Add JobConfig.getCron()

The JobConfig.getCron() has been added to encapsulate

jobsScheduler.job.<id>.cron param in CS.cfg.

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/2455c56e50d6b34e4ff42be7535325bb3d854dce">2455c56e</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2022-09-14T13:46:35-05:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Clean up acl.properties

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/489cf5acdd92b2d0a877f5ad8f653e6c5114ceb2">489cf5ac</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2022-09-14T14:58:24-05:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Remove unused subsystem ROOT webapps

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/994c64521f785c108d49617cdcac8fb2f04c8336">994c6452</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2022-09-14T17:31:57-05:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Remove redundant code in Job classes

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/aab7be72720060083c9d3021699b04044ad70f90">aab7be72</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2022-09-14T17:32:25-05:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Update log messages in Job classes

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/b5a3fc6f19a669e89abe771061ba7664a29eb47a">b5a3fc6f</a></strong>

<div>

<span> by Rob Crittenden </span> <i> at 2022-09-15T09:25:11-05:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Provide the token password when appropriate in nss-key-find

Only the internal password or password configuration would

be provided. If a token is provided then generate a temporary

file containing and pass that in with -C to the pki command.

Signed-off-by: Rob Crittenden <rcritten@redhat.com>

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/5cf58b55f9d8d6426aa573d94d2e4dbdf33ab55c">5cf58b55</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2022-09-15T11:01:06-05:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Enable role-based security for REST API

Generally the access to the REST API is controlled by the

legacy ACL defined in acl.ldif which is imported into the

LDAP database during installation. Since there is no

automatic database upgrade mechanism, it's not easy to

update the ACL in existing instances.

To avoid the issue, the web.xml files have been modified

to enable role-based security for REST API. This way the

ACL for new REST API can be defined using the standard

security annotations such as @RolesAllowed. The legacy ACL

will continue to work, but in the future they might be

migrated into role-based security as well.

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/aaa934f95e779e56e62a53f9be3c1f797042cfd0">aaa934f9</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2022-09-15T11:01:06-05:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Allow manual job execution

The Job classes have been modified to continue with the

initialization even if the cron param is not available.

This means that the job will not be scheduled and will

need to be run manually.

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/747620185b1a71330893b9432dc912356f948ea7">74762018</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2022-09-15T11:01:06-05:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Add pki <subsystem>-job-start

A new pki <subsystem>-job-start command has been added to run

a job manually in the background. This command is needed in a

to ensure that the job will only run once in the whole cluster.

This command will be handled by JobService.startJob(). This API

can only be invoked by the admin user.

The code in JobsScheduler.run() that creates a thread to run

the job has been moved into startJob() such that it can be

reused by JobService.startJob().

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/b844cb0cd21b68fc9d05c671fbd9ee656681c53d">b844cb0c</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2022-09-15T11:01:06-05:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Update test for user cert publishing

The test for user cert publishing has been updated to test

both automatic and manual unpublishing jobs. With automatic

job, the cert will be unpublished automatically after one

minute. With manual job, the cert will not be unpublished

unless the job is executed manually.

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/16ed23c3fe6d7a8c1b09cf7d98e9e5c648329ec5">16ed23c3</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2022-09-15T11:21:19-05:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Fix pki pkcs12-key-del to show hex key ID

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/0c4427e29a046f1a01f9a4665d005b3e36c69099">0c4427e2</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2022-09-16T09:37:14-05:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Replace pki-start-wait.sh with curl --retry

The pki-start-wait.sh has been replaced with curl --retry

to reduce the number of scripts to maintain.

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/9f3d4000e1ae24a49ab46ed1b9807136f78a4254">9f3d4000</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2022-09-16T09:54:02-05:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Refactor CRLIssuingPoint.processRevokedCerts()

The code in CRLIssuingPoint.processRevokedCerts() that locks

CAEngine.certStatusUpdateTask object has been converted into

a synchronized method in CertStatusUpdateTask class.

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/6ab728f0d32baef388f79c357671c8fe04b23a37">6ab728f0</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2022-09-16T10:00:03-05:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Merge ICMSCRLExtensions into CMSCRLExtensions

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/6353e6510645ddf3da006a3a618119849495cc41">6353e651</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2022-09-16T10:07:55-05:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Convert ICMSCRLExtension into CMSCRLExtension

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/fbcb79ed434e70921c3a103afa1224cb0b43c89f">fbcb79ed</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2022-09-16T10:28:03-05:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Add LDAPAuthenticationConfig.getAuthType()

The LDAPAuthenticationConfig.getAuthType() has been added

to encapsulate <LDAP>.ldapauth.authtype param in CS.cfg.

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/57df8fbcb473b93fbd83c58e4b6a8906837db535">57df8fbc</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2022-09-16T10:33:19-05:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Add LDAPAuthenticationConfig.getClientCertNickname()

The LDAPAuthenticationConfig.getClientCertNickname() has been

added to encapsulate <LDAP>.ldapauth.clientCertNickname param

in CS.cfg.

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/cd19cee26048065dce7c4bdf20d7059a4d502e89">cd19cee2</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2022-09-16T10:33:23-05:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Add LDAPAuthenticationConfig.getBindDN()

The LDAPAuthenticationConfig.getBindDN() has been added to

encapsulate <LDAP>.ldapauth.bindDN param in CS.cfg.

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/6144e533f87866d8b269b4d06e671b503b35235d">6144e533</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2022-09-16T10:34:42-05:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Add LDAPAuthenticationConfig.getBindPassword()

The LDAPAuthenticationConfig.getBindPassword() has been added

to encapsulate <LDAP>.ldapauth.bindPassword param in CS.cfg.

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/9572a3627e132c41cb64fd92988674b1d7115f95">9572a362</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2022-09-16T10:36:57-05:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Add LDAPAuthenticationConfig.getBindPasswordPrompt()

The LDAPAuthenticationConfig.getBindPasswordPrompt() has been

added to encapsulate <LDAP>.ldapauth.bindPWPrompt param in

CS.cfg.

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/a1e69fbef987bda789d47cbeee5ff2e79660f579">a1e69fbe</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2022-09-16T11:38:37-05:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Replace PublisherAdminServlet.mAuth with publishingConfig

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/abe8758887d370d52d4245f4dedf4cbe1ac7cc72">abe87588</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2022-09-16T12:15:54-05:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Add LoggingConfig

The LoggingConfig has been added to encapsulate log.* params

in CS.cfg.

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/04ff72bb18076e1401f2dfb2a7dda9ab9a1c0201">04ff72bb</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2022-09-16T14:12:52-05:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Add LoggerPluginsConfig

The LoggerPluginsConfig has been added to encapsulate

log.impl.* params in CS.cfg.

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/bf0c14b89d800ca0b132a41c9ce2ef2cc49b69c5">bf0c14b8</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2022-09-16T14:18:52-05:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Add LoggersConfig

The LoggersConfig has been added to encapsulate log.instance.*

params in CS.cfg.

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/917e6f2fec42872e0e0a32994d687c366425d489">917e6f2f</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2022-09-16T14:18:55-05:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Add LoggerConfig

The LoggerConfig has been added to encapsulate

log.instance.<id>.* params in CS.cfg.

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/37522f9d0788caa9fceae8dea75f4faac47dc356">37522f9d</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2022-09-16T16:19:41-05:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Merge ILogSubsystem into LogSubsystem

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/26337de1fed05eeee2af81e120007e18e1c739ce">26337de1</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2022-09-16T16:19:54-05:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Rename LogFactory to LogEventFactory

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/9964588e91c8b375375c53d37e5ad5d61015a359">9964588e</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2022-09-16T16:20:40-05:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Merge ILogEventFactory into LogEventFactory

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/be323fcb35738932faa4fb9356c9400c4f774cbb">be323fcb</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2022-09-16T16:25:14-05:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Convert ILogEventListener into LogEventListener

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/004862b191bf23342268afd60c7fed067d0ae0da">004862b1</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2022-09-16T16:28:01-05:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Merge ILogEvent to LogEvent

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/c0e6ea46ff5b8aa1c9b74dab61ee716218324dbd">c0e6ea46</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2022-09-16T17:05:43-05:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Move Logger.mLogger to CMSEngine.mainLogger

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/19ed495004a229d5cb0e3ff34b3441d72aa41c9f">19ed4950</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2022-09-16T17:19:39-05:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Move LogQueue.mLogQueue to CMSEngine.logQueue

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/47136a4cb9bf1f34993fbaeb4a8f83bf96bae0c3">47136a4c</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2022-09-19T10:12:43-05:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Add single-stage CA Dockerfile

A new single-stage Dockerfile has been added for CA such that the

container can be built automatically in Quay.io. This is similar

to the single-stage Dockerfile for ACME in base/acme folder.

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/4ae3da51ee7cc636686c0d434fda2c79fc16c388">4ae3da51</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2022-09-19T14:39:52-05:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Rename CRLIssuingPointExtensionsConfig to CRLExtensionsConfig

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/2afb41ed734412c7c7e91c1230303e97c74cb4ec">2afb41ed</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2022-09-19T15:38:55-05:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Add CRLExtensionConfig

The CRLExtensionConfig has been added to encapsulate CRL

extension config params in CS.cfg.

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/a1db634eaef70ac04b95da460287912d8bbb38f5">a1db634e</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2022-09-20T09:16:03-05:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Add test for CA CRL database

A new test has been added to verify that the CRL database

in CA contains the correct CRL initially, after revocation,

and after unrevocation.

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/a3a739444dc419999ce5e1e61a0464e37739b50e">a3a73944</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2022-09-21T10:30:10-05:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Add pki-server <subsystem>-redeploy

The pki-server <subsystem>-redeploy command has been added to

undeploy then redeploy a subsystem.

The tests have been updated to use the new command.

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/c910b3ad3702e5d6325df0a8ba448409f80c32c9">c910b3ad</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2022-09-21T15:12:35-05:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Clean up Dockerfiles

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/6828f492dab32af21fdb9c3396c55c664a867720">6828f492</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2022-09-22T09:43:54-05:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Rename container image tarballs

In the future the CI workflows might be merged so they can

reuse the same build to reduce redundancies. To prepare for

that, the image tarballs have been renamed to match the

actual image names so that they will be consistent across

different tests.

For now the cache keys will remain unique for each workflow

so that they will not conflict with other workflows. When

the workflows are merged in the future, they will need to

be renamed as well.

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/9de0b7cac413ed885f0bfdc097f597de73a3b2b6">9de0b7ca</a></strong>

<div>

<span> by Chris Kelley </span> <i> at 2022-09-22T23:10:14+01:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Remove pcre dependency

pcre is going to be dropped in Fedora, but we no longer need it

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/442f0b171378190af6d44cd1d473d778d8dbd8b9">442f0b17</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2022-09-22T20:09:25-05:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Replace preop.subsystem.name with pki_subsystem_name

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/0c9fa354540030af0e163d06e5237da28b6a5d74">0c9fa354</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2022-09-22T20:09:25-05:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Remove unused preop params

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/ec871cc8ebb1f5f6c7d4f7159227010c5be9c6d1">ec871cc8</a></strong>

<div>

<span> by Marco Fargetta </span> <i> at 2022-09-23T09:44:44+02:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Move the realm developed for ACME to the server package (#4161)

ACME subsystem contains a set of realm working with the ProxyRealm and

allowing to configure different authentication models.

These realm are moved outside of ACME package so they can be used by

other subsystems (e.g. EST).

Additionally, these realm have been updated to extend the tomcat

RealmBase so they do not need to be wrapped to be used with the

ProxyRealm.

However, the configuration model is different from the container managed

realm so, at the moment, they cannot replace the tomcat realm to use at

container level.</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/9296222e8505f35145b50ae9f993a1656c3a986a">9296222e</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2022-09-23T09:32:35-05:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Fix RPM build warnings due to absolute symlinks

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/15aa3c890d2e0dcd869c15631b7436b14de98f08">15aa3c89</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2022-09-23T09:36:46-05:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Add pki-builder image

The pki-builder image has been added to build the RPM packages.

The pki-runner image has been modified to use the RPM packages

built by pki-builder.

The CI workflows have been modified to no longer build the RPM

packages directly since it will be built automatically when

the pki-runner is built.

The rpminspect test has been modified to run the test inside

pki-builder container since it already contains the RPM packages

and the test scripts.

The .dockerignore has been added to prevent container image

tarballs from being included in subsequent builds.

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/ee0dbd9abba7041ea5c2e127496032e7f6185a2c">ee0dbd9a</a></strong>

<div>

<span> by Marco Fargetta </span> <i> at 2022-09-23T16:39:52+02:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Add roles configuration option to PKIInMemoryRealm (#4167)

Some subsystem could require a specific role in order to work.

Therefore, the in memory realm, which is mainly used for test, should

allow to configure the user and the role.</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/c02fe8c9f20c76f168afea91540e58548c782c9c">c02fe8c9</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2022-09-23T12:20:45-05:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Move CMSEngine.logQueue to LogQueue

The LogQueue singleton has been moved from CMSEngine to LogQueue

to remove dependency on CMSEngine.

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/93e296a30dc68c8395c7ca2d5bf975ee02e8b96d">93e296a3</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2022-09-23T12:20:54-05:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Rename ServerConfiguration to ServerConfig

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/083d81e9ae93c7b827f40454f3f80d1b98fc261d">083d81e9</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2022-09-23T12:20:54-05:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Replace pkicreate.secure_port with ServerConfig.get_secure_port()

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/26c758e3c11fd125a1049a0954d56d9a27c9c14f">26c758e3</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2022-09-23T12:20:54-05:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Move @RolesAllowed from JobService to JobResource

The @RolesAllowed has been moved from JobService into

JobResource so that it will work properly.

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/100d334d99748898274b92db9af371e28341b7e6">100d334d</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2022-09-23T13:32:27-05:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Fix sonarcloud-pull.yml

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/174625143892bbd16e70809ea2ca3159d8e17f2c">17462514</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2022-09-23T14:32:12-05:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Fix sonarcloud-pull.yml (part 2)

The sonarcloud-pull.yml was broken due to recent changes.

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/83782555ec37779861b59e901635ea0b0a64846e">83782555</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2022-09-23T19:43:13-05:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Move CMSEngine.mainLogger to SelfTestSubsystem

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/72d08b714554778f61896253a5de76374037e97b">72d08b71</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2022-09-23T20:13:55-05:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Move serviceUnCert4Crl into separate file

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/fda429f3d52b222582d921e4e0291ce18842fdf4">fda429f3</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2022-09-23T20:15:40-05:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Move serviceCert4Crl into separate file

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/329a1e23ac2eb274145df0abdae368396d968110">329a1e23</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2022-09-23T20:17:11-05:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Move serviceGetCertificates into separate file

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/588904945896270253feb10388146b142af338a3">58890494</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2022-09-23T20:18:30-05:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Move serviceGetRevocationInfo into separate file

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/feabd953d44c4feb93568cd11ba3c38e742276e7">feabd953</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2022-09-23T20:20:19-05:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Move serviceGetCRL into separate file

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/da7a3a0d312b52d994b22fc0668d52a198aaea97">da7a3a0d</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2022-09-23T20:21:53-05:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Move serviceGetCAChain into separate file

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/74e1d49c88233ac48c684ddf6b7650fdd8895d23">74e1d49c</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2022-09-23T20:23:37-05:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Move serviceUnrevoke into separate file

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/1fab9dfeca9109f15edf09b273d74775d53b2ca0">1fab9dfe</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2022-09-23T20:24:53-05:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Move serviceRevoke into separate file

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/163378d085762ee4835dfe91af70de1bfbc80435">163378d0</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2022-09-23T20:26:16-05:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Move serviceCheckChallenge into separate file

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/483db6947824c3623bcdeb4dc752d5a057eb6fea">483db694</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2022-09-23T20:27:55-05:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Move getCertStatus into separate file

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/5ce9e47f9e9b9367927e6540a3ee9149256afeb5">5ce9e47f</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2022-09-23T20:28:58-05:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Move getCertsForChallenge into separate file

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/d54624486d6462285144ab072cb10723b2720c24">d5462448</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2022-09-23T20:30:39-05:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Move serviceRenewal into separate file

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/8810c36c11eb66aa37571cab95690c1c25cec409">8810c36c</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2022-09-23T20:33:15-05:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Move serviceIssue into separate file

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/5720dfedf2aed861314257539e1806b28f9156d1">5720dfed</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2022-09-23T20:35:07-05:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Move IServant into separate file

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/a5a9679555b8338e2b9245e3704772a792ff4300">a5a96795</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2022-09-26T09:14:50-05:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Move ipa-runner image into main Dockerfile

The ipa-runner image has been moved into the main Dockerfile

so that it can be built on top of pki-runner image. The IPA

tests have been modified to use the main Dockerfile.

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/d537f5750bfdb360110221bfa325f0f217ff3a97">d537f575</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2022-09-26T09:17:23-05:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Remove unused pkicreate, pkiremove, os params

The pkicreate.*, pkiremove.*, and os.* params are no longer

used so they have been removed. The upgrade script has been

updated to remove these params from existing instances.

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/8d82302eba34d7fca44860bffd2aee69a0c5a010">8d82302e</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2022-09-26T11:28:16-05:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Add pki <subsystem>-job-find

The pki <subsystem>-job-find command has been added to display

the jobs in a subsystem.

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/33fa359a0b35f752929940956b823e55b5e5980d">33fa359a</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2022-09-26T11:37:48-05:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Add ConnectorsConfig

The ConnectorsConfig has been added to encapsulate

<subsystem>.connector.* params in CS.cfg.

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/73a04b892f3d2c3bfae0a5ec0168d4742c6bca6e">73a04b89</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2022-09-26T11:37:48-05:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Add ConnectorConfig

The ConnectorConfig has been added to encapsulate

<subsystem>.connector.<id>.* params in CS.cfg.

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/a083b937da7f665dc5d5f4bc3843741cbd24d769">a083b937</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2022-09-27T19:43:23-05:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Refactor ConfigStore.getSubStoreNames()

The ConfigStore.getSubStoreNames() has been modified to return

Vector instead of Enumeration.

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/412c64bafe50a76283f6ce40f4044532e6cef321">412c64ba</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2022-09-27T19:43:25-05:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Rename JobService.createJobData() to createJobInfo()

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/269079237b905114b52060bc30157252780eeefa">26907923</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2022-09-27T19:44:14-05:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Update JobsConfig.getJobConfig()

The JobsConfig.getJobConfig() has been updated to return null

if the job does not exist.

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/8378c5eda974e8115d60393db1248dceebe38571">8378c5ed</a></strong>

<div>

<span> by Marco Fargetta </span> <i> at 2022-09-28T10:57:09+02:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Limit the group membership add to existing users (#4171)

Fix the bug https://bugzilla.redhat.com/show_bug.cgi?id=2070335</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/9b2fd7a635acf75d69d47d2cb6f3e083573f0190">9b2fd7a6</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2022-09-28T09:42:12-05:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Add pki-deps image

PKI build and runtime dependencies share a number of RPM

packages, but previously they had to be installed twice,

once in pki-builder image and once in pki-runner image.

A new pki-deps image has been added to provide the runtime

dependencies which can be reused by both pki-builder and

pki-runner. This will eliminate duplicate installation of

about 290 packages.

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/280108511de16f6f360c07bb3852f09ddbb73383">28010851</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2022-09-28T09:43:39-05:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Add pki <subsystem>-job-show

The pki <subsystem>-job-show command has been added to show

job details.

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/2c6c372f49283d40108f5a358d860a839753f8a0">2c6c372f</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2022-10-04T19:40:12-05:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Add ProfileInputsConfig

The ProfileInputsConfig has been added to encapsulate profile

inputs configuration.

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/e77398ca58dcc271948ddd6d1fef91b6105c9e11">e77398ca</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2022-10-04T19:44:18-05:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Add ProfileInputConfig

The ProfileInputConfig has been added to encapsulate profile

input configuration.

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/870a82f3a1fb2b38d9b43dd4184fcb2c57bb48ef">870a82f3</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2022-10-04T19:44:18-05:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Add ProfileOutputsConfig

The ProfileOutputsConfig has been added to encapsulate profile

outputs configuration.

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/1aed9d68fe3a42541a7121a581f5b828bfb62239">1aed9d68</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2022-10-04T19:44:18-05:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Add ProfileOutputConfig

The ProfileOutputConfig has been added to encapsulate profile

output configuration.

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/d539e23e83f832cebf55229f87425bf86556253d">d539e23e</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2022-10-05T09:59:20-05:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Update CRL test

The CRL test has been modified to enroll a cert, revoke it,

then wait until it expires. The cert should be removed

automatically from the CRL in the next CRL update.

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/043515bd9dfdd34dea04d19a3653d1814557db37">043515bd</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2022-10-05T11:46:09-05:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Remove unused system and transaction logs

The system log and transaction log had largely not been

used and mostly had been replaced with debug log and signed

audit log except in SelfTestSubsystem. The SelfTestSubsystem

was still using the transaction log as the default log in

case the selftest log was not enabled, and it's also used to

log failures in selftest logging in case it was enabled.

This code has now been updated to use the debug log instead.

The config params for the system and transaction logs in

CS.cfg have now been removed. The upgrade script has been

updated to remove these params from existing instances.

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/8f0fb16fcaac435cdbb77ace3783ab79efdb6b4e">8f0fb16f</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2022-10-06T17:51:56-05:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Add cache for pki-deps image

The CI build jobs have been modified to build pki-deps image

then store it in GH cache. In the next CI execution the image

will be loaded from the cache, so it could shorten the build

time by about 3 minutes. The cache will be invalidated if the

pki.spec (which defines the dependencies) is modified.

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/ed12f80dae90b0e50242fbe98adda2706271d375">ed12f80d</a></strong>

<div>

<span> by Chris Kelley </span> <i> at 2022-10-24T13:49:46+01:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Update to non-deprecated versions of CI build actions.

Support for node12 will be removed in mid-2023, so futureproof now.</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/dcebdc0e6b466b090c31c80428d5cc67a06b69f1">dcebdc0e</a></strong>

<div>

<span> by Fraser Tweedale </span> <i> at 2022-10-24T10:56:49-05:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>ProxyRealm: setContainer() on RealmBase instances

Instances of RealmBase fail to initialise if the Container has not

been set.  It is hard (impossible?) to get the Container from the

servlet context.  But ProxyRealm instances have the Container set

(if it was initialised by Tomcat itself).

Update ProxyRealm to propagate the Container to proxied RealmBase

instances during registerRealm().

As a result, it is now possible to use "native" RealmBase instances

(e.g. MemoryRealm) with ProxyRealm, as long as they are registered

into the ProxyRealm prior to invoking their init() method.

Part of: https://github.com/dogtagpki/pki/issues/3297

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/3db1650cc00078e258f589ee71667387e053dd76">3db1650c</a></strong>

<div>

<span> by Chris Kelley </span> <i> at 2022-10-25T07:23:52+01:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Update to non-deprecated versions of CI build actions.

Support for node12 will be removed in mid-2023, so futureproof now.

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/0bb91edeed3fd60b0ff709c9d733625dc7da8d70">0bb91ede</a></strong>

<div>

<span> by Chris Kelley </span> <i> at 2022-10-25T07:23:52+01:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Replace deprecated set-output with new $GITHUB_OUPUT variable.

https://github.blog/changelog/2022-10-11-github-actions-deprecating-save-state-and-set-output-commands/

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/712e1b2859cbbce978d445bfe0589db6e53c71b3">712e1b28</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2022-10-25T08:40:44-05:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Update CRMFPopClient to display hex request ID

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/021457f5923fcada153ce11fca16d3f378f6a72d">021457f5</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2022-10-25T08:41:13-05:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Merge common code into Job.init()

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/68de75c87c02621750389b2b39c6071a8985b110">68de75c8</a></strong>

<div>

<span> by Matthew Davis </span> <i> at 2022-10-25T15:08:18-05:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Ticket 1496 Fixed imports of missing certs

Within the import_pkcs7 routine it is possible to attempt to

import a certificate when one does not exist.

This patch only attempts to add certificates when there are

certificates in the pkcs7 source file.

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/a2c59cbdb15cb3ee650b90daade3647eca93fe28">a2c59cbd</a></strong>

<div>

<span> by Matthew Davis </span> <i> at 2022-10-25T15:08:18-05:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Corrected typo in a comment.

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/3a79ffd87991482004a1ee39ca9abca5db19e55b">3a79ffd8</a></strong>

<div>

<span> by Rob Crittenden </span> <i> at 2022-10-25T15:12:30-05:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Provide all passwords to certutil when modifying certificate trust

The certutil -f option supports a password file in the form of

token:password.

It will seek out the correct password for a token when a login

is required. This works in conjunction with

https://bugzilla.mozilla.org/show_bug.cgi?id=1782980 so

trust can be added to a certificate that is only visible on a

token.

Certificate trust is stored in the softokn and not in a PKCS#11

token so both passwords may be necessary when modifying/adding trust.

One to find the certificate on the token and the other to write to

the NSS database.

Signed-off-by: Rob Crittenden <rcritten@redhat.com>

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/a4c2f89b07cd39c8b375aa24fa66bc71cca5e84c">a4c2f89b</a></strong>

<div>

<span> by Rob Crittenden </span> <i> at 2022-10-25T15:12:30-05:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Add token to the NSS nickname when modifying certificate trust

The certificate may only be visible to to the token when standing

up a clone. In order for the trust to be set certutil must be

able to read it. Even though trust is stored in the softokn being

able to see that the certificate exists is enough to proceed.

Signed-off-by: Rob Crittenden <rcritten@redhat.com>

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/40e5b51c1828742a05b7791b1d3203c403fdddcd">40e5b51c</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2022-10-26T10:52:05-05:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Add job owner

The jobs have been modified to support an optional owner. An

owner can only access the jobs they own, while an admin can

access all jobs.

The JobResource has been modified to no longer use @RolesAllowed.

Instead, the JobService has been modified to validate the

authorization inside the method implementation.

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/e8b905062a7071c06658296be86e773ce0529c7e">e8b90506</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2022-10-26T12:33:01-05:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Update test-cert-key-archival.sh

The test-cert-key-archival.sh has been updated to check the

key request.

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/1c8d2ff26ba768217c72bc524a587e3c92c8ef69">1c8d2ff2</a></strong>

<div>

<span> by Marco Fargetta </span> <i> at 2022-10-27T12:26:50+02:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>PKI system with DS down (#4180)

* Allow minConns 0

When this value is set to 0 the connection pool is not used but

connetion are created and deleted on each request.

* Make the AuthotiryMonitor optional

* Modify the option name

enableAuthorityMonitor -> authorityMonitor.enable</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/6bc32dcdba208bddf7915e61374d7a58b1922108">6bc32dcd</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2022-10-27T07:54:28-05:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Add pki-builder-deps

A new pki-builder-deps image has been added to store the

build dependencies. This image will be stored in GH cache

which can shorten the build time by about 2 minutes.

The cache ID, key, and path have been updated since now

the cache contains multiple images.

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/5b2f15d51cc4918ae203b824c9ae7dc9f4945259">5b2f15d5</a></strong>

<div>

<span> by Chris Kelley </span> <i> at 2022-10-27T14:14:07+01:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Introduce new scripts to automate the build process

A new script update_version.sh is introduced, to start to reduce some

of the manual burden of building packages. Usage is as:

./update_version.sh <major> <minor> <update> <phase>

...where phase is optional.

In this first iteration, it does the following:

* Updates the spec version to the new version provided

* Commits that change

* Creates a tag based on the new version provided

* Creates a source tarball based on the new version provided

A companion script is also included to revert the version update, if

required.

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/53d871554afd53da9e9a956cd27078437726d67b">53d87155</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2022-10-27T12:21:31-05:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Update pki ca-cert-request and kra-key-request

The CertRequestInfoFactory and KeyRequestDAO have been modified

to return the request creation and modification time attributes

to the client. The pki ca-cert-request and pki kra-key-request

commands have been updated to display these attributes.

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/5035542ce013bab6c2d3f6677909f87cd1654713">5035542c</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2022-10-27T14:56:48-05:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Update log messages in DateMapper

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/6916629c9c63c39ba746a4b670f0d4f08c2b121e">6916629c</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2022-10-27T14:56:50-05:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Update log messages in LDAPSession

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/c23a259edb9c9540933554b8ffc5e6686c4f1612">c23a259e</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2022-10-27T14:56:50-05:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Update CertificateRepository.updateStatus() to take CertId

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/c612801ccec98b52c00892a5fdc482a195aa4fd2">c612801c</a></strong>

<div>

<span> by Christina Fu </span> <i> at 2022-10-27T17:35:36-07:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Bug2131010-dropping-DHE-ciphersuites

This patch drops the DHE ciphers not working with TLS connections.

fixes https://bugzilla.redhat.com/show_bug.cgi?id=2131010

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/e742e6d703eab5910f204ecc26cef2339fd54e3d">e742e6d7</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2022-10-28T08:02:41-05:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Update REST API path for JobResource.startJob()

The REST API path for JobResource.startJob() has been moved

to /ca/rest/jobs/{id}/start to allow additional operations

(e.g. stop) to be added in the future.

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/51bb76efba1b1c7ead7ac20b2a1e1fc216c1b975">51bb76ef</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2022-10-28T09:24:15-05:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Add IDGenerator enum

A new enum has been added to define supported ID generators.

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/95210209acfa138a26ef05c1fbca3b7a6a283ee7">95210209</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2022-10-28T13:12:55-05:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Consolidate CI initialization jobs

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/7e05fa4a011cdcdd0f1656dd8acc114011c2db47">7e05fa4a</a></strong>

<div>

<span> by Rob Crittenden </span> <i> at 2022-10-28T14:53:32-05:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Generate a CSR in the owned temp directory and move to final location

The key generation needs to be done as pkiuser so generated key

permissions are correct. The final destination of the CSR may be

owned and managed by root. So execute the keygen as the pkiuser

in the NSSDatabase tmp directory and move to the final destination

when complete.

Signed-off-by: Rob Crittenden <rcritten@redhat.com>

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/67872a70be88f0430b4a0f3c2c1ed2f328def766">67872a70</a></strong>

<div>

<span> by Rob Crittenden </span> <i> at 2022-10-28T14:53:32-05:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Pass in user/group when calling keygen so permissions are correct

Since pkispawn runs as root this ensures that any key generation

operations are run as the target user/group, if any, such that

permissions don't need to be changed afterward.

Signed-off-by: Rob Crittenden <rcritten@redhat.com>

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/ac3c6a98f16096e69b8138e43edd0574b3100ab2">ac3c6a98</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2022-10-28T15:18:30-05:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Use try-with-resource in FlatFileAuth

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/f31b865570dff232ab72cfea46e50dabb3b9df44">f31b8655</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2022-10-28T17:16:21-05:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Use try-with-resource in CRSEnrollment

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/03f0335432e0c7207204a0e79735a5a43c840824">03f03354</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2022-10-31T09:06:28-05:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Split SubsystemRangeCLI

The SubsystemRangeCLI has been split into CARangeCLI

and KRARangeCLI.

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/52c473ed4d6d9afbadc7091dff70aaca2c1d4aa2">52c473ed</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2022-10-31T12:11:09-05:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Add constants for default ID generators

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/47156f5238e467ca80978f3e790f489b79b62958">47156f52</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2022-10-31T12:16:08-05:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Refactor SubsystemRangeUpdateCLI

The code in SubsystemRangeUpdateCLI that updates the serial

number and request ranges has been moved into separate methods.

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/dbf5717094f8a925424822bbc8fbf83ccf2e464a">dbf57170</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2022-10-31T15:57:05-05:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Add AuthzManagerConfig.getPluginName() and getRealmName()

The AuthzManagerConfig.getPluginName() and getRealmName() methods

have been added to encapsulate authz.instance.<name>.pluginName

and realm parameters.

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/19ba901b3671b61d6f590f81aaa2a2c65f81f861">19ba901b</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2022-10-31T16:03:58-05:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Update log messages in CRLIssuingPoint

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/f50d3dbd46f729510e29f91fdddfd6e7044e9010">f50d3dbd</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2022-10-31T16:04:33-05:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Update log messages in CRLRepository

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/b46263308ce7fd43374f8d47f76f914ddce7d510">b4626330</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2022-10-31T16:05:15-05:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Update log messages in CertRecordProcessor

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/ed4e702ea8814d7224945cb362853b45af6efcdd">ed4e702e</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2022-11-01T08:40:52-05:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Update pki-server ca-profile-import

The pki-server ca-profile-import has been updated to create

an LDAP connection only if the CA is configured to use an

LDAPProfileSubsystem (e.g. in IPA environment). Normally the

CA is configured to use a file-based ProfileSubsystem so an

LDAP connection is not needed by default.

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/24e44aee1599e961665fd0bd56608630ca5aa778">24e44aee</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2022-11-01T08:58:03-05:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Add ProfilePoliciesConfig

The ProfilePoliciesConfig has been added to encapsulate

profile policies configuration.

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/746c43f08d7470520ad589bcb57db106d2653916">746c43f0</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2022-11-01T10:13:14-05:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Add RequestRepository.removeRequest()

The RequestRepository.removeRequest() has been added to remove

a request record from the repository.

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/c1a1d846fe8abff48b85a8386c01ee17d554d1e8">c1a1d846</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2022-11-01T16:23:12-05:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Remove unused COPR_REPO variables

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/8e7a6d8f4e09ba0eb3e46cdae33e1d9c83ddcda9">8e7a6d8f</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2022-11-01T18:26:25-05:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Fix ds-container-create.sh

The ds-container-create.sh has been modified not to publish

the DS ports to avoid conflicts with other containers.

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/cff43fed5db03c5a9960818771a052b9c57cf3d3">cff43fed</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2022-11-01T20:59:51-05:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Fix database image variables

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/8cdd794a41a5271f1ae3b88da66b0d8d65cd3ea1">8cdd794a</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2022-11-09T21:38:47-06:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Split SubsystemRangeUpdateCLI

The SubsystemRangeUpdateCLI has been split into CARangeUpdateCLI

and KRARangeUpdateCLI to avoid unnecessarily updating ID ranges

if the server is configured with RSNv3.

The CARangeUpdateCLI.updateSerialNumberRange() will update the

cert ID range only if the CA is configured with a legacy cert ID

generator.

The KRARangeUpdateCLI.updateSerialNumberRange() will update the

key ID range only if the KRA is configured with a legacy key ID

generator.

The SubsystemRangeUpdateCLI.updateRequestNumberRange() will

update the cert/key request ID range only if the CA/KRA is

configured with a legacy request ID generator.

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/9e9b303327dd794d727ccb1e3649511e99413747">9e9b3033</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2022-11-09T22:24:09-06:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Add CA database pruning

A new job has been added to prune expired certs and incomplete

requests from CA database. A new test has been added to validate

the functionality.

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/c73247a12df35db4789894db68e47004794a4f7b">c73247a1</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2022-11-11T12:15:47-06:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Use try-with-resource in NSCCommentExt

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/d997574def83ea7fcf3ecf4744d2a36b9245f416">d997574d</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2022-11-11T12:15:47-06:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Use try-with-resource in NuxwdogPasswordStore

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/30abd05d9907b121c359861a77ea65f0105b195e">30abd05d</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2022-11-11T12:15:47-06:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Use try-with-resource in NSSExtensionGenerator

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/f25de59caf570cb428707db990105e65be6df87a">f25de59c</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2022-11-11T12:15:47-06:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Use try-with-resource in GeneratePKIArchiveOptions

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/a32ca0b4b88addc537537fcc74da7d0e1881ca6d">a32ca0b4</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2022-11-11T12:15:47-06:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Use try-with-resource in CMSFile

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/67cab6c57ebcae92eba384a2a97e4b6a4f72101a">67cab6c5</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2022-11-11T12:15:47-06:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Use try-with-resource in CMSTemplate

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/8348fb680a7250893f089689968fbf4b9ad0b77c">8348fb68</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2022-11-11T12:15:47-06:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Use try-with-resource in AuthorityKeyExportCLI

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/1d2410da32d505b6cfcd5bbbe3ac9cce1163859b">1d2410da</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2022-11-14T11:03:29-06:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Add search constraints for CA database pruning

New parameters have been added to specify the size and time

constraints for search operations executed during CA database

pruning.

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/062eb0c6405df9b97739b9f50655b9c704e2912c">062eb0c6</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2022-11-14T11:04:18-06:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Add test for installing KRA with HSM

A new test has been added to verify KRA installation with HSM.

In this case KRA system certs and keys will be created in HSM

except for the subsystem and SSL server certs which are already

created during CA installation. The KRA system certs will also

exist in the internal token but without the keys. Certs that

have a key in the same token can be identified by the "u" trust

flags.

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/f22233078105eeb3e03a318f4d8f82cd8bb86067">f2223307</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2022-11-16T08:53:29-06:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Fix pylint failures on F37

/usr/share/pki/tests/pylintrc:1:0: E0015: Unrecognized option

found: files-output, bad-functions, max-branchs (unrecognized-option)

/usr/lib/python3.11/site-packages/pki/server/deployment/pkiparser.py:278:36:

W1512: Using deprecated class SafeConfigParser of module configparser (deprecated-class)

/usr/lib/python3.11/site-packages/pki/server/deployment/pkiparser.py:295:36:

W1512: Using deprecated class SafeConfigParser of module configparser (deprecated-class)

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/de0139476bc2b29f57a611d43ce0c0e865674a99">de013947</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2022-11-16T10:32:07-06:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Update ACME test to validate database

The ACME test has been updated to validate the content

of CA and ACME databases after various operations.

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/9b3cea9acdfc8108a3b8f54e367906cea113c335">9b3cea9a</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2022-11-16T10:58:24-06:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Fix Azure pipeline failures on F37

The Azure pipelines have been updated to use the proper

library path for the current Python version.

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/3d7864d7d36ab1ac09974fe1e07c43af2b36871a">3d7864d7</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2022-11-16T11:24:56-06:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Add test for installing OCSP with HSM

A new test has been added to verify OCSP installation with HSM.

In this case OCSP system certs and keys will be created in HSM

except for the subsystem and SSL server certs which are already

created during CA installation. The OCSP system certs will also

exist in the internal token but without the keys. Certs that

have a key in the same token can be identified by the "u" trust

flags.

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/76a5b230be2986275456b780af4b63d121449fa6">76a5b230</a></strong>

<div>

<span> by Rob Crittenden </span> <i> at 2022-11-16T16:12:56-06:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Test whether a PKCS#11 has already been added during deployment

Check whether the HSM shared library has already been added

rather than always attempting to add it. Adding one that

is already configured will fail.

This helps the IPA case where pki_hsm_libfile may be configured

in [DEFAULT] and the deployment failing because adding the module

in the second deployed service fails because it has already

been added.

Signed-off-by: Rob Crittenden <rcritten@redhat.com>

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/d3e2987c1cd32c9e144ceaef9feebf3778576850">d3e2987c</a></strong>

<div>

<span> by Marco Fargetta </span> <i> at 2022-11-17T09:39:48+01:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Disable not usable profiles (#4230)

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/38128046a78539247081e997c3a20a4ab0368fe6">38128046</a></strong>

<div>

<span> by Chris Kelley </span> <i> at 2022-11-17T11:15:05+00:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Prevent banner from being displayed during spawn of KRA/OCSP

Invoking pki commands using --ignore-banner was used to allow automated

deployment, but there were some places where it was not done.

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/781ccd940f5726c807b2d8a0d973983e0171b2de">781ccd94</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2022-11-17T05:58:22-06:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Add test for installing TKS with HSM

A new test has been added to verify TKS installation with HSM.

In this case TKS system certs and keys will be created in HSM

except for the subsystem and SSL server certs which are already

created during CA installation. The TKS system certs will also

exist in the internal token but without the keys. Certs that

have a key in the same token can be identified by the "u" trust

flags.

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/5d99d01302791ac79c33dbafcd864d8c6c6b3f2b">5d99d013</a></strong>

<div>

<span> by Christina Fu </span> <i> at 2022-11-18T16:25:24-08:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Bug2142909-clientCiphers-CS-actingAsClient-master

This patch syncs up the master branch with the latest v10.13

 in regards to Bug2142909.

fixes https://bugzilla.redhat.com/show_bug.cgi?id=2142909

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/3aef34df88fea2471a7b55a2dfc295a7e0cea94d">3aef34df</a></strong>

<div>

<span> by Christina Fu </span> <i> at 2022-11-18T20:26:59-05:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Bug2040525-pkiconsole-nssdb-path

This patch adds a command line option, '-d' to specific path for nssdb.

It also prints out the path to the nssdb when -v is specified.

fixes https://bugzilla.redhat.com/show_bug.cgi?id=2040525

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/4776ff0bd5dfbf16765b074dfd5583f049150812">4776ff0b</a></strong>

<div>

<span> by jmagne </span> <i> at 2022-11-18T20:27:37-05:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Fix recent issue with using pkiconsole with a client auth certificate. (#3986)

Forward port to latest evaluation branch.

The purpose of this fix is to allow a "-n cert-nickname" option, which

gives the user the ability to pick the nickname of the client auth cert

to use when connecting to the server.

Here is an exmple on how to use this new simpl feature:

 pkiconsole -v https://test.host.com:18443/ca -d ~/.redhat-idm-console -n SubCA_AdminV

Note the -n options specifies the name of of the desired SSL client auth certificate to present

to the server.

If the option is not present , no server cert nickname will be presented to the server.

The tool will work as it did previously in this case.

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/a141b92dfb999aa58e1478b41fef13931846181d">a141b92d</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2022-11-21T18:17:46+07:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Add test for installing TPS with HSM

A new test has been added to verify TPS installation with HSM.

In this case TPS system certs and keys will be created in HSM

except for the subsystem and SSL server certs which are already

created during CA installation. The TPS system certs will also

exist in the internal token but without the keys. Certs that

have a key in the same token can be identified by the "u" trust

flags.

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/634fd111818c09839e724ab82e29e96e4471e2f8">634fd111</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2022-11-22T10:58:47+07:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Remove redundant assignments

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/0a8bbe3919960a472b2c687fbf95bc30e6f87391">0a8bbe39</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2022-11-22T17:18:26+07:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Fix temporary SSL server key removal

In the past pkispawn used the same nickname for the temporary

and the permanent SSL server certs. Initially it would create

the temporary cert and the key, then it would create the

permanent cert with the same key, then drop the temporary

cert while keeping the key.

Recently the code was changed to use separate nicknames to

simplify installation which would generate separate keys too.

It removed the temporary cert, but not the temporary key. Now

the code has been updated to remove the temporary key as well.

Some tests have been modified to check for orphaned keys after

installation.

Resolves: https://github.com/dogtagpki/pki/issues/4103

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/453dd684451f1e0ee074d4450b7f457f760e69a4">453dd684</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2022-11-22T17:34:52+07:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Use try-with-resource in AuditVerify

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/d03e672481adbae6468af71a79ed3a2451e67168">d03e6724</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2022-11-22T17:34:52+07:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Use try-with-resource in CMCRequest

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/8d7cdc34538ff88e468dcac4335b2ba519246788">8d7cdc34</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2022-11-22T17:34:52+07:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Use try-with-resource in CRMFPopClient

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/e4cb66dabe5f1a1f685f889136f21461e998379f">e4cb66da</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2022-11-22T18:03:34+07:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Remove unused GetDomainXML

The legacy GetDomainXML servlet has long been replaced with

the REST API provided by SecurityDomainService.getDomainInfo()

so it can be safely removed.

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/6abe6d11a9541ca80563674100fb14bb8f873e14">6abe6d11</a></strong>

<div>

<span> by Chris Kelley </span> <i> at 2022-11-22T19:12:30+00:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Replace unnecessary else clauses with ternary operator.</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/095a1f6eaaaabba1d5520468a7f438f5608a0861">095a1f6e</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2022-11-24T18:54:37+07:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Update HSM password in tests and docs

The HSM password in the tests and docs has been changed to

show where it is used and that it can be different from the

internal NSS database password.

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/a7e0e2079691511eaafd61d3f70c928d9c7a9fbd">a7e0e207</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2022-11-25T08:28:27+07:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Clean up test for CA with existing certs

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/66bfbd81512d2689080bc55cab059c10a3bbc945">66bfbd81</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2022-11-25T08:28:28+07:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Clean up test for CA with existing NSS database

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/e1a09e5c85f1eabf1368b745a609532c81feaccb">e1a09e5c</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2022-11-25T17:34:51+07:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Replace actions/checkout@v2 with actions/checkout@v3

https://github.blog/changelog/2022-09-22-github-actions-all-actions-will-begin-running-on-node16-instead-of-node12/

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/aee67aa9011f285bbfa7cec1890ebc0c0e4a7c6f">aee67aa9</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2022-11-25T19:09:30+07:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Add test for CA with existing HSM

A new test has been added to install CA with certs and keys

already existing in HSM.

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/bee5ca6ec99353461e1a23c84d00806d55ed1e8e">bee5ca6e</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2022-11-28T10:51:16+07:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Update ipa-artifacts-save.sh to include ipaserver-kra-install.log

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/54dcdf164abd38f24e4ea14a585310aea4f337a9">54dcdf16</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2022-11-28T11:47:06+07:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Remove redundant subsystem folder creation

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/b9a841f964679cb6eecdfd6fa3a1ee274516ee53">b9a841f9</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2022-11-28T14:30:34+07:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Clean up infrastructure_layout.py (part 1)

The code that creates the folders belonging to a PKI instance

has been moved into instance_layout.py.

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/73cc0ae62f535068fd8dd0720d802a2f6a866632">73cc0ae6</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2022-11-28T14:30:34+07:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Clean up infrastructure_layout.py (part 2)

The code that creates/removes the folder that stores the config

files for all PKI instances has been removed since the folder is

owned by the RPM package and not supposed to be customizable.

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/4afd5c2f09ca7100ae23c51579159962d871144b">4afd5c2f</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2022-11-28T14:30:34+07:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Clean up infrastructure_layout.py (part 3)

The code that creates/removes the folder that stores all PKI

instances has been removed since the folder is owned by the

RPM package and not supposed to be customizable.

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/4cadcac081a6c971d40603cc3d5acd3a717f323c">4cadcac0</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2022-11-28T19:37:17+07:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Add test for sub CA with HSM

A new test has been added to verify sub CA installation with HSM.

In this case the sub CA system certs and keys will be created in

HSM except for the SSL server cert. The root CA signing cert and

all sub CA system certs will also exist in the internal token as

well, but only the SSL server cert will have a key.

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/23a625ccada16814c6648a3f8a5b97156ab15fde">23a625cc</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2022-11-28T20:59:11+07:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Update HSM token name in docs for clarity

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/a85944a228e05f2737aa172aa057a9775f60150c">a85944a2</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2022-11-29T00:23:59+07:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Remove unused logAudit.* and logError.* params

The CS.cfg files have been modified to no longer provide

logAudit.* and logError.* params.

The upgrade script has been updated to remove these params

from existing instances.

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/7f866fc58794bb7e85bf64833eace6d358fb1b9c">7f866fc5</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2022-11-29T07:40:09+07:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Restore standalone OCSP installation test

Previously there was a standalone OCSP installation test, but

it was converted into CRL publishing tests.

In the future it might be important to test other installation-

related operations without the complexity of CRL publishing, so

the original test has now been restored.

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/ce50c25349ee48ffc388a2e814701bf3966df37f">ce50c253</a></strong>

<div>

<span> by Chris Kelley </span> <i> at 2022-11-29T09:11:55+00:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Use ternary operator in AuthorityKeyIdentifierExtDefault</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/7d13e88d265f2324ca8dab2ca3e777f89a767bf9">7d13e88d</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2022-11-29T18:45:50+07:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Remove redundant service.* params

The code that reads the service.* params has been modified to

get the value from somewhere else. The upgrade script has been

modified to remove these params.

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/dc300cab1bdfdd671f63ebf83cdce1194f8f3c25">dc300cab</a></strong>

<div>

<span> by Fraser Tweedale </span> <i> at 2022-11-29T23:20:14+10:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>EST: implement EST frontend and integrated backend

Implement the EST service as an integrated part of the CA subsystem.

The various interfaces allow for it to be extracted as a separate

subsystem.  The only "big step" to do that is to implement an

alternative `ESTBackend` (i.e. the bits that actually issue

certificates and retrieve CA certificates)

This is a work in progress with the following caveats:

- No authentication of EST client

- No authorization of enrollment requests

- Hardcoded to use `caIPAserviceCert` profile

- Hardcoded `AuthToken` to issue the certificate as user `ipara`,

  with membership in the `Certificate Management Agents` group.

- Only the `/cacerts` and `/simpleenroll` endpoints have been

  implemented.

Part of: https://github.com/dogtagpki/pki/issues/3297

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/3c36f54b29495db16a87026ce3a301fc13b07ac6">3c36f54b</a></strong>

<div>

<span> by Fraser Tweedale </span> <i> at 2022-11-29T23:20:14+10:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>EST: create 'est' subsystem

This commit extracts the EST service as a separate Dogtag subsystem,

called "est".  This commit gets the JAR and RPM building cleanly.

However, the following critical features are still to come:

- An "RA" backend unto the CA subsystem (for cert issuance)

- The ESTApplication class (i.e. the Tomcat application itself)

- Deployment capability (e.g. `pki-server est-deploy` command)

These will be provided in subsequent commits.

Part of: https://github.com/dogtagpki/pki/issues/3297

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/6937d458f2531314c69e6faa6e8ebfd3c5ba134b">6937d458</a></strong>

<div>

<span> by Fraser Tweedale </span> <i> at 2022-11-29T23:20:14+10:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>EST: add ESTApplication (servlet application)

Part of: https://github.com/dogtagpki/pki/issues/3297

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/815e76d0369c928104bb7f46223ab427562aabe9">815e76d0</a></strong>

<div>

<span> by Fraser Tweedale </span> <i> at 2022-11-29T23:20:14+10:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>EST: implement stub RA backend

Implement a stub RA backend that returns 404 (/cacerts) or 500

(/simpleenroll and /simplereenroll).  The behaviour to communicate

with Dogtag CA subsystem will be added in a later commit.

Part of: https://github.com/dogtagpki/pki/issues/3297

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/db3f24cce00ef4c76f06c19c8a8679217743c4e3">db3f24cc</a></strong>

<div>

<span> by Fraser Tweedale </span> <i> at 2022-11-29T23:20:14+10:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>EST: add pki-server est-* CLI commands (+ man page)

Part of: https://github.com/dogtagpki/pki/issues/3297

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/e1091f1957798dcb377b66d5c2c71bb044a6d2d5">e1091f19</a></strong>

<div>

<span> by Fraser Tweedale </span> <i> at 2022-11-29T23:20:14+10:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>EST: remove ProxyRealm from app Context (temporary?)

ProxyRealm seems to be causing issues (realm is null, resulting in

HTTP status 500).  Not yet sure why this is happening but disable it

for now.

Part of: https://github.com/dogtagpki/pki/issues/3297

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/f95df455c5f062ef024b91f5bfc95d919c91cfb7">f95df455</a></strong>

<div>

<span> by Fraser Tweedale </span> <i> at 2022-11-29T23:20:14+10:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>EST: add RewriteValve to server.xml

Add the RewriteValve to the <Host> configuration in server.xml, and

add a rule to send requests for /.well-known/est/... to the EST

service.

The rules are defined in Catalina/localhost/rewrite.config, which is

shipped as part of the pki-server package, rather than pki-est.

This is because the rewrite rules (as required for this application)

are top-level server configuration.  If the EST server is not

deployed, requests for /.well-known/est/... will still be rewritten,

but will result in 404.

This commit DOES NOT provide upgrade scripts to add the RewriteValue

and rewrite.config on existing deployments.  If it is necessary,

this will be added in a subsequent commit.

Part of: https://github.com/dogtagpki/pki/issues/3297

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/a10c2a226b013c6ad405d91675fffcf55a8ab9b4">a10c2a22</a></strong>

<div>

<span> by Fraser Tweedale </span> <i> at 2022-11-29T23:20:14+10:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>EST: map exceptions to proper HTTP responses

Use PKIExceptionMapper to map the various web application exceptions

to the corresponding HTTP response types.

Part of: https://github.com/dogtagpki/pki/issues/3297

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/10357a3098d3a88964fa8e19b956eea8d0c9d203">10357a30</a></strong>

<div>

<span> by Fraser Tweedale </span> <i> at 2022-11-29T23:20:14+10:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>EST: handle dubious Accept headers

At least one EST client is known to send requests with HTTP header

`Accept: text/plain`; see

https://github.com/thales-e-security/estclient/pull/5.

This behaviour is dubious.  It is problematic when communicating

with servers/frameworks that have rigid content negotiation

behaviour (such as JAX-RS).  Nevertheless, the EST protocol uses a

narrow range of media types.  The method and path are sufficient to

determine the request and response media types, regardless of

Content-Type and Accept header values.

To tolerate bogus Accept header values, define and apply a

ContainerRequestFilter that detects when the Accept header does not

match any of the response types used in the EST protocol.  If it

detects this condition it removes the Accept header from the

request.

NOTE: the JAX-RS spec is ambiguous as to whether our use of the API

is legal.  Per the spec,

`ContainerRequestContext.getAcceptableMediaTypes()` returns an

IMMUTABLE `List<MediaType>`.  However,

`ContainerRequestContext.getHeaders()` returns a MUTABLE map of

headers.  We are able to delete the Accept header via that map.  It

seems to be a RestEasy implementation detail that

`getAcceptableMediaTypes()` always reads the Accept header afresh

from the mutable map.

Part of: https://github.com/dogtagpki/pki/issues/3297

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/bbac5f29e3eaf71a5747f8829dc5a917d6543183">bbac5f29</a></strong>

<div>

<span> by Fraser Tweedale </span> <i> at 2022-11-29T23:20:14+10:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>EST: implement backend configuration

Read backend configuration from <instance-dir>/est/backend.conf.

This includes the "class" property which specifies the backend

implementation to use.  Other properties are loaded and made

available to the backend implementation.  In this way, different

implementations may recognise or require different configuration

properties.

Part of: https://github.com/dogtagpki/pki/issues/3297

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/cacd597b9ff13652d2809c6c106721bd911f089a">cacd597b</a></strong>

<div>

<span> by Fraser Tweedale </span> <i> at 2022-11-29T23:20:14+10:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>EST: implement /cacerts in Dogtag RA backend

Implement the /cacerts method in the Dogtag RA backend.

The implementation includes a substantial amount of code to prepare

the configuration for the PKIClient.  Parameters are read from the

ESTBackendConfig following a similar pattern to the ACME PKIIssuer.

The code to actually retrieve the certificate chain from the CA

subsystem is quite succinct.  The AuthorityClient retrieves the

chain as a PEM-encoded PKCS #7 object.  We then parse the response

and extract the certificates.  Nevermind that the EST front-end will

then put those certificates in a new PKCS #7 object and serialise

it.  Fundamentally it is unnecessary work.  But the API is cleaner

and more understandable through the use of proper data types rather

than strings and byte arrays.

Part of: https://github.com/dogtagpki/pki/issues/3297

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/47edb7fa230f7109451613f817229dcea001b1d9">47edb7fa</a></strong>

<div>

<span> by Fraser Tweedale </span> <i> at 2022-11-29T23:20:14+10:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>EST: tighten exceptions thrown by ESTBackend

Restrict ESTBackend endpoint methods to throwing PKIException.

PKIExceptionMapper will turn PKIException (and its subclasses) into

proper HTTP responses.

Also remove the ESTEnrollResult class which is no longer required.

Enrollment failure details will be conveyed by throwing a [subclass

of] PKIException.

Part of: https://github.com/dogtagpki/pki/issues/3297

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/e4dbda2a0572a9ea47083aad9c828edce6fafb47">e4dbda2a</a></strong>

<div>

<span> by Fraser Tweedale </span> <i> at 2022-11-29T23:20:14+10:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>EST: extract ServletContextListener

The recent commit f4aeb60346d59d10d2ae3b213ba407b4df9dbeaa extracted

the ServletContextListener implementation from the "engine" class

for each existing subsystem.  This commit does likewise for the EST

subsystem.

Part of: https://github.com/dogtagpki/pki/issues/3297

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/8f5f9974a62611b53f1e5e79c2a6b065f63b4763">8f5f9974</a></strong>

<div>

<span> by Fraser Tweedale </span> <i> at 2022-11-29T23:20:14+10:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>EST: implement /simple[re]enroll in DogtagRABackend

Following the pattern of the ACME PKIIssuer, implement the issuance

behaviour for the EST /simpleenroll and /simplereenroll endpoints.

The RA account credentials are taken from

<subsystem-dir>/backend.conf, for example:

    class=org.dogtagpki.est.DogtagRABackend

    url=https://f36-0.ipa.test:8443

    profile=estServerCert

    username=estra

    password=4me2Test

Part of: https://github.com/dogtagpki/pki/issues/3297

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/6c9652ed87e05583f829aea7958bbf02e861e14c">6c9652ed</a></strong>

<div>

<span> by Fraser Tweedale </span> <i> at 2022-11-29T23:20:14+10:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>EST: improve logging/reporting of certificate encoding failures

Part of: https://github.com/dogtagpki/pki/issues/3297

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/76b7d6373623ffc35a384dc88a6b2e4263f5dca9">76b7d637</a></strong>

<div>

<span> by Fraser Tweedale </span> <i> at 2022-11-29T23:20:14+10:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>EST: implement /simplereenroll and labeled enrollment

In ESTFrontend, implement /{label}/simpleenroll, /simplereenroll,

and /{label}/simplereenroll.  Authentication and authorization

remain as TODOs and will be implemented in subsequent commits.

As part of this change, extract the CSR parsing and enrollment

response building to separate static methods.

Part of: https://github.com/dogtagpki/pki/issues/3297

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/3c251a0e8db5e9fc1421c092eca9e659f230ae7c">3c251a0e</a></strong>

<div>

<span> by Fraser Tweedale </span> <i> at 2022-11-29T23:20:14+10:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>EST: tighten ESTBackend interface to JSS X509CertImpl

The ESTBackend issuing methods currently return a

java.security.cert.X509Certificate.  The ESTFrontend injects the

returned certificate into a JSS CertificateChain object.  Although

that type accepts an X509Certificate, in fact it will throw an

IOException if the value is not a JSS X509CertImpl (which implements

X509Certificate).

To avoid the possibility of a backend implementation returning an

incompatible value, modify the API to explicitly return values of

type X509CertImpl.

Part of: https://github.com/dogtagpki/pki/issues/3297

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/143c406355e116302df6178cec8c02a658de186f">143c4063</a></strong>

<div>

<span> by Fraser Tweedale </span> <i> at 2022-11-29T23:20:14+10:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>EST: explain the simpleenroll vs simplereenroll correspondence

Add some commentary explaining explaining why DogtagRABackend has

the same behaviour for simpleenroll() and simplereenroll().  Or to

look at it another way, why there are two different methods, even

though this backend currently has the same behaviour for both

methods.

Part of: https://github.com/dogtagpki/pki/issues/3297

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/b1462f3f1333183f38cd1a01feffc8ea92d0d2ca">b1462f3f</a></strong>

<div>

<span> by Fraser Tweedale </span> <i> at 2022-11-29T23:20:14+10:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>EST: format Content-Type header for libest compatibility

The value of the response Content-Type header is derived from the

"@Produces" annotation on the service method.  For example:

    @Produces("application/pkcs7-mime; smime-type=certs-only")

The JAX-RS machinery then converts this into a value of type

javax.ws.rs.core.MediaType, and it is set as such in the

response headers (a MultivaluedMap<String, Object>).

When serialising the Response, header values are stringified via

types that implement the  RuntimeDelegate.HeaderDelegate<T>

interface, where T is the real type of the header value Object

(e.g. MediaType).  The HeaderDelegate implementations are

supplied by the JAX-RS implementation.  In our case that's

Resteasy, and the class in question:

    public class MediaTypeHeaderDelegate

        implements RuntimeDelegate.HeaderDelegate<MediaType>;

The toString(MediaType type) method provided by this class

prints the media type WITHOUT a space between the subtype

and the parameters.  In the example from the @Produces above,

it results in the header value:

    application/pkcs7-mime;smime-type=certs-only

This is a legal production in the HTTP grammar.  From the RFCs

7230 and 7231:

    media-type = type "/" subtype *( OWS ";" OWS parameter )

    OWS = *( SP / HTAB )

However, at least one EST client is unable to process this

value.  libest expects a SPACE after the ';'.  From

src/est/est_client_http.c:

    ...

    } else if (!strncmp(ct, "application/pkcs7-mime; smime-type=certs-only", 45)) {

    ...

The string libest expects is also a valid production.  But it is

not the one being sent from Tomcat/Resteasy.  As a consequence,

the enrollment operation fails.

To make our EST implementation compatible with libest, we need to

override how the MediaType gets stringified.  I was unable to

find a way in the JAX-RS to override the HeaderDelegate.  But we

can solve it in a case-by-case way via this response filter.

At the time response filters are applied, the Content-Type header

value is an object of type MediaType.  If the value is equal

(including parameters) to a value whose serialisation we need

to precisely control, we replace it with the exact String

required.  The String value will be used in the response "as is".

These substitutions are stored in a Map generated from the list

of all verbatim target headers.

If it emerges that different stringifications of the same

MediaType value are required for different client

implementations, we could inspect the request User-Agent header

to further refine the behaviour.  We could, for example, create a

Map for each User-Agent that requires header substitutions, or

change the key of the map to the User-Agent×MediaType pair.

Part of: https://github.com/dogtagpki/pki/issues/3297

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/24e719a5a4c473de50b4caf829b19411727b20fc">24e719a5</a></strong>

<div>

<span> by Fraser Tweedale </span> <i> at 2022-11-29T23:20:14+10:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>EST: support issuing from specified LWCA

Update the DogtagRABackend to interpret the {label} path component,

if given, as an AuthorityID.  Issue the request to the nominated

authority (a.k.a. lightweight CA / LWCA).

Part of: https://github.com/dogtagpki/pki/issues/3297

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/98413dd71979d8d9ab0ec7a43464e6687129853c">98413dd7</a></strong>

<div>

<span> by Fraser Tweedale </span> <i> at 2022-11-29T23:20:14+10:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>EST: require authenticated user for enrollment

Add security contraints to require an authenticated user for

enrollment requests.

This is implemented by requiring an authenticated user for all POST

requests.  It would have been preferable to use paths; unfortunately

we cannot.  In EST, paths such as

`.well-known/est/{label}/simpleenroll` are used, where {label} is

user-specified and interpreted by the server.  But Servlet

<url-pattern> can only match path prefixes.

So far, the set of resources we have implemented are such that all

POST requests require authentication, and all GET requests are

anonymous.  If this changes in the future, we will have to move

authentication down into the application itself.

The valid role name is "**" meaning any authenticated user will be

granted access.  The EST application performs its own authorization

checks (to be implemented in a subsequent commit).

The realm configuration is also left to the administator.  Future

commits may deal with providing alternative means of realm

configuration.

Part of: https://github.com/dogtagpki/pki/issues/3297

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/c148c9707a0279256fd1d73c8213f54bfc86f007">c148c970</a></strong>

<div>

<span> by Fraser Tweedale </span> <i> at 2022-11-29T23:20:14+10:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>EST: add authorization interface

Add the EST authorization interface.  Design sketch:

- abstract class ESTRequestAuthorizer defines the authorization

  interface.  Each enrollment method (currently: simpleenroll and

  simplereenroll) has its own authorization method.

- The arguments of the authorization methods are an

  ESTRequestAuthorizationData and the CSR.

- ESTRequestAuthorizationData contains common data used for making

  authorization decisions, including:

  - authenticated principal

  - client IP address

  - EST path label (if any)

- ESTEngine instantiates and initializes a concrete subclasses of

  ESTRequestAuthorizer according to configuration.

- ESTFrontend enrollment methods construct the

  ESTRequestAuthorization data, accesses the ESTRequestAuthorizer

  via the ESTEngine and invokes the relevant authorization method.

- (Next commit) ESTFrontend passes the Object returned by the

  authorization method to the ESTBackend enrollment method.  In this

  way, arbitrary data generated by the authorizer implementation can

  be consumed by the ESTBackend implementation.

Subsequent commits will implement the authorization result Object

propagation, and provide an authorizer implementation that invokes

an external process to compute the authorization result.

Part of: https://github.com/dogtagpki/pki/issues/3297

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/372fd3c7b3df048c944edbe5a522c9e58e2dcac7">372fd3c7</a></strong>

<div>

<span> by Fraser Tweedale </span> <i> at 2022-11-29T23:20:14+10:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>EST: propagate authorizer output to backend

Propagate the output of the ESTRequestAuthorizer authorization

method to the ESTBackend issuance method.

Part of: https://github.com/dogtagpki/pki/issues/3297

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/01ff6f08793b749b5dc1fffa5daefd48e1db09a3">01ff6f08</a></strong>

<div>

<span> by Fraser Tweedale </span> <i> at 2022-11-29T23:20:14+10:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>EST: implement ExternalProcessRequestAuthorizer

Implement the ExternalProcessRequestAuthorizer.  This implementation

executes the configured executable as a subprocess.  It pipes the

request authz data, CSR and label to the subprocess standard input

as a JSON object.  The request is authorized if the subprocess exits

normally (exit status 0).  If the subprocess does get created but

exits abnormally, throws ForbiddenException using the subprocess

standard output as the message.

Part of: https://github.com/dogtagpki/pki/issues/3297

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/69a14119138b3a1cdad34b19f6abdfece503c12e">69a14119</a></strong>

<div>

<span> by Fraser Tweedale </span> <i> at 2022-11-29T23:20:14+10:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>EST: provide client cert in request authz data

When the EST client uses TLS client certificate authentication,

provide the client certificate chain in the

ESTRequestAuthorizationData.

Also update the ExternalProcessRequestAuthorizer to put the

certificate chain in the JSON object provided to the subprocess

standard input.

Part of: https://github.com/dogtagpki/pki/issues/3297

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/fadfe226ee9e1fa37eaec103a21790eaf0207d72">fadfe226</a></strong>

<div>

<span> by Fraser Tweedale </span> <i> at 2022-11-29T23:20:14+10:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>EST: fix some incorrect visibilities

Some classes and fields had unsuitable visibility, which this commit

addresses.  Specifically:

- The `ESTBackend` `config` field had default (package) visibility,

  but needs to be visible to subclasses (which may be implemented by

  anyone).  Make it `protected`.

- The `ESTRequestAuthorizationData` class had default (package)

  visibility, but it needs to be visible to arbitrary subclasses of

  `ESTRequestAuthorizer`.  Make it `public`.

- The fields of `ESTRequestAuthorizationData` had default (package)

  visibility.  Make them `public` so as to be readable by arbitrary

  subclasses of `ESTRequestAuthorizer`.

Part of: https://github.com/dogtagpki/pki/issues/3297

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/313822fffea01c85079c4836d4bb837d9640d80e">313822ff</a></strong>

<div>

<span> by Fraser Tweedale </span> <i> at 2022-11-29T23:20:14+10:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>EST: improve DogtagRABackend compat with older CA versions

Older versions of Dogtag return CertRequestInfo without the

requestID field, resulting in NullPointerException.  Detect this

condition and fall back to .getRequestId(), which derives the

request ID from the requestURL field.

Part of: https://github.com/dogtagpki/pki/issues/3297

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/9af493cac7ad5ea0d2685ae91a684e42916ac65c">9af493ca</a></strong>

<div>

<span> by Fraser Tweedale </span> <i> at 2022-11-29T23:20:14+10:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>EST: set up rewrite.config when using `pki-server create`

When deploying via `pki-server create`, we fail to install the

`rewrite.config`.  Add this behaviour.

Part of: https://github.com/dogtagpki/pki/issues/3297

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/361d249019bd1ea00c556623dffd922d3e0b01a2">361d2490</a></strong>

<div>

<span> by Fraser Tweedale </span> <i> at 2022-11-29T23:20:14+10:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>EST: add RewriteValve to server.xml when using `pki-server create`

The `pki-server create` deployment regime copies and modifies

`/etc/tomcat/server.xml`, rather than copying the `server.xml`

shipped in the pki-server package.  This `server.xml` does not

include the RewriteValve, which we use to rewrite requests

`/.well-known/est` to the actual application path.

Update the deployment procedure to add RewriteValve to `<Host>`

elements in the `server.xml`.  The behaviour is encapsulated in the

`add_rewrite_valve(document)` staticmethod.  The operation is

idempotent - a no-op if RewriteValve is already present.  Therefore

this method may be useful in upgrade scripts too.

Part of: https://github.com/dogtagpki/pki/issues/3297

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/60f85e7fa35ecacb62895359888945bc43031aae">60f85e7f</a></strong>

<div>

<span> by Fraser Tweedale </span> <i> at 2022-11-29T23:20:14+10:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>EST: treat backend authnz failure as internal error

DogtagRABackend re-raises PKIException thrown by the CAClient.  If

something is misconfigured resulting in the CA subsystem responding

401 or 403, the EST responds the same way.  This is a bug.

Modify DogtagRABackend to inspect the int code of the caught

PKIException.  If  401 or 403, throw a new PKIException (status

500).  Otherwise re-raise, as previously.

Part of: https://github.com/dogtagpki/pki/issues/3297

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/6b10dd218db8a42af8777cdaed314954be36d50d">6b10dd21</a></strong>

<div>

<span> by Fraser Tweedale </span> <i> at 2022-11-29T23:20:14+10:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>EST: compare CSR Subject and SAN to cert being renewed

RFC 7030 Section 4.2.2. "Simple Re-enrollment of Clients" states:

  A certificate request employs the same format as the "simpleenroll"

  request, using the same HTTP content-type.  The request Subject field

  and SubjectAltName extension MUST be identical to the corresponding

  fields in the certificate being renewed/rekeyed.

Implement this requirement.

Note that we really do check that the values are __identical__, by

comparing their DER.  StringPrep, caseIgnoreMatch and GeneralName

type-specific equality rules are not applied.  Nor do we consider

that equivalent SAN values could appear in different orders.

So, we indeed implement the RFC correctly.  But we should not be

surprised if this turns out to be too strict.  Real world scenarios

could necessitate relaxing the check from "identical" to

"equivalent".  But for now, we stay with the strict - and much

simpler! - behaviour.

Part of: https://github.com/dogtagpki/pki/issues/3297

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/8f0e50d3e9ca84eb8798660b99276c00a8f8715d">8f0e50d3</a></strong>

<div>

<span> by Fraser Tweedale </span> <i> at 2022-11-29T23:20:14+10:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>EST: pkispawn: handle already-existing rewrite.config

Some deployment scenarios involve using `pki-server create` and then

running `pkispawn`.  For example, you can explicitly create the

server instance and NSSDB, then install the CA with the existing

database.

Such a scenario currently fails because both steps try to create the

`rewrite.config` symlink.  pkispawn fails with FileExistsError.

Update the code to gracefully handle this scenario.

Part of: https://github.com/dogtagpki/pki/issues/3297

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/99574a22eeb57058c7d71dcd1dc5a8093c73c39f">99574a22</a></strong>

<div>

<span> by Fraser Tweedale </span> <i> at 2022-11-29T23:20:14+10:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>EST: convey to-be-renewed cert to authorizer

In general (although not in our implementation - yet) the

to-be-renewed certificate is not necessarily the same as the client

certificate used to authenticate.  Add a parameter for the

to-be-renewed certificate to the

`ESTRequestAuthorizer.authorizeSimplereenroll()` method.

Also update the `ExternalProcessRequestAuthorizer` to include the

certificate in the `toBeRenewed` field of the JSON data sent to the

child process.

Part of: https://github.com/dogtagpki/pki/issues/3297

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/ee1fa6727e2a258b16378235d370de7da3d885be">ee1fa672</a></strong>

<div>

<span> by Marco Fargetta </span> <i> at 2022-11-29T23:20:14+10:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Adopt PKI ProxyRealm for authentication

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/4258cc2da1d81dc591b56ac8dfc91a41f1edeacb">4258cc2d</a></strong>

<div>

<span> by Fraser Tweedale </span> <i> at 2022-11-29T23:20:14+10:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>EST: enable use of RealmBase realm subclasses

Enable the use of "native" Tomcat RealmBase subclasses (e.g.

MemoryRealm) with the EST subsystem.  The main aspects of this

change are:

- Invoke the LifecycleBase start()/stop() methods at the

  corresponding WebListener lifecycle changes.

- Register the realm with ProxyRealm *before* invoking start().

  ProxyRealm.registerRealm() invokes setContainer(), a prerequisite

  for start() to succeed.

Part of: https://github.com/dogtagpki/pki/issues/3297

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/ea4b586c273a7640c637e9f888da23c1da01e54f">ea4b586c</a></strong>

<div>

<span> by Fraser Tweedale </span> <i> at 2022-11-29T23:20:14+10:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>EST: set properties of RealmBase subclass instances

Currently there is no way to configure instances of Tomcat "bundled"

realms.  For trivial implementations like `MemoryRealm` this is not

an issue.  But for other implementations (e.g. `JNDIRealm`,

`JAASRealm`, etc) a configuration mechanism is necessary.

Tomcat's own configuration mechanism uses introspection to propagate

attributes in the XML `<Realm>` element to the new `Realm` object.

It looks for a setter method whose name is the capitalisation of the

attribute name, prepended with `"set"`.

Update `ESTEngine` to do likewise for the properties in

`realm.conf`, when the realm is an instance of `RealmBase`.  The

`IntrospectionUtils.setProperty` helper method from Tomcat does the

heavy lifting.  We just need to iterate the properties and set each

one.

Properties that have no corresponding setter method or which throw

`IllegalArgumentException` result in a `RuntimeException` that

reports the bad property.  This behaviour forces administrators to

resolve or remove bad properties in `realm.conf`.

Part of: https://github.com/dogtagpki/pki/issues/3297

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/af7ddb31f0cf7101de39be8916fa2f701410db58">af7ddb31</a></strong>

<div>

<span> by Marco Fargetta </span> <i> at 2022-11-29T23:20:14+10:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Add CI test and doc for EST

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/997c670633673d1ddf6a32124f9fc45dd4566e61">997c6706</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2022-11-30T08:24:49+07:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Update version number to 11.3.0-beta1

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/135c9784855f25889d6574c43f69c5a0579856ea">135c9784</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2022-11-30T13:42:14+07:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Update dependencies in pki.spec

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/4c3ca8f24acc23a65472af0a0f54d2afed380bd5">4c3ca8f2</a></strong>

<div>

<span> by Marco Fargetta </span> <i> at 2022-11-30T09:49:13+01:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Add AES in SCEP protocol

Following the SCEP specs (https://www.rfc-editor.org/rfc/rfc8894.txt)

the AES support has been introduced for encrypting certificate massage.

Fix #3324

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/2a8e2182bf8a426689b5b2def5160670655297d7">2a8e2182</a></strong>

<div>

<span> by Marco Fargetta </span> <i> at 2022-11-30T09:49:13+01:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Add OAEP parameters

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/1d7827c3976e0f344fe73a3223bc564a3419a1fc">1d7827c3</a></strong>

<div>

<span> by Marco Fargetta </span> <i> at 2022-11-30T09:49:13+01:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Tidyup CRSEnrollment

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/2ffc5e4dd75c41e0f847fdd47d068ebaab6d4145">2ffc5e4d</a></strong>

<div>

<span> by Marco Fargetta </span> <i> at 2022-11-30T09:49:13+01:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>ADd rsaes_oaep among the key wrapping algorithms

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/0c6398ae7f52e65babda6195c11dc994f06fff81">0c6398ae</a></strong>

<div>

<span> by Marco Fargetta </span> <i> at 2022-11-30T09:49:13+01:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Fix key length

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/31068a42450ba4142c12d996801bc792d9f7f145">31068a42</a></strong>

<div>

<span> by Marco Fargetta </span> <i> at 2022-11-30T09:49:13+01:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Fix key length for padding algorithms

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/27acea80205fc2b4e113d82ac492b14fbbaed6b1">27acea80</a></strong>

<div>

<span> by Marco Fargetta </span> <i> at 2022-11-30T09:49:13+01:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>In case of OAEP move the secret key instead of clone

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/38e36d27f6e9c3654bf7cd76899756621f6fe223">38e36d27</a></strong>

<div>

<span> by Marco Fargetta </span> <i> at 2022-11-30T09:49:13+01:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Move the symmetric key to wrap the reponse

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/042ca7a4aa078edbb4dc1295aa5cf4cd72880d85">042ca7a4</a></strong>

<div>

<span> by Marco Fargetta </span> <i> at 2022-11-30T09:49:13+01:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Fix SonarCloud several code smell

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/0b2423f4cd139dce9813bc712cf1ae8d7628f28d">0b2423f4</a></strong>

<div>

<span> by Marco Fargetta </span> <i> at 2022-11-30T09:49:13+01:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Replace the SymKey clone with wrap and unwrap

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/e80920e79afe83c06e576acdd50566c169b5e3c0">e80920e7</a></strong>

<div>

<span> by Marco Fargetta </span> <i> at 2022-11-30T09:49:13+01:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Fix padding for the unwrap

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/ca90e3238cc1a3999b9e5557f68d6d00e6e7f3e5">ca90e323</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2022-11-30T23:10:34+07:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Fix pki.spec to allow optional theme

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/ed0946252840b6a0d44c1b781d1aa15a5aaef9cb">ed094625</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2022-12-01T14:33:07+07:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Update basic TPS test

The basic TPS test has been updated to run ldapadd in PKI

container instead of in DS container since the input files

are provided by PKI.

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/db21c5b8c4a3264487252434020b0f19228dece4">db21c5b8</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2022-12-01T19:37:39+07:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Use DS container in CI tests

The ds-container-create.sh has been modified such that most

tests will use a DS container which is about 30-60 seconds

faster to create than a regular DS server.

For now tests for secure DS connection will continue to use

a regular DS server, but in the future they may be updated

to use a DS container as well.

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/a5294ffc0f84099cb92d8ce2e3f8fc506ae9578a">a5294ffc</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2022-12-05T09:14:08+07:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Update cloning examples and tests

The cloning examples have been updated to no longer include the

PKCS #12 params by default such that they can be used with other

methods which do not use a PKCS #12 file. The cloning tests with

PKCS #12 file have been modified to provide the required params

for this method.

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/735f5916b8b8e5a1f3632a9d4fd6b17c0f0781b4">735f5916</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2022-12-05T11:50:52+07:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Update version number to 11.4.0-alpha1

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/bf8d7e117bacbc1cf8baa45c5c630b4dd1693892">bf8d7e11</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2022-12-05T20:17:12+07:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Add test for CA clone with HSM

A new test has been added to verify CA cloning with HSM.

In this case the HSM will be cloned first, then the CA

clone will be installed with the certs and keys already

existing in the HSM clone.

Currently there is a discrepancy between the primary CA

and the clones on number of certs in the internal token,

but it doesn't seem to be affecting the functionality.

This will require further investigation.

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/e4396d8ee8a22f34a61f5e8f6ebc6df88f2ba46d">e4396d8e</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2022-12-06T13:43:50+07:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Update pki-ca-authority to display hex serial number

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/fcaee459b8b91d44028c8b6de07666614ad117c1">fcaee459</a></strong>

<div>

<span> by Pritam Singh </span> <i> at 2022-12-06T16:47:46+05:30 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Add --owner option for kra-key-find (#4242)

Fixes: 2144467, 2045101

Signed-off-by: Pritam Singh <prisingh@redhat.com></pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/ac699e6e1bda737dbe6ccec16ca288841bf6d1e0">ac699e6e</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2022-12-06T19:42:29+07:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Add test for lightweight CA

A new test has been added to test basic lightweight CA

operations. The test will install a CA, then create a

lightweight CA, and perform an enrollment against it.

The issued cert should be signed by the lightweight CA.

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/517ee5250393cdb6ae7d83eb9b873a88a15295e9">517ee525</a></strong>

<div>

<span> by Chris Kelley </span> <i> at 2022-12-06T14:37:07+00:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Run Eclipse formatter against generate(Dual)CRMFRequest</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/5e3af6d4d32dd8134fe17f16f52430eb4b31e0db">5e3af6d4</a></strong>

<div>

<span> by Chris Kelley </span> <i> at 2022-12-06T14:37:07+00:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Use try-with-resources in generate(Dual)CRMFRequest</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/906478865c9fc2a966f24799f1a19674139cd9e1">90647886</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2022-12-07T22:37:58+07:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Call apt-get update before apt-get install

Some tests were failing during apt-get install:

$ sudo apt-get -y install libxml2-utils

Reading package lists...

Building dependency tree...

Reading state information...

The following NEW packages will be installed:

  libxml2-utils

0 upgraded, 1 newly installed, 0 to remove and 9 not upgraded.

Need to get 40.2 kB of archives.

After this operation, 206 kB of additional disk space will be used.

Ign:1 http://azure.archive.ubuntu.com/ubuntu jammy-updates/main amd64 libxml2-utils amd64 2.9.13+dfsg-1ubuntu0.1

Err:1 http://azure.archive.ubuntu.com/ubuntu jammy-updates/main amd64 libxml2-utils amd64 2.9.13+dfsg-1ubuntu0.1

  404  Not Found [IP: 52.147.219.192 80]

E: Failed to fetch http://azure.archive.ubuntu.com/ubuntu/pool/main/libx/libxml2/libxml2-utils_2.9.13%2bdfsg-1ubuntu0.1_amd64.deb  404  Not Found [IP: 52.147.219.192 80]

E: Unable to fetch some archives, maybe run apt-get update or try with --fix-missing?

The tests have been updated to call apt-get update first.

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/40c2720b3765700bdaa4735bf463f8e53e390c38">40c2720b</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2022-12-07T22:38:51+07:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Clean up installation log messages

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/60bdf866a716d5154da3185340bca6448493dd42">60bdf866</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2022-12-08T14:20:19+07:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Replace actions/upload-artifact@v2 with actions/upload-artifact@v3

https://github.blog/changelog/2022-09-22-github-actions-all-actions-will-begin-running-on-node16-instead-of-node12/

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/e1ca849d732744c8004e864834388c7c7984b490">e1ca849d</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2022-12-08T17:52:26+07:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Add test for lightweight CA with HSM

Lightweight CA currently does not support HSM, but there is

a plan to support it in the future:

https://github.com/dogtagpki/pki/issues/2412

A new test has been added to see how well lightweight CA

currently works with HSM. The test assumes that by default

the lightweight CA will be stored into the internal token

even though the host CA itself is stored in HSM. Since HSM

is not yet supported, there are failures and they are being

ignored for now. When the support is added in the future

this test will need to be updated.

The existing test for lightweight CA without HSM has also

been updated to validate the information stored in the LDAP

entries.

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/183a8e7819a721ed22b51756b18f13c649d3d18d">183a8e78</a></strong>

<div>

<span> by Chris Kelley </span> <i> at 2022-12-09T08:41:14+00:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Remove unnecessary Boolean literal</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/8e4f08d851fec2a50946dbe892be6a7ef2044745">8e4f08d8</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2022-12-10T00:50:58+07:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Simplify KRA tests

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/920ce80be452a4775b3b3716e8cf581d060928d0">920ce80b</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2022-12-10T00:51:02+07:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Simplify TKS tests

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/904bcd1bb5f6d0bdc55d559e8431ff122d90cb97">904bcd1b</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2022-12-10T02:56:25+07:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Update tests and docs to use pki pkcs12-import

The tests and docs have been updated to import PKCS #12 files

using pki pkcs12-import (which uses JSS) instead of using pki

client-cert-import (which uses pk12util).

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/3322682871c7435aa37015661bf90808d1d9ed67">33226828</a></strong>

<div>

<span> by Marco Fargetta </span> <i> at 2022-12-14T05:25:42+10:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Fix est documentation

The document was missing the roles for the PKIInMemoryRealm

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/5b76b8e2fb69662755c68499bdf1b60daa75328e">5b76b8e2</a></strong>

<div>

<span> by Fraser Tweedale </span> <i> at 2022-12-14T13:00:32+01:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>EST: add commentary to example profile config

Part of: https://github.com/dogtagpki/pki/issues/3297

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/8ec1314355e2c170f793f9519cbffbbd5ab0aca3">8ec13143</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2022-12-14T19:09:44+07:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Consolidate build jobs

The build jobs in all workflows (except in sonarcloud-pull.yml)

have been consolidated into build.yml such that the build will be

created just once by the build workflow, and the test workflows

will use the same build once it's completed.

https://github.com/lewagon/wait-on-check-action

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/58891e682933dc4bda8dc4f8eb370391c97f1e65">58891e68</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2022-12-15T09:34:22+07:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Fix Eclipse warning due to missing encoding

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/6cb2376c0c6e66b5dc1d68afea7e9f5222760800">6cb2376c</a></strong>

<div>

<span> by Chris Kelley </span> <i> at 2022-12-16T14:58:15+00:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Code cleanup in LdapAuthInfo

* Fix ordering of modifiers to match JLS

* Make logger final

* Simplify logic in authInfoOK with ternary operator

* Define variables on separate lines

* Remove exceptions that cannot be thrown</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/3e539b59aaafcad7d106daa783b9939098ad310d">3e539b59</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2022-12-16T23:48:08+07:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Rename fedora-runner image to pki-base

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/ebf5e1100aab20d3f14f6fcc75031b01c00b8135">ebf5e110</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2022-12-16T23:50:21+07:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Replace OS_VERSION variable with BASE_IMAGE

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/e8b19eeab58a703a34d5e377fb4f6efa14d6ba5e">e8b19eea</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2022-12-20T06:44:35+07:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Add publish job

A new job has been added to publish PKI images to GH Packages

after the build job in the master branch is complete.

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/0f098d4be0c7e12695e383c5034badc0ed650e12">0f098d4b</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2022-12-22T20:10:56+07:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Drop default COPR repo

The CI has been modified to no longer use a COPR repo by default

and instead it will install SSCEP, libEST, JSS, Tomcat JSS, and

LDAP SDK from GitHub Packages.

The Azure Pipelines still have a dependency on COPR. It will be

removed separately later.

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/79361198045d75204724b24d8e777c5c08efaef9">79361198</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2023-01-03T16:28:06+07:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Move ProfileAuthenticator.AUTHENTICATED_NAME into AuthManager

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/381fff20d50a95483802d7dff37c70f806276102">381fff20</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2023-01-03T16:33:15+07:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Move ProfileAuthenticator.init() into AuthManager

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/080efb39bba3b65b0eb6bacd9aacf7b042dda353">080efb39</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2023-01-03T16:33:15+07:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Move ProfileAuthenticator.getConfigStore() into AuthManager

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/3c252aeb47889ab67a46b17a3e31da3429ed3f4e">3c252aeb</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2023-01-03T17:31:47+07:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Move ProfileAuthenticator.getName() into AuthManager

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/8cca848e362dd6cfa164962698684b348d83c71a">8cca848e</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2023-01-03T17:37:33+07:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Move ProfileAuthenticator.getText() into AuthManager

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/e300f80cf99528544b3cb5511f1e38cdf076181c">e300f80c</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2023-01-03T17:41:43+07:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Move ProfileAuthenticator.getValueNames() into AuthManager

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/09eebb0e96d5e8fc8e137fd735e6b204ef700de3">09eebb0e</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2023-01-03T17:47:45+07:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Move ProfileAuthenticator.getValueDescriptor() into AuthManager

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/e4334fae65af820646589c153df034a2f775bfef">e4334fae</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2023-01-03T17:51:56+07:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Move ProfileAuthenticator.isValueWriteable() into AuthManager

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/915f0a7bd830223525d1f7fd7e6ee9c1dbcafd35">915f0a7b</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2023-01-03T17:55:26+07:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Move ProfileAuthenticator.isSSLClientRequired() into AuthManager

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/3dcd7bdbca0427d30764fe1a20782a825d051b38">3dcd7bdb</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2023-01-03T18:00:44+07:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Move ProfileAuthenticator.populate() into AuthManager

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/bd729a6b92a8be861446f92322b80d73fde2b8a9">bd729a6b</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2023-01-03T18:07:19+07:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Merge ProfileAuthenticator into AuthManager

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/4d262c37a3225fb2f5a5c4214851e9332c4dec7f">4d262c37</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2023-01-03T20:41:25+07:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Convert AuthManager into class

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/7f9657ae9531e4dee671ad072cde49d702178f87">7f9657ae</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2023-01-03T21:08:14+07:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Consolidate AuthManager.getName() implementations

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/01400f6305b8e80963bcee61c6bd40e7d3931a5a">01400f63</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2023-01-03T21:14:42+07:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Consolidate AuthManager.getImplName() implementations

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/e37fb2f7ea1082ee3f8078f6756ff64d94c996c8">e37fb2f7</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2023-01-03T21:21:35+07:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Consolidate AuthManager.getConfigStore() implementations

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/29acee6ec9d8f8310b6d7172132e0c6be824aa41">29acee6e</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2023-01-03T21:36:18+07:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Consolidate AuthManager.getConfigParams() implementations

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/12b631188330e671511edc3048b60f09539e90bd">12b63118</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2023-01-04T00:18:58+07:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Consolidate AuthManager.getAuthenticationConfig() implementations

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/e710e5be73c5a0b2ec4e1c21952160d420920f48">e710e5be</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2023-01-04T00:41:12+07:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Refactor AuthManager.init()

The AuthManager.init() has been modified to take an

AuthenticationConfig object.

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/673a40d51bd38132107c6bde468a4464b68164a7">673a40d5</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2023-01-04T19:35:48+07:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Clean up exception handling in CMCAuth

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/8db7df0e450190cf9f2d7ed7ff6baf358afafc4a">8db7df0e</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2023-01-04T23:09:15+07:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Relocate CMCAuth

Previously the CMCAuth plugin was distributed in pki-cms.jar

and an instance of the plugin was created by AuthSubsystem in

all subsystems.

Since the plugin is only used by CA, it has now been moved

into pki-ca.jar. The code that creates the instance in

AuthSubsystem has been removed. Instead, the CA config file

has been updated to create the instance.

The config files for KRA, OCSP, TKS, and TPS have been updated

to no longer register the plugin.

An upgrade script has been added to update existing server

instances.

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/f37c7abb59ce68074dc37d65efe1922b969bc514">f37c7abb</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2023-01-04T23:28:15+07:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Fix ACME test failures due to certbot changes

In certbot 2.0 the default key type was changed to ECDSA, so

the ACME tests have been updated to use certbot with RSA keys

explicitly as a workaround. In the future the cert profiles

might need to be modified to support multiple key types.

https://github.com/certbot/certbot/releases/tag/v2.0.0

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/37163cf7b120541bc82e2472b81a7684c4327911">37163cf7</a></strong>

<div>

<span> by Chris Kelley </span> <i> at 2023-01-04T16:52:22+00:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Update Maven dependencies to Jackson v2.14.1

These deps are now available in various Maven repositories, so we

can use them. The compatibility has been tested already in the CI

and it is being used in Fedora already with no issues. This change

also resolves various security issues raised by dependabot.

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/d3df706d9afc0d5061d8b61dd4991c98fa3cfc09">d3df706d</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2023-01-05T09:17:18+07:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Move CMSEngine.getSharedTokenClass() to CAEngine

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/8f1f401ab3bcd60f8f428adcd56a587dcca8acd4">8f1f401a</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2023-01-05T20:54:49+07:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Replace BASE64_MATRIX with BASE64_OS

Previously the BASE64_MATRIX parameter provided a mechanism

to test against multiple Fedora versions at once. However,

since the test resources are limited and only one of the

versions is eventually published, the parameter has been

replaced with a new BASE64_OS parameter which only supports

a single Fedora version.

https://github.com/dogtagpki/pki/wiki/Configuring-Test-OS

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/8305f26f36c34a78db4c6f945cba6df7f55a552d">8305f26f</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2023-01-05T21:56:57+07:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Remove unused CMSServlet.mLogCategory

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/3eae0225c195c95ed479c38fd9d213773b0f5887">3eae0225</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2023-01-05T21:56:57+07:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Clean up UsrGrpAdminServlet.service()

The UsrGrpAdminServlet.service() has been modified to get the

subsystem ID from the servlet context.

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/e19d0b354ce406544268ed5129bd9f794e5fac20">e19d0b35</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2023-01-05T22:02:21+07:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Clean up IndexTemplateFiller.getTemplateParams()

The IndexTemplateFiller.getTemplateParams() has been modified

to get the subsystem ID from the servlet request.

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/a27460ef180299e356d5093ac8f12d897dbf6961">a27460ef</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2023-01-05T22:06:53+07:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Clean up ProcessCertReq.processX509()

The ProcessCertReq.processX509() has been modified to no longer

perform redundant check for local KRA.

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/03ed035fe5ad4d7e32ada2f59495d9cf0fbb77dd">03ed035f</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2023-01-06T07:42:20+07:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Update CMCAuth to use CAEngine

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/7e7b45d3ad6dd66648990905ebafda55f9fe9ffe">7e7b45d3</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2023-01-06T08:43:23+07:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Merge IKeyRecoveryAuthority into KeyRecoveryAuthority

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/a611c3fafaf59259ae3f00fa53dc28f7d60f9dee">a611c3fa</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2023-01-06T10:12:02+07:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Remove unused legacy IKeyArchivalPolicy

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/455c3b2e54c375bda73d9db305ab371139dce0ef">455c3b2e</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2023-01-06T10:21:24+07:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Remove unused legacy IKeyRecoveryPolicy

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/f678a6fefd7faf7f85d791edaf3a374c2b827435">f678a6fe</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2023-01-06T10:21:24+07:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Remove unused legacy DefaultRevocation

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/e47c85013fdf12861ff226349e8bb4dd4aed7c7b">e47c8501</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2023-01-06T23:25:55+07:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Update publish workflow

The publish workflow has been modified to wait for the build

using lewagon/wait-on-check-action instead of on.workflow_run

such that it can be customized to publish the images with the

proper tag for the branch.

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/29e3c64ca9ded0883002b18032d57c321f1482b8">29e3c64c</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2023-01-06T23:57:27+07:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Remove unused CMC params

The cmc.* parameters in the CS.cfg of non-CA subsystems have

been removed since they are only used by CA or not used at all.

A new upgrade script has been added to update existing server

instances.

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/6f8b091843b4532156d4ef2369da5864cf355150">6f8b0918</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2023-01-07T00:20:54+07:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Move SharedSecret to pki-ca

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/efcd1b09f798ee82389f3820b94721cce10abd4b">efcd1b09</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2023-01-09T09:56:36+07:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Update SharedSecret to use CAEngine

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/abf5d948bbed4ff9652a0b32f44df69499f198b3">abf5d948</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2023-01-09T10:23:07+07:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Replace CMSServlet.mAuthority in UpdateDir

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/13686dafa98f826b2d23df55b6a19a3189d44446">13686daf</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2023-01-09T10:23:17+07:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Replace CMSServlet.mAuthority in UpdateCRL

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/cd4f085b9d9a348f5da066752e7cd2ff8abfd453">cd4f085b</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2023-01-09T10:23:21+07:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Replace CMSServlet.mAuthority in SrchCerts

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/b01e6fe6c1d53ebf8ffc4402e6ffdbd769fb1186">b01e6fe6</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2023-01-09T10:23:25+07:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Replace CMSServlet.mAuthority in ReasonToRevoke

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/7e7d76eb6ee6eddf62db934523dd9d2d24c8c7d4">7e7d76eb</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2023-01-09T10:23:29+07:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Replace CMSServlet.mAuthority in Monitor

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/70f80b3d75806a6359270b4630e74c8a782336a9">70f80b3d</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2023-01-09T10:23:37+07:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Replace CMSServlet.mAuthority in ListCerts

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/2373043a6b9045370c31dc5344b9e9ab0959a00b">2373043a</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2023-01-09T10:23:41+07:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Replace CMSServlet.mAuthority in ProcessCertReq

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/0ed1182d73d0e3493c7366655fbc881b9c041c90">0ed1182d</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2023-01-09T10:23:45+07:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Replace CMSServlet.mAuthority in CheckRequest

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/44fbf2e3956810748d81aed4cac92bbc342a3ff5">44fbf2e3</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2023-01-09T10:23:49+07:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Replace CMSServlet.mAuthority in GetCertChain

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/21850bf3c9904cd1d780a9caa1f058237a5d678d">21850bf3</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2023-01-09T10:29:54+07:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Replace CMSServlet.mAuthority in RevocationServlet

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/3105df12799fa9e7d6b07008a7fbe98f33f2146b">3105df12</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2023-01-09T10:29:57+07:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Replace CMSServlet.mAuthority in RenewalServlet

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/256b2ff782fa177535085fa8eba8008ee9d1ca4d">256b2ff7</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2023-01-09T10:31:14+07:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Replace CMSServlet.mAuthority in GetInfo

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/571779f1467be8e765778961b78b4d279190ef15">571779f1</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2023-01-09T10:31:46+07:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Replace CMSServlet.mAuthority in GetEnableStatus

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/1405ad036516b31a820f31c31e502602e397eaf0">1405ad03</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2023-01-09T10:33:19+07:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Replace CMSServlet.mAuthority in GetCRL

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/8d6e01ee9b8c8fc1e1e33cd68bd1744732d7a108">8d6e01ee</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2023-01-09T10:35:36+07:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Replace CMSServlet.mAuthority in GetCAChain

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/0b83d24aa91daa0ef07b59700b4e500ea5016c6c">0b83d24a</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2023-01-09T10:36:07+07:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Replace CMSServlet.mAuthority in GetBySerial

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/1d9c8443daf445f78ca9c7e9ba4264ce86d627e1">1d9c8443</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2023-01-09T10:36:35+07:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Replace CMSServlet.mAuthority in DoUnrevokeTPS

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/26a51c534be9dbbb3fb0f365799feee8b5a91a2a">26a51c53</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2023-01-09T10:37:50+07:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Replace CMSServlet.mAuthority in DoUnrevoke

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/c70b36cfd8659b972e64d7fa54e3c1a4da271f60">c70b36cf</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2023-01-09T10:39:05+07:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Replace CMSServlet.mAuthority in DoRevokeTPS

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/b09cd8c6247f9bc7c20324922b7f7eacd0531359">b09cd8c6</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2023-01-09T10:41:05+07:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Replace CMSServlet.mAuthority in DoRevoke

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/118f7f959e23e2af8aa3e06226454efd55e699b6">118f7f95</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2023-01-09T10:41:35+07:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Replace CMSServlet.mAuthority in DisplayCRL

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/e78a980ed5df53fbf7918d4513160d189961496a">e78a980e</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2023-01-09T10:42:52+07:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Replace CMSServlet.mAuthority in DisplayBySerial

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/9da436c3926c7d34535e26aa02110f2f8aa2e47d">9da436c3</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2023-01-09T10:45:46+07:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Replace CMSServlet.mAuthority in CMCRevReqServlet

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/cba6312f4a1078437fd6e8d600b591ad4943bc2b">cba6312f</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2023-01-09T10:47:16+07:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Replace CMSServlet.mAuthority in ChallengeRevocationServlet1

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/43b4a5497893fdb4c05340c804ae0509d225f23e">43b4a549</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2023-01-09T12:13:23+07:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Replace CMSServlet.mAuthority in KRA

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/fe9352eb0cdb6a40583de276df5bd05802351465">fe9352eb</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2023-01-09T12:17:30+07:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Replace CMSServlet.mAuthority in OCSP

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/02d4b28a09ad688bed00811f67e9d7b89e2f62ec">02d4b28a</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2023-01-09T13:12:41+07:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Remove redundant CMSServlet.certAuthority

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/b3c3e642b12f07177d7af4952aaa32b99e7e4631">b3c3e642</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2023-01-09T13:19:52+07:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Replace redundant CMSServlet.isCertFromCA()

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/0b2e40a97ef489691a4ce822d1237beee57e8a77">0b2e40a9</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2023-01-09T13:19:56+07:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Replace redundant CMSServlet.getX509Certificate()

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/8dde116aaef69b4d8ba1ad34adb30caec7387e6d">8dde116a</a></strong>

<div>

<span> by Chris Kelley </span> <i> at 2023-01-09T13:15:25+00:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Tidy up logic CrossCertPairSubsystem

* Use ternary operators where appropriate

* Remove unnecessary Boolean literals

* Remove redundant jumps

* Remove unnecessary else clauses

* Remove null check that always evaluates false</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/c988cd9f1611231c22b5be12b9784bd2344ef285">c988cd9f</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2023-01-10T08:46:10+07:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Clean up Dockerfile

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/05bfb935fbc7a1a318eff06767721365747795e3">05bfb935</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2023-01-10T09:02:09+07:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Move CA-specific methods to CAServlet

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/05e194ef84bc5a928623d66e46fef0d4d8ca3a7f">05e194ef</a></strong>

<div>

<span> by Jack Magne </span> <i> at 2023-01-10T09:24:31+01:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Fix: Bug 2122409 - pki-tomcat/kra unable to decrypt when using RSA-OAEP padding in RHEL9 with FIPS enabled

The purpose of this patch is to continue the improvement of this bug in 2 ways:

1. Create a pikspawn variable to cause pkispawn to create a subsystem configured for oaep

pki_use_oaep_rsa_keywrap=True, the default is False.

2. Improve the rest calls for kra info and ca info to provide info on whether the ca or kra is using OAEP.

For the Ca, we print out oaep info for both the local CA config and the CA's corresponding KRA.

Ex:

KRA info:

https://localhost.localdomain:28443/kra/rest/info

<KRAInfo>

<Attributes/>

<ArchivalMechanism>keywrap</ArchivalMechanism>

<RecoveryMechanism>keywrap</RecoveryMechanism>

<EncryptionAlgorithm>AES/CBC/PKCS5Padding</EncryptionAlgorithm>

<WrapAlgorithm>AES KeyWrap/Padding</WrapAlgorithm>

<RsaPublicKeyWrapAlgorithm>RSA_OAEP</RsaPublicKeyWrapAlgorithm>

</KRAInfo>

Note the new value for RsaPublicKeyWrapAlgorithm.

CA info:

https://localhost.localdomain:8443/ca/rest/info

<CAInfo>

<Attributes/>

<ArchivalMechanism>keywrap</ArchivalMechanism>

<EncryptionAlgorithm>AES/CBC/PKCS5Padding</EncryptionAlgorithm>

<WrapAlgorithm>AES KeyWrap/Padding</WrapAlgorithm>

<RsaPublicKeyWrapAlgorithm>RSA_OAEP</RsaPublicKeyWrapAlgorithm>

<CaRsaPublicKeyWrapAlgorithm>RSA_OAEP</CaRsaPublicKeyWrapAlgorithm>

</CAInfo>

The value CARsaPublicKeyWrapAlgorithm simply relfects the CA's CS.cfg oaep value.

The value RsaPublicKeyWrapAlgorithm is part of the info obtained from this CS's KRA subsystem.

This info can be used by interested clients to see if OAEP is in use with the givne KRA or CA.

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/7b0e14305d0f51239b794d2c2bd224f1b50b5dee">7b0e1430</a></strong>

<div>

<span> by Marco Fargetta </span> <i> at 2023-01-10T09:24:31+01:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Fix keyWrap.useOAEP configuration and other improvement

Complete the management of the 'OAEP' configuration in pkispawn and

solve several SonarClous issue

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/50b155d96845737db52264d50a7a8efce1e5f0f4">50b155d9</a></strong>

<div>

<span> by Marco Fargetta </span> <i> at 2023-01-10T09:24:31+01:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Add CI test for KRA started with OAEP

The new pkispawn parameter `pki_use_oaep_rsa_keywrap` allows to create

`CA` and `KRA` subsystems with `RSA_OAEP` padding enabled.

This CI test verify that OAEP is enabled according to the parameter and

additionally performs all the basic tests for `KRA` subsystem but with

`RSA_OAEP` enabled.

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/37fe9e0a703c518089baceea660f381c83ef08d3">37fe9e0a</a></strong>

<div>

<span> by Marco Fargetta </span> <i> at 2023-01-10T09:24:31+01:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Remove XML from CAInfo and KRAInfo, and move OAEP config to subsystem

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/77fcde137c537f381d0ba1249bd383315be97531">77fcde13</a></strong>

<div>

<span> by Chris Kelley </span> <i> at 2023-01-16T10:40:15+00:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Modify csconfig.py checks to allow for N certs with same nickname

Currently the base64 blob from nssdb is directly compared with a

cert from the CA subsystem, this fails if their are multiple certs

with the same nickname. As this is an allowable state, the tests

are modified to break the base64 blob into individual certs.

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/fb2bdd78ca5c5377852fe8e813e9c80c94a80e1d">fb2bdd78</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2023-01-17T08:23:38-06:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Clean up Dockerfile

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/9fd03b0c88dd842c3c1a71443cc5021eaa93a1fb">9fd03b0c</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2023-01-17T10:06:41-06:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Fix test for KRA with RSA OAEP

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/582685afe344556ec3f02cd3b3217985cdf8f795">582685af</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2023-01-17T13:24:23-06:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Refactor AuthSubsystem

The code that creates ChallengePhraseAuthentication and

SSLClientCertAuthentication in AuthSubsystem has been moved

into CAAuthSubsystem since they can only be used in CA.

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/bf9ed18346baa7298071521cfbbd0136757e3764">bf9ed183</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2023-01-17T13:24:56-06:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Move ChallengePhraseAuthentication to pki-ca

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/c2b75b8ffd484988e3047a656499f4f9320ab41a">c2b75b8f</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2023-01-17T13:24:56-06:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Move SSLClientCertAuthentication to pki-ca

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/b1d9abd81cb1bbbdff0749007405f44e49107043">b1d9abd8</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2023-01-17T13:24:56-06:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Remove obsolete RA code in ChallengePhraseAuthentication

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/03c254cacf58ab960ebd62e546740788ea309474">03c254ca</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2023-01-17T13:24:56-06:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Remove obsolete RA code in SSLClientCertAuthentication

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/2c89f822ac59d344afe5b0ec94b798ea9fc715c0">2c89f822</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2023-01-17T13:24:56-06:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Clean up ChallengePhraseAuthentication

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/72aac544e9b60ca02430257ba65307b3e1fb03d4">72aac544</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2023-01-17T13:24:56-06:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Clean up SSLClientCertAuthentication

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/f0838b0561dc85e5ec364c2b541c95abd3daec91">f0838b05</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2023-01-17T14:35:11-06:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Add OCSPCMSAdminServlet

OCSP-specific code in CMSAdminServlet has been moved into

OCSPCMSAdminServlet.

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/f8246686afbea9ffb9a2c5108310096ac5459eb0">f8246686</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2023-01-17T14:35:20-06:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Add TKSCMSAdminServlet

TKS-specific code in CMSAdminServlet has been moved into

TKSCMSAdminServlet.

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/9a18d75c2288df92e2edaf28bfe48ee500856375">9a18d75c</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2023-01-17T14:35:20-06:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Merge IOCSPAuthority into OCSPAuthority

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/649ae80616932747795bfb54df39ada00fa12412">649ae806</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2023-01-17T14:35:20-06:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Remove unused ITKSAuthority

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/9fe72967529326ef27454e484478b210c90957e1">9fe72967</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2023-01-17T14:44:36-06:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Move AuthCredentials to pki-server

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/e4ef54e23b5fd342cdad2e5424a2427b96f3f7cd">e4ef54e2</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2023-01-17T15:28:29-06:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Merge IArgBlock into ArgBlock

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/062cff4678d8cb28f4401a1023095ce64e1b1308">062cff46</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2023-01-18T20:48:14+07:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Add support for container registry configuration

The publish job has been modified to support container registry

configuration and will only run if the registry is configured.

The job will also no longer publish the runner image since it's

only used internally.

https://github.com/dogtagpki/pki/wiki/Configuring-Container-Registry

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/85e030c23e2b0a6c5dd556fa9f861f1fe464731a">85e030c2</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2023-01-18T08:51:43-06:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Remove default container registry

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/7a9371d2a0ff6485559b531d36895cff65f2951b">7a9371d2</a></strong>

<div>

<span> by Chris Kelley </span> <i> at 2023-01-19T09:42:08+00:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Provide better error handling for missing CLI arguments

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/e0e53dc7f26b603ac68a298d928ca943df6d142d">e0e53dc7</a></strong>

<div>

<span> by Christina Fu </span> <i> at 2023-01-19T10:29:12+00:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Add authorization to limit setTokenStatus to allowed admins

This patch adds authorization to limit setTokenStatus to admins

allowed for the token type in question.

If a token is not associated with a keyType/profile, then the admin

must have the ALL_PROFILES prvilege.

fixes https://bugzilla.redhat.com/show_bug.cgi?id=2106153</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/809a7e0fe603a465f6b629548a31b2d1996e8528">809a7e0f</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2023-01-19T21:02:43+07:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Switch to Quay.io

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/94c99343238eafbeb0142f6597459948e58aea1b">94c99343</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2023-01-20T22:09:04+07:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Publish pki-ca and pki-acme images

The publish job has been modified to publish pki-ca and pki-acme

images to Quay.io.

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/9e9f2a39641e9fbc7304b299f0394761c44c73b9">9e9f2a39</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2023-01-20T11:24:41-06:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Clean up publish job

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/a0fd170a35b076432131c1ecd8ed01b2956ce93e">a0fd170a</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2023-01-20T15:32:19-06:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Add CAIndexServlet

CA-specific code in IndexServlet has been moved into

CAIndexServlet.

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/44d3122327f2aae9f348799d93b10f1b799b97a6">44d31223</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2023-01-20T15:32:20-06:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Add CAGenPendingTemplateFiller

CA-specific code in GenPendingTemplateFiller has been moved

into CAGenPendingTemplateFiller.

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/e18bd486d4129538bcea0ae8e51902d275a4a648">e18bd486</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2023-01-20T15:32:21-06:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Move CloneRedirect to pki-ca

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/76bffc0b68ba60da26f4996de005e1f265b31bce">76bffc0b</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2023-01-20T15:32:23-06:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Merge ICertificateAuthority into CertificateAuthority

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/1097266f6b46a36beb6bb52792db01761b41cb7b">1097266f</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2023-01-20T15:49:29-06:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Move CertificateAuthority.getIssuanceProtPrivKey() to CAEngine

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/afbc36cf9f272eb85d39a936f209bf3041697cac">afbc36cf</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2023-01-20T15:56:10-06:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Move CertificateAuthority.getStartSerial() to CAEngine

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/634fb22494754ca8491f2f801ab42f88a0f799a5">634fb224</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2023-01-20T15:57:21-06:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Move CertificateAuthority.setStartSerial() to CAEngine

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/027b5facd4cdc1c138424b95dd9c239c64f5e747">027b5fac</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2023-01-20T16:02:28-06:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Move CertificateAuthority.getMaxSerial() to CAEngine

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/c7079b28fc43379894ff9ca3945c2dc15dc08ee7">c7079b28</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2023-01-20T16:02:47-06:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Move CertificateAuthority.setMaxSerial() to CAEngine

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/3e1d6374a9c2216564ba7ded01e437c4968d8a33">3e1d6374</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2023-01-20T16:05:03-06:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Move CertificateAuthority.getCertificateRepository() to CAEngine

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/028259912bbf5590bb4df1901205766a5e7ca024">02825991</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2023-01-20T16:12:37-06:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Move CertificateAuthority.getNonces() to CAEngine

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/bac10a875b6ed3372d35cf5be609109d80d5bdbb">bac10a87</a></strong>

<div>

<span> by Marco Fargetta </span> <i> at 2023-01-23T15:51:00+01:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Add fapolicy rules to allow execution of generated java code

When fapolicy daemon is running the default rules deny the execution of

java code from not trusted sources. This deny also the execution of some

code generated inside the instance `work` folder.

This is the case when FIPS is enabled and DISA STIG profile is applied.

To solve the problem a custom rule is applied during the installation.

Solve the  Bug 2091993

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/0afef89581afa28a31a1e97b1b51730c08b52210">0afef895</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2023-01-23T14:58:34-06:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Move CertificateAuthority.ensureAuthorityDNAvailable() to CAEngine

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/71b2f25a33fa305e0ee03056e6a3d680681c76fb">71b2f25a</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2023-01-23T15:09:21-06:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Remove unused CertificateAuthority fields

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/dc20877fd36949e86e66cd7ef03a4dd2d4e6f117">dc20877f</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2023-01-24T01:37:03-06:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Fix installation warnings due to directory creation

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/f50916edd41b4c0c624ec6d335d836d77971bb7a">f50916ed</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2023-01-24T01:37:03-06:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Fix installation warnings due to file creation

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/57dfba10366f644da87e136ca685ce9afdd0d91a">57dfba10</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2023-01-24T11:46:53-06:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Update SCEP test to use SSCEP container

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/be4ae8c467637c7bffec6e231feac70c4656b8ed">be4ae8c4</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2023-01-24T18:04:17-06:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Move Python lint test into separate workflow

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/fe06d3849522b0c133da4108c5efeb8510fbe1b6">fe06d384</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2023-01-24T18:04:50-06:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Fix installation warnings due to links creation

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/53a9362aff55c82953b07781688ebbc817b2fc5e">53a9362a</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2023-01-24T20:20:15-06:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Replace PKI_SUBSYSTEM_TYPE with actual value

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/2006712348a0d7c776ae3acdf72c1aac8d7b5df8">20067123</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2023-01-25T09:11:20-06:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Update EST test to use libEST container

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/6f637cb4949e762b8da0a1e0276e37492c0e7a43">6f637cb4</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2023-01-25T09:14:53-06:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Downgrade dependency to Jackson 2.10

The code has been modified to use Jackson 2.10 API since

the newer version may not be available on some platforms.

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/28182ad0080e6e0971f1028f72305be801ebff9e">28182ad0</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2023-01-25T14:23:52-06:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Clean up TPSPhoneHome.getConfigPath()

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/faede98efdb976e3e82dc6f4e91a61f3a3ef5b97">faede98e</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2023-01-26T09:04:47-06:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Remove instanceRoot in CS.cfg

The instanceRoot param in CS.cfg has been removed since the

value can be obtained from catalina.base system property.

An upgrade script has been added to remove the param from

existing instances.

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/74f6d1d015c271196b0cf373edce02a4c22c53a0">74f6d1d0</a></strong>

<div>

<span> by Chris Kelley </span> <i> at 2023-01-26T16:00:03+00:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Fix certificate display in TPS web UI

The field names changed when in the XML -> JSON conversion, specify the

original names expected by the UI.</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/51dfc267c2baabe58a08c1297fcdf9ca1e17c7c4">51dfc267</a></strong>

<div>

<span> by Chris Kelley </span> <i> at 2023-01-26T16:00:03+00:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Remove unnecessary inner classes from *Data classes

They were originally used to marshal XML for use in the JS front end,

but I am going to fix the front end to use the string maps that the rest

of the codebase utilises for simplicity.</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/04351382c4fe03f7766826858cdc02e64d5b85a5">04351382</a></strong>

<div>

<span> by Chris Kelley </span> <i> at 2023-01-26T16:00:03+00:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Update JS front end to use string map for properties

Also removes redundant methods to get Link objects that no longer exist</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/a39112eea436ae69ff3a4aa002451bd2178e1c91">a39112ee</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2023-01-27T10:12:47-06:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Consolidate container image cache

Previously each container image was stored in a separate cache

which in total consumed about 3 GB of space since they contain

duplicate layers. Since the quota is only 10 GB, cache eviction

happened quite often which slowed down the CI.

To reduce the problem the build job has been modified to store

all images into a single cache which saves about 1 GB of space.

The test and publish jobs have been modified to use this cache.

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/ee6adcaca8f7242d788b4ba81ee752a836b9e62b">ee6adcac</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2023-01-27T12:34:19-06:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Add server backup and restore test

A new test has been added to validate PKI server backup and

restore procedure. The current test does not validate the

backup and restore procedure for DS or HSM. They can be added

separately later.

https://github.com/dogtagpki/pki/wiki/Backing-Up-PKI-Server

https://github.com/dogtagpki/pki/wiki/Restoring-PKI-Server

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/86d42fe7017ee54e93fc402565a2666d10b05e47">86d42fe7</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2023-01-27T19:16:50-06:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Update build scripts

The build scripts has been modified to use Python macros

described in Fedora Packaging Guidelines.

https://docs.fedoraproject.org/en-US/packaging-guidelines/Python/

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/a81ebcc42f47211a72e49af398222232b2018300">a81ebcc4</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2023-01-27T19:18:50-06:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Remove configurationRoot in CS.cfg

The configurationRoot param in CS.cfg has been removed since

the value can be determined from other sources.

The upgrade script has been modified to remove the param from

existing instances.

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/5ab58b6e4e9528b36417455a716b6804c4e09117">5ab58b6e</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2023-01-30T09:56:24-06:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Remove profile.*.config in CS.cfg

The profile.*.config params in CS.cfg have been removed since the

value can be determined from other sources.

The upgrade script has been modified to remove the params from

existing instances.

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/c76a909f46077a80afc8b2e8bbd82b43f0fe9277">c76a909f</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2023-01-30T10:23:47-06:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Downgrade dependency to Python 3.6

The code has been modified to use Python 3.6 API since the

newer version might not be available on some platforms.

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/343ed69a83bd0f62aa964ed49246f8754963b40c">343ed69a</a></strong>

<div>

<span> by Chris Kelley </span> <i> at 2023-01-31T15:36:16+00:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Strip debug symbols from executables</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/dbdbe616993881e1f4726b89965c2097ebeca1e9">dbdbe616</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2023-01-31T10:25:47-06:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Remove unused PKI_INSTANCE_ROOT slot

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/4463abfb54d4cd6f181e27d32f8723faad36768b">4463abfb</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2023-01-31T10:25:47-06:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Merge Instance class into PKIDeployer

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/926eb221ce63268bcafa24b3d3c818efc6b34e2a">926eb221</a></strong>

<div>

<span> by Marco Fargetta </span> <i> at 2023-01-31T18:26:58+01:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Fix cert rest API with json

Rest APIs to enroll and revoke certificates using CLI and json format

were broken in several points.

For the enrollment the problem was with the policy `id`. It was not

included in the lis json sent to the client for review breaking the

client. It is now included.

For the revocation there was a name mismatch between client and server.

Additionally, two test files have been fixed. The one for the enrollment

has a new CSR because the old one made use of obsolete and not supported

algorithm and the other for the revocation has a fixed on the time

counter.

Fix https://bugzilla.redhat.com/show_bug.cgi?id=2053189

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/11462e082d6ea26f50303addb4bbdff7fb308f21">11462e08</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2023-01-31T22:35:47-06:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Update PKISubsystem.validate_system_cert()

The PKISubsystem.validate_system_cert() has been modified

to raise an exception if the cert is invalid.

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/94045cd928de9ee9812e91da27497aea696f18ed">94045cd9</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2023-02-01T13:45:38-06:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Convert pki_user_deployment_cfg_spawn_archive into variable

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/5d6d71950311208e0fb7c6bab7bdd3dc0ca14ab5">5d6d7195</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2023-02-01T14:36:07-06:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Convert pki_user_deployment_cfg_replica into variable

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/648be9fd5a04fd885c841859f689170f93ad33e2">648be9fd</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2023-02-01T14:36:07-06:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Convert pki_manifest_spawn_archive into variable

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/3453ef10c0971f68a21d1dc648750e7c52b5edb0">3453ef10</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2023-02-01T14:36:07-06:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Convert pki_manifest into variable

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/6e2b2262256cee2d206109256a0071dfee54010a">6e2b2262</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2023-02-01T14:36:07-06:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Remove single-use pki_default_deployment_cfg_replica

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/80cef3213fa4f11ef659346ad636ecbd55de8a63">80cef321</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2023-02-01T14:37:22-06:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Remove unused pki_registry_initscript_command

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/a051b5fd5bb4c075adc0cae57b7bfafddff9a443">a051b5fd</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2023-02-01T14:38:17-06:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Remove unused pki_subsystem_configuration_password_conf_link

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/dfad1bf362c20adfc5842a92902592e363f5512d">dfad1bf3</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2023-02-01T14:41:25-06:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Remove redundant pki_self_signed_subject

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/ed6deb9850edddeb9ee47e5bf23093c43ca140d0">ed6deb98</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2023-02-01T16:30:54-06:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Remove redundant pki_shared_password_conf

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/ee9270fce7011b835da987ad701a84fa7bfea8d8">ee9270fc</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2023-02-01T16:33:32-06:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Convert pki_shared_pfile into variable

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/0e0c072c63ead835a2d1c0ecae98a5fb17a88226">0e0c072c</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2023-02-01T17:49:07-06:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Convert pki_target_phone_home_xml into variable

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/1e7eafb6b5ba77b7cca7896de8a9a98881e972b0">1e7eafb6</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2023-02-01T17:51:36-06:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Convert pki_target_registry_cfg into variable

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/8f67916e5bf484142f573d00db620f5557b35e18">8f67916e</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2023-02-01T17:53:26-06:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Convert pki_source_registry_cfg into variable

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/ccb44ba527bc68e9b870ae03e80779e65f3d6ff7">ccb44ba5</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2023-02-01T17:57:01-06:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Convert pki_target_subsystemcert_profile into variable

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/6c7f5e2b68008c331823a9311d2f0d451b78e111">6c7f5e2b</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2023-02-01T17:58:33-06:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Convert pki_target_servercert_profile into variable

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/6db8dc8f1fcdcb185cc362d9e1c6ba2b27964de0">6db8dc8f</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2023-02-01T18:00:59-06:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Convert pki_target_caocspcert_profile into variable

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/e649bdaf0da2ad65e7728e3afb0fef6c4a8f38d4">e649bdaf</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2023-02-01T18:02:20-06:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Convert pki_target_cacert_profile into variable

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/20c441b5d5024b0caf472e13c092a0464771eab6">20c441b5</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2023-02-01T18:05:25-06:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Convert pki_target_caauditsigningcert_profile into variable

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/54889f2786b384d52677bca6133922f303420b78">54889f27</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2023-02-01T18:05:45-06:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Convert pki_target_admincert_profile into variable

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/51647b5e5090c34855b165ad2ba344999f88f950">51647b5e</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2023-02-01T18:07:09-06:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Convert pki_target_proxy_conf into variable

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/4f2d0875fa2a48831844523e8a9c46580d9b8db9">4f2d0875</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2023-02-01T18:08:21-06:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Convert pki_target_flatfile_txt into variable

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/cfad1d8dff8a2b18d68c75164749157afeb8992f">cfad1d8d</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2023-02-01T19:17:40-06:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Remove unused params

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/d880c5d335deadf824d7954ddb690b24a993bb12">d880c5d3</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2023-02-01T19:17:40-06:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Convert pki_target_server_xml into variable

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/591276991d290e6a903777a2c7f661f812cb47db">59127699</a></strong>

<div>

<span> by Chris Kelley </span> <i> at 2023-02-02T18:32:04+00:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Add new --attributes option to <subsystem>-user-add

Originally, this was to set nsPagedSizeLimit=20000 on creation of users

Currently every entry is pulled by default which has been causing users

problems. There is an RFE to change this attribute dynamically based on

the size of the backend DB but for now set a reasonable default.

Instead of just adding this one attribute, a general method for adding

arbitrary single-valued attributes on user creation is introduced.

A new test is added

Resolves: #1959057

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/577a169a58ad7740fd1ea3f41aa62da1590c016b">577a169a</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2023-02-02T14:43:44-06:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Remove redundant pki_target_cs_cfg

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/6e2caffaaa221cdaf31d0d25f030a6735e42e329">6e2caffa</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2023-02-02T15:58:07-06:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Remove redundant pki_target_tomcat_conf_instance_id

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/bd66cee722baff1855aecc4b96bebcf549d260c9">bd66cee7</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2023-02-02T16:18:20-06:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Remove unused slot variables

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/430410915aeba422011e0348b78706596c0d68a8">43041091</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2023-02-02T16:19:29-06:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Replace PKI_HOSTNAME with direct substitution

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/39cec189b3bfe5d162a4045b1649875590b0d03b">39cec189</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2023-02-02T16:22:12-06:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Replace PKI_UNSECURE_PORT with direct substitution

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/852e2e06be3499b16cdfa34afb6dc52549e832b4">852e2e06</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2023-02-02T16:22:32-06:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Replace PKI_SECURE_PORT with direct substitution

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/cb21ddcc5a0cc2c65852ddf07cb6f94c3ea18060">cb21ddcc</a></strong>

<div>

<span> by Chris Kelley </span> <i> at 2023-02-03T14:08:18+00:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Code cleanup in User.java

* Reorder modifiers to match the JLS

* Put array designators on types

* Replace Vector with Set

* Simplify equals() and hashCode() implementations

* Introduce constants for repeated strings.

* Remove unnecessary null on instantiation of non-primitive types

* Rename member fields

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/a3240c1362116c538cddf2f66f6e9ba72ca9bd36">a3240c13</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2023-02-03T12:25:39-06:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Replace TOMCAT_SERVER_PORT with direct substitution

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/a7f197ab9bbaf9ba6ad284af6ccee9a4c99c3814">a7f197ab</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2023-02-03T12:27:00-06:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Replace SERVER_KEYGEN with direct substitution

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/65657984cb86fbee3520af0a6fe9b6b780180778">65657984</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2023-02-03T12:28:43-06:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Replace PKI_AJP_PORT with direct substitution

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/8e0777d37398ea773196e993d855233de604897f">8e0777d3</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2023-02-03T12:29:53-06:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Replace PKI_AJP_SECRET with direct substitution

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/4b06db284bcf5b6e8d85554c1c947827e01282a6">4b06db28</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2023-02-03T12:31:30-06:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Replace PKI_AJP_REDIRECT_PORT with direct substitution

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/5422aabdf83fffc7753c2a803a2de10df2dd7c72">5422aabd</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2023-02-03T12:34:56-06:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Replace PKI_INSTANCE_PATH with direct substitution

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/53f5428ae48cdc12d8554e4ee14b8e679a74c166">53f5428a</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2023-02-03T12:37:55-06:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Replace PKI_INSTANCE_NAME with direct substitution

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/5664d3151bce485c5a6d80c14ad55d8b2d23b720">5664d315</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2023-02-03T16:41:14-06:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Replace PKI_ENABLE_RANDOM_SERIAL_NUMBERS with direct substitution

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/6d09b676d73e80190bd13e725ef3b063f2da73dd">6d09b676</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2023-02-03T16:41:14-06:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Replace PKI_DS_SECURE_CONNECTION with direct substitution

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/1a12da175f219113f01e23cf403f46873dfc6d9f">1a12da17</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2023-02-03T16:41:14-06:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Replace PKI_AJP_HOST_IPv6 with direct substitution

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/4da3f6d64b41007d0c11eac938297e962d070fad">4da3f6d6</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2023-02-03T16:41:14-06:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Replace PKI_AJP_HOST_IPv4 with direct substitution

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/f59294c49da5c1f855877185b764e0be5c7b3528">f59294c4</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2023-02-03T16:41:14-06:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Replace PKI_STANDALONE with direct substitution

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/374d8ed0932f564b42cd390db0da3b41511a094e">374d8ed0</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2023-02-03T16:41:14-06:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Remove unused slot variables

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/761382fc76ce03abf6ca1f2b3789b117d0d16a35">761382fc</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2023-02-06T12:58:23-06:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Add PKISubsystem.create_sysconfig() and remove_sysconfig()

The code that creates and removes subsystem sysconfig files

has been moved into PKISubsystem.create_sysconfig() and

remove_sysconfig().

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/4fd2dc17407ab24337b9d7d2fc24c48bd6491f87">4fd2dc17</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2023-02-06T12:58:23-06:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Update ServerConfig.get_listener()

The ServerConfig.get_listener() has been modified to return

None if the listener does not exist.

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/086ec9ebc7fbfecb73fa0cd448e426c82f1a915c">086ec9eb</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2023-02-06T19:49:13-06:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Swap KRA basic and RSNv3 tests

KRA basic and RSNv3 tests have been swapped for consistency

with CA tests.

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/ac80457cff0c5262c4aca1464ff3672ecb2ba2e0">ac80457c</a></strong>

<div>

<span> by Chris Kelley </span> <i> at 2023-02-07T08:53:09+00:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Fix rpminspect issues by adding some compiler flags

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/ec3fbe7d015ea316fc56612fec96d532699b1b9d">ec3fbe7d</a></strong>

<div>

<span> by Chris Kelley </span> <i> at 2023-02-07T10:51:04+00:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Update pom.xml to latest Jackson/jaxb-api versions</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/60150b9b40b6b987503522b7c3b96a4d3aba2b27">60150b9b</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2023-02-07T14:09:51-06:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Remove AJP connector slot variables

Previously AJP connectors were added by uncommenting a part

of server.xml template using slot variables. This method

requires keeping a server.xml template in the code which

could become outdated.

To reduce maintenance requirements, the installation tool has

been modified to add the AJP connectors using Pyton XML API

instead.

Eventually the installation tool should be able to modify the

standard server.xml provided by Tomcat directly, eliminating

the need to keep a template in the code.

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/a4a032c583bcf4324ec7d0fe56c0ba39d8500ab0">a4a032c5</a></strong>

<div>

<span> by Marian Koncek </span> <i> at 2023-02-07T18:28:35-06:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Resolve jar paths using xmvn

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/d5bbea7e17b59d0d0db274c951e644a058ae500a">d5bbea7e</a></strong>

<div>

<span> by Chris Kelley </span> <i> at 2023-02-08T16:06:36+00:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Fix token status transition in TPS web UI

The XML adaptor was removed so additional work in the JS is

needed.

Resolves: #2165098

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/6643ebabfcde3521408680cd76ed34be2ab76ef9">6643ebab</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2023-02-08T15:45:38-06:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Add missing --ignore-banner options

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/d7adc8b1204a915a4efdb561b6f879c73585e5db">d7adc8b1</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2023-02-09T12:06:02-06:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Remove access log slot variables

Previously access log was enabled/disabled by uncommenting

or commenting out a part of server.xml template using slot

variables. This method requires keeping a server.xml template

in the code which could become outdated.

To reduce maintenance requirements, the installation tool has

been modified to enable/disable the access log using Pyton XML

API instead. The part of server.xml template related to access

log has been updated to match the default server.xml provided

by Tomcat. One of the tests has also been modified to test

disabling the access log.

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/b6b6d0b228693013447b9981f81f5eea622ca5ce">b6b6d0b2</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2023-02-09T16:03:26-06:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Fix pkidestroy failures

Previously in standalone and external cases pkidestroy failed

to deregister the subsystem since in those cases the subsystem

was (correctly) not registered in the first place, so there is

actually no need to deregister the subsystem. The code had been

suppressing these failures which could potentially suppress

other problems as well.

Now the code has been modified to skip deregistration in those

cases so it's no longer necessary to suppress any failures.

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/8c2591760025aadbe0b6aadf99344fae4a149887">8c259176</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2023-02-10T09:54:48-06:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Remove HTTP proxy slot variables

Previously HTTP proxy parameters were configured by modifying

CS.cfg template using slot variables. To reduce the size of the

template, the installation code has been modified to add the

parameters only if HTTP proxy is enabled.

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/1d0cfa68b0993fb47d190b770b9a3786d397395a">1d0cfa68</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2023-02-10T16:10:15-06:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Remove profile subsystem slot variable

Previously the profile subsystem in CA's CS.cfg was configured

using a slot variable. To simplify the config file, it has been

modified to use the ProfileSubsystem class by default, then it

can be replaced with LDAPProfileSubsystem class if needed.

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/56919247ee3f1b0aa48b6e579be523820e0c44d1">56919247</a></strong>

<div>

<span> by Marco Fargetta </span> <i> at 2023-02-13T17:40:30+01:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Adopt HTTP 1.1 for http based connections

Communication between subsystem on separate instance uses HTTP1.0 in

some cases. Since this version of HTTP does not support the Host header,

reverse proxies in the communication flow do not work.

This commit uprate the `HttpConnection` to use HTTP1.1 for the

communication. Actually, it does not support the full HTTP1.1 protocol

but only what is needed for the current communication options.

Solve the bugzilla 2130250

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/d8e7c0fa2f33119b89f992a25e65c523411a31b9">d8e7c0fa</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2023-02-13T16:39:21-06:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Add verbose/debug options for pki-server-nuxwdog

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/cd257a885ab257d5924dae472deeef32b9ba6cf1">cd257a88</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2023-02-14T09:04:25-06:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Fix RPM build warnings

The following absolute links generated RPM build warnings:

/usr/share/pki/est/webapps/est/WEB-INF/lib/pki-certsrv.jar -> /usr/share/java/pki/pki-certsrv.jar

/usr/share/pki/est/webapps/est/WEB-INF/lib/pki-cms.jar -> /usr/share/java/pki/pki-cms.jar

/usr/share/pki/est/webapps/est/WEB-INF/lib/pki-est.jar -> /usr/share/java/pki/pki-est.jar

/usr/share/pki/est/webapps/est/WEB-INF/lib/slf4j-api.jar -> /usr/share/java/slf4j/slf4j-api.jar

/usr/share/pki/est/webapps/est/WEB-INF/lib/slf4j-jdk14.jar -> /usr/share/java/slf4j/slf4j-jdk14.jar

They have been replaced with relative links.

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/15c33c9ac582348f3d644315c1e66b087351284d">15c33c9a</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2023-02-14T16:54:10-06:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Fix JAXB and JAF dependencies

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/00401281fce461a48bf1cb56e6e1462bc9a66a20">00401281</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2023-02-15T09:12:08-06:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Relocate pki-certsrv.jar

In commit dce39143ef77de286a36c7a3ee1009af317d7571 the

pki-cmsutil.jar in common/lib was merged into pki-certsrv.jar

in webapp/WEB-INF/lib. This actually broke Nuxwdog since some

of the classes that it needed were no longer accessible.

To fix the problem the pki-certsrv.jar has been moved to

common/lib. No upgrade script is required since the file is

owned by the package. A test for Nuxwdog will be added later.

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/1160966e7005720202bd3438f3977d6665373626">1160966e</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2023-02-15T09:49:12-06:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Publish pki-server image

The publish job has been modified to publish the pki-server

image to Quay.io such that it can be used for development

and testing without the complexity of setting up an actual

PKI subsystem.

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/5190976fc54319cd1a037e9cd111d052d5dd43c7">5190976f</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2023-02-16T08:54:57-06:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Remove unused standalone slot variables

The slot variables for standalone subsystems are actually not used

because the web.xml files are static so they have been removed.

The pkislots.cfg is now empty so the file and the related code

have been removed as well.

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/ec4abf5723f79652b621537515f3550930de2d01">ec4abf57</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2023-02-16T09:22:32-06:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>pkidaemon improvements

The pkidaemon script has been modified to avoid a possible

permission issue and to remove a redundant find operation.

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/83e477aef196da9e2dfd9ab6612dbc0df6ee0572">83e477ae</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2023-02-16T10:08:01-06:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Add test for CA with Nuxwdog

A new job has been added to test CA with Nuxwdog by installing a

regular CA first, then enabling Nuxwdog, then reverting back to

regular CA.

Normally when Nuxwdog is enabled the pki-server-nuxwdog script

will ask for the passwords on the console (which can be difficult

to automate) then store them in keyring. To automate the testing

the script has been modified to try to get the passwords from the

keyring first if they already exist. This way the test can be run

without asking for the password on the console.

The Keyring.get_key_id() has been modified to return None if the

key does not exist in keyring.

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/fb92ec97c253a3b1aeff97a7ddf95f38c2b2d698">fb92ec97</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2023-02-16T10:08:38-06:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Remove remaining slot-related code

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/bd7513b584e420565f98d949154cceeaa200c583">bd7513b5</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2023-02-16T10:08:38-06:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Remove unused War class

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/52f97069f045753762f0ad06c2b26dcb8c916e6e">52f97069</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2023-02-16T10:08:38-06:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Add PKIDeployer.create_server_xml()

The code that creates and configures the server.xml has been

moved into PKIDeployer.create_server_xml().

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/2497b700ef8bd2674731a819727fbd3d4a3fa360">2497b700</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2023-02-16T20:30:37-06:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Add PKIDeployer.store_config() and store_manifest()

The code that stores the user config and installation manifest has

been moved into PKIDeployer.store_config() and store_manifest(),

respectively.

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/dae6d6d1496836d73c36737656b0d52a79302d62">dae6d6d1</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2023-02-16T20:30:37-06:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Reorganize CA tests

The CA tests have been reorganized based on complexity.

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/8ccf752078cd33d8f2981d92df8e7d5fa914335e">8ccf7520</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2023-02-16T20:30:37-06:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Fix Eclipse classpath

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/9bcdaed43182b69ee1e38c50c4694c077c18c21b">9bcdaed4</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2023-02-17T08:56:56-06:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Move C flags definitions into RPM spec

Some C flags definitions have been moved from CMake file

into RPM spec file such that they can be customized for

different platforms.

The build.sh has been modified to provide a way for the

RPM spec file to specify the C flags for CMake.

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/81b550e4d3ca8aee3b1e2e04e25bcc85430842e7">81b550e4</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2023-02-17T15:25:14-06:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Add PKISubsystem.default_cfg

The PKISubsystem.default_cfg has been added to provide the

path to the default.cfg stored in subsystem registry.

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/fbf33acc129488fe89ced2b6130ec04a10aef147">fbf33acc</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2023-02-17T17:48:35-06:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Add PKIInstance.create_registry() and remove_registry()

The code that creates and removes instance registry has

been consolidated into PKIInstance.create_registry() and

remove_registry().

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/a00c7b4b99ff5d8071903e766c63989a1b03afd2">a00c7b4b</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2023-02-17T17:48:35-06:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Add PKISubsystem.create_registry() and remove_registry()

The code that creates and removes subsystem registry has

been consolidated into PKISubsystem.create_registry() and

remove_registry().

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/df22e19e3de2e501408fde41fed6a3cda4c3956a">df22e19e</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2023-02-20T11:34:53-06:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Fix pki.policy

The pki.policy has been updated such that it works on both

Fedora and RHEL. Some obsolete policies have been removed

as well.

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/373369ae1015b3a3249ca870209aac3d4b04635d">373369ae</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2023-02-20T13:48:09-06:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Rename pki-certsrv.jar to pki-common.jar

The pki-certsrv.jar has been renamed to pki-common.jar to

better reflect the content of the file which comes from

base/common.

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/a652ee01d9fe5215cde7171133ce98324af5c332">a652ee01</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2023-02-20T13:55:32-06:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Fix pki-server run

To help troubleshooting, the pki-server run command has been

modified to run the same pki-server migrate command and use

the same class path as the systemd service.

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/60ae443db8329974deeaf163b18653c42fce3791">60ae443d</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2023-02-21T08:37:09-06:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Add test for CA installation with non-default user

A new job has been added to test CA installation with

non-default user and group. The server process should

be running as the non-default user.

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/0358f56fabccc1277272a7d2f7e7369aafacdffe">0358f56f</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2023-02-22T10:23:32-06:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Add pki securitydomain-leave

A new pki securitydomain-leave command has been added to

replace the sslget command used to deregister a subsystem

from the security domain. This will reduce the dependency

on native code and simplify the maintenance.

A new PKIDeployer.leave_security_domain() method has been

added to call the pki securitydomain-leave command. This

method replaces the SecurityDomain.deregister() that calls

sslget.

The SecurityDomain class is no longer used so it has been

removed.

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/a2f300b58750eb7ef6befc3fb3993b839ef96268">a2f300b5</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2023-02-23T12:14:32-06:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Fix OCSP tests

The OCSP tests have been updated to remove the file names

and line numbers from the stderr so it can be compared

more reliably.

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/6f3401cb847d34a7b9af09e58440445565f35bc7">6f3401cb</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2023-02-27T10:00:34-06:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Add pki_registry_enable

pkispawn uses a registry to keep track of all instances and

subsystems it installed to help future removal. However, in

containers it's not necessary to remove the instances and

subsystems, so a new pki_registry_enable param has been

added to disable the registry in a container.

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/b53c547feaf29de07e9a83d289e751e63330c80e">b53c547f</a></strong>

<div>

<span> by Chris Kelley </span> <i> at 2023-02-27T18:16:07+00:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Restore some codeBase permissions in pki.policy

These permissions are required at runtime to start the PKI server.

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/bd499c5b1c140756a16a3e5e98a1001710b92065">bd499c5b</a></strong>

<div>

<span> by Marco Fargetta </span> <i> at 2023-02-28T13:43:15+01:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Add ACME tests with postgresql back-end

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/a925e708ec5ab44b151851af1f7b9afe2679a8fa">a925e708</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2023-02-28T12:03:35-06:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Update RESTEasy dependency

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/aa7d8ee1875c0b78a4378c39cd2086831e12982c">aa7d8ee1</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2023-02-28T16:17:40-06:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Remove non-customizable pki_tomcat_bin_link param

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/34b62646a3c3c26fe9ddcbe025258cf3f740de1f">34b62646</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2023-02-28T16:45:43-06:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Remove non-customizable pki_instance_conf_link param

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/c4dc309782d0d3e7214cc47fc8c82c909654a7eb">c4dc3097</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2023-02-28T16:45:43-06:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Remove non-customizable pki_instance_logs_link param

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/003a18b7f66fa30962a97e8ed88aaae8d4b46e76">003a18b7</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2023-02-28T16:45:43-06:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Remove non-customizable pki_tomcat_tmpdir_path param

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/137eeb8636ba49e57357af7025b26ab3566909a0">137eeb86</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2023-02-28T16:45:43-06:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Remove non-customizable pki_instance_database_link param

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/1e1b2de4de0e6003e15e493775a89c138678c9ea">1e1b2de4</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2023-02-28T16:45:43-06:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Remove unused pki_subsystem_signed_audit_log_path param

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/81cea0b7aa640095e4f075b0b32d21d92af830c7">81cea0b7</a></strong>

<div>

<span> by Chris Kelley </span> <i> at 2023-03-01T14:14:24+00:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Add -flto compiler flag

RPMInspect is failing as it cannot detect whether Link Time

Optimisation is being used by GCC. I can't see any reason to not

enable this option from reading docs about it, so I have added it

in. See: https://gcc.gnu.org/onlinedocs/gcc/Optimize-Options.html

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/466a210cfd1f2cc1c17b66e14ac38ea0e352fba1">466a210c</a></strong>

<div>

<span> by Chris Kelley </span> <i> at 2023-03-01T15:29:00+00:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Change -flto to -fno-lto

We are unable to compile with -flto, it breaks GCC, so disable it

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/9ba858ed9a3f489bab4517e3330aeacbf80b21c2">9ba858ed</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2023-03-01T09:49:18-06:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Use Python XML to update Tomcat admin port

This will reduce the difference between the server.xml template

in PKI and the default server.xml provided by Tomcat.

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/1e262c6781fea4e9dc5f3bb3fdb35504a2dd49c3">1e262c67</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2023-03-01T10:07:26-06:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Add PKIService.getCMSEngine()

Currently the CMSEngine object is stored in CMS.engine global

variable which makes it more complicated to maintain the code.

To reduce the problem, the PKIWebListener has been modified to

store the CMSEngine object as an attribute in the servlet

context (i.e. web application). The PKIService.getCMSEngine()

has been added to get the CMSEngine object from the servlet

context.

The code that depends on the CMS.engine will be incrementally

updated. Eventually the CMS.engine will no longer be used and

can be removed.

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/4a2ce9480d878cd5b8a891392b68e2692babe7e8">4a2ce948</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2023-03-01T10:07:26-06:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Update UserService to use PKIService.getCMSEngine()

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/f2289c0e6ff836de98ae81f628c04707925191dc">f2289c0e</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2023-03-01T10:07:26-06:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Update GroupService to use PKIService.getCMSEngine()

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/278f68727dd6a54066f683905afef1cda5a129a4">278f6872</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2023-03-01T10:07:26-06:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Update JobService to use PKIService.getCMSEngine()

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/968e56c274b1db22905b250e264e625bbb2d44eb">968e56c2</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2023-03-01T15:12:04-06:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Rename pki-cms.jar to pki-server.jar

The pki-cms.jar has been renamed to pki-server.jar to

better reflect the content of the file which comes from

base/server.

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/9dd6c91f57f63453fe4b87662ab48b21bd42fa57">9dd6c91f</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2023-03-01T15:32:14-06:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Update SelfTestService to use PKIService.getCMSEngine()

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/79fa00e6654156af476e776dcc0db9baedc8e246">79fa00e6</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2023-03-01T15:32:14-06:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Update FeatureService to use PKIService.getCMSEngine()

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/fcee50b8a1612025ce509ab4a0961053791221d9">fcee50b8</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2023-03-01T15:32:14-06:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Update AuditService to use PKIService.getCMSEngine()

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/8daeb2a10101c59ae1f2f1e0f093c37ea18dbc6e">8daeb2a1</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2023-03-01T15:32:14-06:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Update KeyRequestService to use PKIService.getCMSEngine()

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/55731916f63b4c4cffbf54cd34134812298c251c">55731916</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2023-03-01T15:32:14-06:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Update KeyService to use PKIService.getCMSEngine()

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/6005518dd54baa6c169d07f93fcfa935adbfe831">6005518d</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2023-03-01T15:32:14-06:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Remove redundant attributes in CMSServlet

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/72caec4b7164f55c84adbc5baad8ff9a9daa5123">72caec4b</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2023-03-01T19:02:08-06:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Remove unused ProfileSubsystem

The ProfileSubsystem for profiling the system (i.e. monitoring

memory and threads) is unused so it has been removed.

The ProfileSubsystem for managing cert profiles is still intact.

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/5d1a47352b7a0742dec4697fb1014fc3d2092a21">5d1a4735</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2023-03-01T19:02:17-06:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Update IPolicyProcessor.getAuthority() to return IAuthority

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/4fef741b00704d2f201894a9e97183d033472b75">4fef741b</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2023-03-01T19:02:17-06:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Merge IStatsSubsystem into StatsSubsystem

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/4690fddb395ff95b61f5904fe9a39a5599784093">4690fddb</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2023-03-01T19:02:17-06:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Drop ISubsystem from TransportKeyUnit

The ISubsystem implementation in TransportKeyUnit is not

providing useful functionality so it has been removed.

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/dcbe7db8d73570d277d444e22be07fd565060a54">dcbe7db8</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2023-03-01T19:02:17-06:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Merge ITransportKeyUnit into TransportKeyUnit

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/6dcc74d839656033f31e2332dcccfcab7b63c62b">6dcc74d8</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2023-03-02T09:29:20-06:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Use Python XML to remove default LockOutRealm

This will reduce the difference between the server.xml template

in PKI and the default server.xml provided by Tomcat.

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/632411d9122f43f80c3411400dac6d6dc22fbce0">632411d9</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2023-03-02T15:20:07-06:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Use Python XML to configure listeners

This will reduce the difference between the server.xml template

in PKI and the default server.xml provided by Tomcat.

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/569e61c396378aa1901263c518b7983568f1ca02">569e61c3</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2023-03-02T15:23:06-06:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Convert CMSServlet.mUG into local variable

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/82692f1f664f54108c426fd29c292d70b0d18ad1">82692f1f</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2023-03-02T15:23:06-06:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Convert AdminServlet.mUG into local variable

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/99c69518c709d26d2f28de899ae7a11f1c5556bd">99c69518</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2023-03-02T15:23:06-06:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Move CMSServlet.generateSalt() into JssSubsystem

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/2cc92c58e02c8116c830d6f8e9453a0da1c8b1cd">2cc92c58</a></strong>

<div>

<span> by Chris Kelley </span> <i> at 2023-03-03T08:37:40+00:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Make xmvn conditional on archs which support it

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/98f5fbe9aa7254b6534fd842dffb19e7db3f2bb0">98f5fbe9</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2023-03-03T09:28:21-06:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Use Python XML to add RewriteValve

This will reduce the difference between the server.xml template

in PKI and the default server.xml provided by Tomcat.

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/ad999c16bbb047cb56078e98da210d35e05eb909">ad999c16</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2023-03-06T09:05:04-06:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Use Python XML to remove UserDatabase

This will reduce the difference between the server.xml template

in PKI and the default server.xml provided by Tomcat.

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/6129855afc760fe07835cf26cc03d76d3f0b1a40">6129855a</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2023-03-07T10:39:32-06:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Add PKIClientAuthenticator

The PKIClientAuthenticator has been added to provide basic

authentication for PKI client using JAX-RS API. This will

reduce dependency on deprecated Apache HTTPComponents API.

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/d09ac5239c2f76f8914931ace22d748eefab4abf">d09ac523</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2023-03-07T16:29:50-06:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Fix index calculation in replace_params()

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/61653a08ea844f4eab8ee1173b73f6a1da7ad220">61653a08</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2023-03-07T17:59:20-06:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Add CMSServlet.getCMSEngine()

The CMSServlet.getCMSEngine() has been added to provide

the CMSEngine instance for subclasses of CMSServlet.

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/a693153c972f1f6c4afdfeaa500301c0cee10940">a693153c</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2023-03-07T17:59:24-06:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Add AdminServlet.getCMSEngine()

The AdminServlet.getCMSEngine() has been added to provide

the CMSEngine instance for subclasses of AdminServlet.

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/3693cb2fedb89bf97369ba47712bd9f8ae825d04">3693cb2f</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2023-03-07T18:34:24-06:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Convert DynamicVariablesServlet.mCrlurl into local variable

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/11d268faa93dd3604292fa46e6895c4d6f197af9">11d268fa</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2023-03-07T18:34:58-06:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Update AdminServlet subclasses to use getCMSEngine()

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/3679cfbb9c7591ff6c00e2cde08cb9ec78e7ffe0">3679cfbb</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2023-03-07T18:38:43-06:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Update CMSServlet subclasses to use getCMSEngine()

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/06c4c740bdc1a7dfa5028de15ee6995937d2e12b">06c4c740</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2023-03-08T10:08:30-06:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Use Python XML to configure unsecure connector

This will reduce the difference between the server.xml template

in PKI and the default server.xml provided by Tomcat.

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/f3c6f3bcaa9e21937644256df8f20a657a08ad8e">f3c6f3bc</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2023-03-08T17:20:07-06:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Split IAuthority from ISubsystem

The IAuthority has been split from from ISubsystem since an

authority such as LWCA can have multiple instances whereas

a subsystem will only have one instance.

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/f39eb665289020232797bc4346633210cb766ad9">f39eb665</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2023-03-08T18:09:13-06:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Rename BaseSubsystem to Subsystem

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/4297145551b53eaf4c29cb6a5499664ed141e9d8">42971455</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2023-03-08T20:00:59-06:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Merge ISubsystem into Subsystem

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/eab799aac933b1d7b820a1ae921a76b58f1a49aa">eab799aa</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2023-03-09T09:43:02-06:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Use Python XML to add secure connector

This will reduce the difference between the server.xml template

in PKI and the default server.xml provided by Tomcat.

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/661b05cfa91736a101ebadc60578921697dccd64">661b05cf</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2023-03-09T12:53:06-06:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Drop server.xml template

The server.xml template is no longer needed since it is

identical to the default server.xml provided by Tomcat.

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/a45b3e1b49b5057e61f368b1bc844bf64166d169">a45b3e1b</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2023-03-09T12:53:30-06:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Move CMSAdminServlet.importXCert() into CACMSAdminServlet

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/64d59638d06c63b112d7726b36fb6e003a61e915">64d59638</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2023-03-09T12:53:30-06:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Merge ICrossCertPairSubsystem into CrossCertPairSubsystem

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/14ff47121144e1ede8b15bb933d5831e227e19cd">14ff4712</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2023-03-09T14:13:08-06:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Remove unused methods in IAuthority

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/cbcd768c4233a6fe45313d7878b83f6902f6cac7">cbcd768c</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2023-03-09T18:42:51-06:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Update Subsystem.init() for consistency

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/a37bfa1e5cf81292d8b55bb8fb16ce969c03db2a">a37bfa1e</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2023-03-10T10:49:54-06:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Fix CMSEngine.startupSubsystems()

The CMSEngine.startupSubsystems() has been updated to skip

starting up the SelfTestSubsystem during installation since

the certs might not be available yet at that point.

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/77a7c567d6c322a22c686c7c2fb7c9b4dbe508b8">77a7c567</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2023-03-10T15:25:28-06:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Add Subsystem.engine

The Subsystem.engine field has been added to store the CMSEngine

instance such that the subsystem no longer needs to use a static

method such as CMS.getCMSEngine() or <engine>.getInstance() to

get the instance.

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/19258e1784499ff0fe427cf4f02852b0a47665f6">19258e17</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2023-03-10T18:02:23-06:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Move CertificateRepository to pki-ca

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/7b58094f1c59807ca2385e3bb867eefcc835722d">7b58094f</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2023-03-10T18:02:23-06:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Rename RandomConfig to SecureRandomConfig

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/e8d28d293509a55998b5403ccc0b414c6d8bd10e">e8d28d29</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2023-03-10T18:02:23-06:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Add SecureRandomFactory

The code that creates a SecureRandom instance has been moved

into SecureRandomFactory.

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/0f7eb8c8a2146f8d1e0acb9e645baffd0cc84f94">0f7eb8c8</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2023-03-10T18:02:23-06:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Update RequestRepository

The RequestRepository has been updated to take a SecureRandom

instance instead of creating it during initialization.

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/ccedcd2ec6b3b28816d355f40faa109fc660b988">ccedcd2e</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2023-03-10T18:53:54-06:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Update KeyRepository

The KeyRepository has been updated to take a SecureRandom

instance instead of creating it during initialization.

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/b1038c5d002f6e43312fbfe7d28cc48159e11c7f">b1038c5d</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2023-03-10T18:57:28-06:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Update CertificateRepository

The CertificateRepository has been updated to take a SecureRandom

instance instead of creating it during initialization.

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/0f428f6da0241b64ec3659ca02fd53b3fbedd4a3">0f428f6d</a></strong>

<div>

<span> by Chris Kelley </span> <i> at 2023-03-13T11:50:42+00:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Fix adding Profile/Profile Mapping in TPS UI

There were some naming mismatches and request format issues which are

now resolved.

In addition, there was a larger problem that JS arrays are not always

deserialised correctly, so a new StringHashMapValueDeserializer class is

introduced to assist with this.

Adding ProfileMappingData objects still did not work, as the Id and

ProfileMappingID were used interchangeably causing a null reference.

ProfileMappingData has been modified to be of the same format as

ProfileData.

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/025d009fd63a86aa6563d0925c495641d24e42f7">025d009f</a></strong>

<div>

<span> by Chris Kelley </span> <i> at 2023-03-13T15:46:13+00:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Merge TPSEngine classes into one class

Simplifies a lot of code. The TPSSubsystem no longer requires the engine

field, so it has been removed.

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/95b61a269ac45f59fded0a83175411a5457897a4">95b61a26</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2023-03-14T09:37:36-05:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Add AuthManager.engine

The AuthManager.engine field has been added to store the

CMSEngine instance such that the auth manager no longer

needs to use a static method such as CMS.getCMSEngine()

or <engine>.getInstance() to get the instance.

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/de26cac14fc39c76c2b56768a46ad1ff988bef1f">de26cac1</a></strong>

<div>

<span> by Chris Kelley </span> <i> at 2023-03-14T14:46:51+00:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Introduce pki-rpminspect profile for rpminspect

Allows more fine-grained control of checks than CLI arguments, which

allows us to run the javabytecode, runpath and annocheck jobs again

without disabling them completely.

The license job is disabled because of a bug in rpminspect itself.

The metadata job is still disabled, but we can probably now configure it

to pass using this profile.</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/3a1eb908921df73a0ea4828da44f3a1891775d06">3a1eb908</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2023-03-14T13:44:47-05:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Convert IAuthzManager into AuthzManager class

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/7bbe6f263f0a986846a3567c0d0f83c6e7b1cc20">7bbe6f26</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2023-03-14T13:51:16-05:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Merge name fields into AuthzManager

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/6ba99e843084fe1582aa7ec54251a457cc7b6b6e">6ba99e84</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2023-03-14T13:51:24-05:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Merge implName fields into AuthzManager

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/346848d1e6711340477ea683b881391d060ee86d">346848d1</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2023-03-14T13:51:31-05:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Merge config fields into AuthzManager

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/cb7963fbb77e41a831acf9d7d1f23a68c988483f">cb7963fb</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2023-03-14T13:55:00-05:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Convert GroupMemberProcessor.userGroupManager into local variable

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/6e8594cf04e0b9100f65889886cc1d8e88449299">6e8594cf</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2023-03-14T13:56:08-05:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Convert SecurityDomainProcessor.random into local variable

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/12d7f7c073064aba90066ad10bfc15969c5f0bf0">12d7f7c0</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2023-03-14T16:25:15-05:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Convert IAccessEvaluator into AccessEvaluator class

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/0bb2390c505831738b725354f6074ad8f656006d">0bb2390c</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2023-03-14T16:25:17-05:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Merge type fields into AccessEvaluator

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/8bbed3a7836d3d05f085ef8e32f3545f9e5dc7a6">8bbed3a7</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2023-03-14T16:25:18-05:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Merge description fields into AccessEvaluator

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/99143b829e2a23b9504deff5995ac642f31c22e8">99143b82</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2023-03-14T16:25:18-05:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Convert GroupAccessEvaluator.mUG into local variable

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/daa864b8abe2092903f76d3113c49a7cf553e525">daa864b8</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2023-03-14T16:27:11-05:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Remove unused SubsystemService.engine

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/a3da0d585f066bcd1fbcd6a31a9984ccb2aca86e">a3da0d58</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2023-03-14T16:42:26-05:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Convert SystemConfigService.csState into local variable

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/ecbfcdde013ad1c14a2f2efadaff0f5b3b7f5ff3">ecbfcdde</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2023-03-14T16:42:26-05:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Remove unused SystemConfigService

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/13a37cf9a250b21e028cc30526a04912861ad62e">13a37cf9</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2023-03-14T18:42:39-05:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Rename SecurityDomainSessionTable to MemorySecurityDomainSessionTable

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/4945bcf6d356da6cb0656405cbf5e2394595899a">4945bcf6</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2023-03-14T19:00:23-05:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Convert ISecurityDomainSessionTable into SecurityDomainSessionTable class

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/e1b7c9c6955bef9ebf096db3c25ebb2976146a48">e1b7c9c6</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2023-03-14T19:09:45-05:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Merge timeToLive fields into SecurityDomainSessionTable

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/4d4caec440b2a59b3b1626b5b69b1289ca0e1f5a">4d4caec4</a></strong>

<div>

<span> by Chris Kelley </span> <i> at 2023-03-15T08:43:00+00:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Remove serialVersionUID from classes that don't implement Serializable

Most/all of this is from classes inheriting from LogEvent. In the past

LogEvent implemented an interface called ILogEvent, which in turn

extended Serializable. ILogEvent no longer exists, so none of these

classes are Serializable, so the field is not used and unnecessary.</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/186f936f71dc7896e317538219d1a6d3653307b1">186f936f</a></strong>

<div>

<span> by dependabot[bot] </span> <i> at 2023-03-15T11:13:06+00:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Bump ansible from 2.9.13 to 7.0.0 in /tests/dogtag/pytest-ansible

Bumps [ansible](https://github.com/ansible/ansible) from 2.9.13 to 7.0.0.

- [Release notes](https://github.com/ansible/ansible/releases)

- [Commits](https://github.com/ansible/ansible/commits)

---

updated-dependencies:

- dependency-name: ansible

  dependency-type: direct:production

...

Signed-off-by: dependabot[bot] <support@github.com></pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/0ada6c8f94918a497319684ef41d615dfa42f431">0ada6c8f</a></strong>

<div>

<span> by Chris Kelley </span> <i> at 2023-03-15T14:01:23+00:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Code clean up in DisplayBySerial

* Replace BigInteger constructor

* Reorder modifiers to match JLS, make logger final

* Put array designator on the type

* Remove unnecessary semicolon/redundant jumps

* Remove unused engine variable

* Simplify logic in getSerialNumber()

* Use pattern matching instanceof</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/fc60e462a4a8fff84b43ff02a1b8a8fee6689d3f">fc60e462</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2023-03-15T11:57:38-05:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Add PKIRealm.engine

The PKIRealm.engine field has been added to store the

CMSEngine instance such that the realm no longer needs

to use CMS.getCMSEngine() to get the instance.

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/3a4c72918a520119966538658d46a34db9322453">3a4c7291</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2023-03-15T12:08:35-05:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Remove unused PKIRealm.getName()

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/6ab0fd97115df4cebcb4e2f7e57be83c6acbe247">6ab0fd97</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2023-03-15T18:16:56-05:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Merge IMailNotification into MailNotification

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/7102594c3b7d725b7ff9c3f575aa009776e598d0">7102594c</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2023-03-16T09:45:47-05:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Add AuthzManager.engine

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/e295ec39fd1570e57ad58c6257f07ff215b22293">e295ec39</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2023-03-16T09:45:47-05:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Add AccessEvaluator.engine

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/3d5297b80f1db38cb8581536436307db20b038d5">3d5297b8</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2023-03-16T09:45:47-05:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Add Processor.engine

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/44084f696180c65b98147add99f633969e2400a9">44084f69</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2023-03-16T09:45:47-05:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Add LDAPSecurityDomainSessionTable.engine

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/e9851e1ff24878d46bbe5063ac0c1fd2f1ae5ffe">e9851e1f</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2023-03-16T13:19:38-05:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Update GroupAccessEvaluator to use AccessEvaluator.engine

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/941ffa76c350cb436ae24be22294343af466e24f">941ffa76</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2023-03-16T13:31:06-05:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Move CMSRequestDAO.authz into KeyRequestDAO

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/c35d83806fe0110c84fbe60daf9d50639859abc3">c35d8380</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2023-03-16T13:31:06-05:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Add SystemInfoServlet.getCMSEngine()

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/efd9fdf5768bb1213b07dadaf62ac59b17eea50d">efd9fdf5</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2023-03-16T13:31:06-05:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Add ACLInterceptor.getCMSEngine()

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/e5c4fa12d129f0b7c24d039393b6276fbf470021">e5c4fa12</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2023-03-16T15:20:28-05:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Add Job.engine

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/a3018bb107f15dcfda6c2d26575a27123aa947d9">a3018bb1</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2023-03-16T15:22:37-05:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Convert CertUserLocator into class

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/af086eb61356de5bb1a15682c47216d5e33e5e1a">af086eb6</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2023-03-16T15:28:02-05:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Add CertUserLocator.engine

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/b403a1359ea47ddb8a024ccb344539c67500cdfb">b403a135</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2023-03-16T17:06:29-05:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Add DBSubsystem.engineConfig

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/ebb6e5003471368e437772a22c4095f784b97062">ebb6e500</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2023-03-16T17:06:29-05:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Move PWCBsdr to pki-ca

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/cdbda8a9417b7180e3dc5786db96e7ced68eebfe">cdbda8a9</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2023-03-16T17:06:29-05:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Add PWsdrCache.engineConfig

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/58551e156880396b86cc655ed6757f97d5bd19db">58551e15</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2023-03-16T17:06:29-05:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Convert IRequestListener into RequestListener class

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/8bf953f0f255f3bc729e3a98a35f57c4aa4dbbc8">8bf953f0</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2023-03-16T17:06:29-05:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Add RequestListener.engine

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/3f99d74d08bbee0aecc50337a8d2e340eb22b602">3f99d74d</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2023-03-16T17:06:29-05:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Add Connector.engine

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/b10d0d6cd6e834621e958e7fb34da89d41241ac9">b10d0d6c</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2023-03-16T17:06:29-05:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Add Resender.engine

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/4ab7e88f8b5d1190afd84acc1776a2ee13c0b9ab">4ab7e88f</a></strong>

<div>

<span> by Chris Kelley </span> <i> at 2023-03-17T08:57:42+00:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Fix token filtering in TPS UI

Only the filter created from input in the search bar was being

used to compose the ldapsearch query. The attributes were passed

across from the client and into the procesing method but were not

then passed on to the database.

Resolves #2178816

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/1f59fcc4911e586de5dfed8a19abe36d4b2ee598">1f59fcc4</a></strong>

<div>

<span> by Chris Kelley </span> <i> at 2023-03-17T14:44:46+00:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Code cleanup in JssSubsystem

* Make logger final

* Remove unnecessary mId static variable

* Make mFormatter an instance variable

* Remove commented out old code

* Use try-with-resources

* Use pattern-matching instanceof

* Remove unnecessary boolean literals and control flow jumps

* Don't create variables just to return them

* Move array designator to the type

* Combine identical catch blocks

* Use isEmpty() to check for empty strings</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/74dbf86c08bb6eb0b3b72c7c16f9865a5e5fd246">74dbf86c</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2023-03-17T19:47:51-05:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Clean up log messages in CMSServlet

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/1b37f87f6e1e6dd3bb56812541b8bbc70d6023e1">1b37f87f</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2023-03-20T09:21:35-05:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Store CMSEngine in Processor

All instances of Processor have been modified to store the

CMSEngine object such that it can be used by other objects

in the Processor.

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/8691682d93fcf9055cf511806e9d6344aae6651b">8691682d</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2023-03-20T09:21:35-05:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Refactor CMSGateway

Previously the CMSGateway used the static CMS.getCMSEngine()

which could potentially cause class loading issues. To avoid

the problem the static fields and methods in the class have

been converted into non-static, and a new engine field has

been added to store a reference to the CMSEngine instance

such that it no longer needs to rely on CMS.getCMSEngine().

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/df552406e3dfc88e284ae1b54a8783e7be4e8957">df552406</a></strong>

<div>

<span> by Chris Kelley </span> <i> at 2023-03-20T15:56:09+00:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Tidy up in AVAPattern

* Tidy up vertical whitespace/indentation

* Use ternary operators

* Simplify some logic

* Use isEmpty() to check for an empty string.

* Remove empty statements and commented out old code

* Make logger final</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/09d7cc9d92764767c02991e00f4765614f40b34e">09d7cc9d</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2023-03-21T08:24:53-05:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Update CLIException.code

The code field in CLIException has been updated such that CLIs

that throw this exception will return a non-zero code by default.

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/77351fe73a81d45f086295c1d9c405917016d43b">77351fe7</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2023-03-21T14:12:22-05:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Update pki-server ca-cert help messages

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/65a113314b2fd744b22fa1fb0106f8534879ce98">65a11331</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2023-03-21T20:01:53-05:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Refactor MailNotification

The code that initializes the mHost field in MailNotification's

constructor has been moved to the caller.

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/6b5edd9f4b9d5707cad2060c95b803db865ee7f4">6b5edd9f</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2023-03-21T20:14:12-05:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Move RequestQueue.recover() into CMSEngine

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/5cfd0388132dab99931ff73e96a20788fa35beae">5cfd0388</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2023-03-21T20:14:16-05:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Simplify CMSEngine.isExcludedLdapAttr()

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/756bb42cf96c66889391c48a791782c85f99d656">756bb42c</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2023-03-21T20:14:16-05:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Simplify CMSEngine.excludedLdapAttrsList

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/2b9f4ecb4a4f7ededc09e3a443eb3ed29fd8f2b6">2b9f4ecb</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2023-03-21T20:14:16-05:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Move ServletUtils.initializeAuthz() into CMSServlet

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/3d5fcc99cd8a20e1f5313390505701608dad071d">3d5fcc99</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2023-03-22T10:08:14-05:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Add pki-server <subsystem>-user-cert-find

The pki-server <subsystem>-user-cert-find command has been added

to list the certs assigned to a user.

https://github.com/dogtagpki/pki/wiki/PKI-Server-Subsystem-User-Certificate-CLI

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/3ddfa0446b8334d7b9460abc555c00c463f47d22">3ddfa044</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2023-03-22T10:08:14-05:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Add pki-server ca-cert-request-import

The pki-server ca-cert-request-import has been added to import

a cert request into CA database. The CLI will call the existing

PKISubsystem.import_cert_request().

https://github.com/dogtagpki/pki/wiki/PKI-Server-CA-Certificate-Request-CLI

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/23b7460a151bf21e5dc9a0b091a3468ed2243771">23b7460a</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2023-03-22T10:22:05-05:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Add --subsystem param for pki-server sd-host-add

The pki-server sd-host-add command has been modified to require

a subsystem type.

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/5fd532869add17d3b29f7bfe07b2a0abe1e82e98">5fd53286</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2023-03-23T10:39:43-05:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Rename pki-server sd-host-add to pki-server sd-subsystem-add

The pki-server sd-host-add command has been renamed into

pki-server sd-subsystem-add since it's used to manage subsystems

(which are identified by hostname, port, and subsystem type)

in the security domain instead of hosts.

The original CLI was only used for development and has never

been officially documented so it's not necessary to document

this change.

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/f98fc86b3bfc2c7f23a76002b04020e2513fad5f">f98fc86b</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2023-03-23T10:39:43-05:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Add pki-server sd-subsystem-find

The pki-server sd-subsystem-find has been added to display the

subsystems registered in the security domain.

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/81bdee54ab187b6f34522d894f3302e321e83264">81bdee54</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2023-03-23T10:39:43-05:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Add pki-server sd-subsystem-del

The pki-server sd-subsystem-del has been added to remove a

subsystem from the security domain.

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/35fd3c422714b56a8586e6a8d008a36294d0d910">35fd3c42</a></strong>

<div>

<span> by Chris Kelley </span> <i> at 2023-03-24T09:27:50+00:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Re-enable the licence check.

With the release of rpminspect-data-fedora-1.10-1.fc37 the bug in this

check is resolved, so we can run it again.</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/a5744ed7c3775ce72e749d789012ebe1d9f824e8">a5744ed7</a></strong>

<div>

<span> by Chris Kelley </span> <i> at 2023-03-24T13:52:27+00:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Remove unnecessary else clauses to tidy up logic

50 files, more to come, there is a lot of this.

I tried to only simplify the logic, but some classes needed formatting

applied because there mixes of spaces, tabs and weird indentation and it

was impossible to verify the changes without it.</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/9f8b3cc46fd7bd998427a68b31c0f0e8de5e3c57">9f8b3cc4</a></strong>

<div>

<span> by Chris Kelley </span> <i> at 2023-03-24T14:04:01+00:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Code cleanup in CRLIssuingPoint

* Remove unused mCertRepository member variable

* Tidy up logic/unnecessary else clauses/boolean literals

* Remove conditionals that always evaluate either true/false

* Use isEmpty()

* Use pattern matching instanceof

* Catch Exception instead of Throwable

* Tidy up formatting to match JLS</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/03ca8a309c2e34a9ab093a2f98d9640973044094">03ca8a30</a></strong>

<div>

<span> by Chris Kelley </span> <i> at 2023-03-24T16:06:59+00:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Remove unnecessary else clauses from 50 more classes.

Tidies up some more logic.</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/67ed64e68c390d2a4450d2ff99d0edded07f33ca">67ed64e6</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2023-03-24T11:58:07-05:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Add --member param for pki-server <subsystem>-group-find

The pki-server <subsystem>-group-find has been updated to provide

a way to find the groups that contain a user.

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/e84a2b1de548c929ed864c4984edeca843ccbeb0">e84a2b1d</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2023-03-24T11:58:07-05:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Add pki-server <subsystem>-group-member-del

The pki-server <subsystem>-group-member-del has been added to

remove a member from a group.

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/6aaa8fa401cd941edc997fca6143a765ac43c862">6aaa8fa4</a></strong>

<div>

<span> by Chris Kelley </span> <i> at 2023-03-24T20:35:37+00:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Fix unnecessary else clauses in 50 more classes</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/41d0ab236ea6ec2363cf2071b5f69f6ebf847b07">41d0ab23</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2023-03-24T16:29:53-05:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Update log messages in ProfileProcessServlet

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/eb6740e6f0dc55d7753547b7add10b936f965cd2">eb6740e6</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2023-03-24T16:29:53-05:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Update log messages in UpdateDomainXML

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/579613e7e3fd34ac925b644132f0a422557c023a">579613e7</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2023-03-24T16:29:53-05:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Update log messages in PKIDeployer.leave_security_domain()

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/7676818bcd549493ad2e7933f77f8350a2c5078b">7676818b</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2023-03-24T16:29:53-05:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Move Auditor.auditor into CMSEngine

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/a20ecee148d39fc61122042e6fd400f686d43280">a20ecee1</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2023-03-24T16:29:53-05:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Add Auditor.engine

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/289963aa0043f9349e33824016544d0c7f0840cd">289963aa</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2023-03-24T16:29:53-05:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Add LogEventListener.engine

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/4709db36834b8604627a3dc1806d558816a5d400">4709db36</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2023-03-24T16:29:53-05:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Add RequestNotifier.engine

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/60ca8006de644bfc3f7575bfa75b3c2e100d4408">60ca8006</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2023-03-24T16:29:53-05:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Add PKIServerSocketListener.engine

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/1fab98b7e3a24b720bb57c7d741ebf187da72348">1fab98b7</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2023-03-24T17:18:31-05:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Update log messages in profile services

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/b30bad6b740acf564cec2424a7cc58c01da3e921">b30bad6b</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2023-03-24T18:43:54-05:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Move Subsystem.engine initialization into CMSEngine.loadSubsystems()

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/cfedd6b3555ed530795edeb138fee584d0d7479d">cfedd6b3</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2023-03-24T18:44:18-05:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Add Processor.init()

The code that initializes a Processor has been moved into init().

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/b0d97309ab1f9df5c32fab2acf93608c487e81a5">b0d97309</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2023-03-24T18:44:18-05:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Add GenericPolicyProcessor.engine

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/3adfcf0857fdaa0a6b77673e282290187ecb2d88">3adfcf08</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2023-03-24T18:44:18-05:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Move ServletUtils.getACLMethod() to CAProcessor

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/69151c395d3a26d22cd07ab56385294ed88ea0aa">69151c39</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2023-03-24T18:44:18-05:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Replace JssSubsystem.mInstance with CMSEngine.jssSubsystem

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/7215118f4d9d6f4b4f7e25fa6c91b78b7fb96061">7215118f</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2023-03-27T19:49:15-05:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Add JssSubsystem.engine

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/afcb1753ca44caa5471154ea7ed5d0422eb5b8d1">afcb1753</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2023-03-27T19:49:15-05:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Add SelfTest.engine

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/8e8ef0434877f1b9423fa33882ff9310c6a81146">8e8ef043</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2023-03-27T19:49:15-05:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Add PKIProcessor.engine

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/ee71e29f1e8be39afe64c1013182f9a809eb0168">ee71e29f</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2023-03-27T19:49:15-05:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Move KeyCertUtil.signCert() to JssSubsystem

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/5771e25303bdc76504a9eae8997bc6406c9246bd">5771e253</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2023-03-27T19:49:15-05:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Rename profileChangeMonitor to ProfileChangeMonitor

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/f431e9b8b39bc39f27501fe4a5c1410180b675ee">f431e9b8</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2023-03-27T19:49:15-05:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Rename KeyRetrieverRunner thread to KeyRetriever

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/41df6a9583238a2d857d79ad7b495beaf72a44e6">41df6a95</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2023-03-27T22:12:08-05:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Move CertUtils.verifySystemCerts() into CMSEngine

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/73415a1c592f893911641c4c252ea873537c26ca">73415a1c</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2023-03-27T22:12:08-05:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Move CertUtils.verifySystemCertByTag() into CMSEngine

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/b96f7154ab20271d885b32bfc56d07f4750c1b4c">b96f7154</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2023-03-27T22:12:08-05:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Move CertUtils.parsePKCS10() into CAEngine

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/c4a36fe766aa6888463547dd4e3226cc1456e0c6">c4a36fe7</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2023-03-27T22:18:39-05:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Move KeyCertUtil.setAuthInfoAccess() into JssSubsystem

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/7a60e60c6bf286706e8ae8618c67649d50986c58">7a60e60c</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2023-03-27T22:18:39-05:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Move RequestRepository.createRequestID(ephemeral) into KeyRequestDAO

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/7acba9d2473d89d88708ee1dc4bdad608202106c">7acba9d2</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2023-03-28T12:32:11-05:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Move CMSEngine.isExcludedLdapAttr() to DBSubsystem

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/d48bcaaf0933e96b563ec1d65978f9f68b13f298">d48bcaaf</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2023-03-28T12:36:18-05:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Convert DBSubsystem.excludedLdapAttrs into Set

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/43ad9b3f5f7cc67d5d197a59da507cb9bc5fc9ea">43ad9b3f</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2023-03-28T12:40:36-05:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Convert DBSubsystem.isExcludedLdapAttr() into getExcludedLdapAttr()

The DBSubsystem.excludedLdapAttrsEnabled is no longer needed

so it has been removed.

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/6ef51010f65dbedc58a01fb28049143c9915d446">6ef51010</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2023-03-28T12:42:45-05:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Refactor RequestRecord.loadExtDataFromRequest()

The RequestRecord.loadExtDataFromRequest() has been modified

to accept a set of excluded LDAP attribute names such that the

code no longer depends on CMSEngine.

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/ab5e108e0c8c531edaa4f51352ff8f1538f60cee">ab5e108e</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2023-03-28T13:46:31-05:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Remove CSCfgDatabase.engine

The CSCfgDatabase has been modified to no longer depend on

CMSEngine.

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/6b600a7ed7d6f959504e74b998761c711038518a">6b600a7e</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2023-03-28T14:04:51-05:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Consolidate loggers in PKISocketFactory

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/8eb1fb57687af84b7803e56b960db87bf6f25f00">8eb1fb57</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2023-03-28T14:12:40-05:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Add Repository.engine

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/04b5e500ab9f4aed42eb91e4b0346f3218ddc3a2">04b5e500</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2023-03-28T16:59:57-05:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Move PKIClientSocketListener out of PKISocketFactory

The PKIClientSocketListener will only work properly inside PKI

server, so the PKISocketFactory has been modified to store a list

of socket listeners, then the PKIClientSocketListener will only

be added inside PKI server.

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/024391f1b3acd61e4f1e516a2f4b56d997f95f09">024391f1</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2023-03-28T17:24:54-05:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Add setter/getter for PKISocketFactory.clientCertNickname

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/e5158622722deeb7856c019d07057eb130d24809">e5158622</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2023-03-28T17:24:54-05:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Clean up Eclipse classpath

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/c656ef52fb346e9f7538311b7c1e4484ea78220d">c656ef52</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2023-03-28T19:28:52-05:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Convert ILdapPublisher into Publisher class

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/563b18e1b2f055888ce3c992abfedea096854eee">563b18e1</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2023-03-28T19:56:52-05:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Convert ILdapMapper into Mapper class

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/e713c9e5c06740325b253efe5f597951bb4527cd">e713c9e5</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2023-03-28T19:56:52-05:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Remove unused ILdapCertMapper

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/8d75965afad75cf777b32f37c52f593f970cc7f1">8d75965a</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2023-03-28T19:56:52-05:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Remove unused ILdapCrlMapper

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/7a2fcf3abfea43c3a7985c7184b32d133a224db3">7a2fcf3a</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2023-03-29T10:17:43-05:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Drop PKISocketFactory dependency on CMS.getCMSEngine()

The PKISocketFactory.init() has been modified to use the defaults

if there is no configuration provided. The "!external" expression

is supposed to indicate cases where the code is used within PKI

server, but in those cases the configuration is always provided,

so it's not necessary to use the expression anymore. This change

removes the dependency on CMS.getCMSEngine().

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/3b1bbe2b5fadf03c87c257113292b92a4e1ff2dc">3b1bbe2b</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2023-03-29T14:22:37-05:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Remove unused ILdapPluginImpl

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/05eaf09851ae43309ea05b29e346634eddf55891">05eaf098</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2023-03-29T14:22:38-05:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Remove unused ILdapPlugin

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/ffad77281296fd777b63149c2de5b85231cbca8c">ffad7728</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2023-03-29T14:22:40-05:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Remove unused LdapCertMapResult

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/73f438b712e96c3404d86af34d7a32cf116823c0">73f438b7</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2023-03-29T14:22:42-05:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Remove unused IPluginImpl

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/ff1d83efa89529bcea58105a29ca7c78cfc68f8b">ff1d83ef</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2023-03-29T14:22:44-05:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Convert ILdapConnFactory into LdapConnFactory class

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/3ec063eb58a87409f870a8a8d4fd1b5f495d248c">3ec063eb</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2023-03-29T14:22:47-05:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Merge ILdapConnModule into LdapConnModule

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/b836ec7b302ee102c3663e790ee96172d0a66ce8">b836ec7b</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2023-03-29T14:22:50-05:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Convert ILdapExpression into LdapExpression class

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/79adc25000322642617c0b65f970cd9cde819063">79adc250</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2023-03-29T17:33:51-05:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Convert IPasswordStore into PasswordStore class

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/d98829c6cb3489ff5c3ef52f83749d3fc6f56ba7">d98829c6</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2023-03-29T17:45:59-05:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Consolidate PasswordStore.id

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/3e8378d1baf24230e948a0e72fff68be24d1cec9">3e8378d1</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2023-03-30T13:09:39-05:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Add HttpConnFactory.init()

The code that initializes HttpConnFactory has been moved into

init().

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/9aa049c958da7820dd6d095b8800b478593951f7">9aa049c9</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2023-03-30T13:09:51-05:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Add HttpConnFactory.engine

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/ef158aec1fe1507a9357245ef9df6112e663e671">ef158aec</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2023-03-30T13:09:57-05:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Add HttpConnection.init()

The code that initializes HttpConnection has been moved into

init().

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/3a9318d36768ead8fd64afc3be123b443bf09cd5">3a9318d3</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2023-03-30T13:10:11-05:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Add HttpConnection.engine

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/2dc4cbf6d0f1d12f0c53086fdf69d93ce51597a0">2dc4cbf6</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2023-03-30T13:12:16-05:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Add SessionTimer.engine

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/a295823d2cdcd3eff68d01e9e00c5c1944550d45">a295823d</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2023-03-30T18:23:52-05:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Move DBSubsystem constants into DatabaseConfig

Constants in DBSubsystem that are mostly used by DatabaseConfig

have been moved into DatabaseConfig.

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/7d70136ef59f9200de71aaa829e9ea148c630fce">7d70136e</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2023-03-30T18:23:52-05:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Remove unused references to o=NetscapeCertificateServer

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/531c67fc1eb322aa2d65009ca5717a844558c6c8">531c67fc</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2023-03-30T18:23:52-05:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Remove unused RESTServlet

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/04881429df8d10ae9a5e6c9e5886786b43dde08d">04881429</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2023-03-30T18:23:52-05:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Add GetCertChainAdmin

The GetCertChainAdmin servlet has been added to provide a

separate class for each servlet in web.xml.

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/d34f868dad3ae2774e29414da995b1808d7fd5e8">d34f868d</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2023-03-30T18:23:52-05:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Add GetAdminCertBySerial

The GetAdminCertBySerial servlet has been added to provide a

separate class for each servlet in web.xml.

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/33b64fc8115254c54843b34188fdd0a9662fccc4">33b64fc8</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2023-03-30T18:23:52-05:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Add GetAdminBySerial

The GetAdminBySerial servlet has been added to provide a separate

class for each servlet in web.xml.

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/a7fddc30f74ba611cc775aeb2882ac43344b8c80">a7fddc30</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2023-03-30T18:23:52-05:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Add GetAgentBySerial

The GetAgentBySerial servlet has been added to provide a separate

class for each servlet in web.xml.

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/f267747fd92940d5f03d766932c48ffc789a505d">f267747f</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2023-03-30T18:23:52-05:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Add ProfileSubmitSSLClientServlet

The ProfileSubmitSSLClientServlet has been added to provide

a separate class for each servlet in web.xml.

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/969092e864bc0c8b823fd4458ab77461cc72491f">969092e8</a></strong>

<div>

<span> by Christina Fu </span> <i> at 2023-03-31T12:03:42+02:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Bug2092522_StatusChange per config for revokeCert and revokeExpiredCert

This patch fixes "part 1" and "part 3" of Bug 2092522 where it is reported that

 1. if op.enroll.xxx.revokeCert=false, an error message is received at attempt to change token status. e.g.

"certificate revocation (serial 0x100024e) not enabled for tokenType: KeyGR, keyType: encryption, state: terminated"

 2. It also should addresses the request in comment#6 regarding expired cert.

  For that to work, one needs to enable:

"op.enroll." + tokenType + ".keyGen." + keyType + ".recovery." + tokenReason + ".revokeExpiredCerts"

fixes part 1&3 of https://bugzilla.redhat.com/show_bug.cgi?id=2092522

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/a76405ad7f0680cf4e503f4b1f66a4b3d07d7d93">a76405ad</a></strong>

<div>

<span> by Christina Fu </span> <i> at 2023-03-31T12:03:42+02:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Bug2176233_part2_StatusChange_holdRevocationUntilLastCredential

This patch requires the previous commit that addresses part 1&3 of the

    bug.  This previous commit for bug 2092522 must be applied first.

    This patch addresses "part 2" of the original Bug 2092522

    ("part 2" has been cloned to bug 2176233).

    The issue reported regards holdRevocationUntilLastCredential

    when if set, and if there are shared tokens existing, an error

    Exception is thrown.

    fixes part 2 of https://bugzilla.redhat.com/show_bug.cgi?id=2176233

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/9e04e4a5333858fd947c3ad4a43e41e06985df06">9e04e4a5</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2023-03-31T09:38:19-05:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Update rpminspect test

The rpminspect test has been modified to use pki-runner image,

get the packages from pki-dist image, and get the test files

from pki-tests package instead of pki-builder image. This way

it's no longer necessary to store pki-builder image in GH cache

which reduces the cache size by around 420 MB.

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/587de3b1b6dad5a898d7171697ac1356fc6fc45f">587de3b1</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2023-03-31T10:13:19-05:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Update CACMSAdminServlet to use @WebServlet

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/e784926de0ef6cb7d304c83a579e5c0f54d4d2e0">e784926d</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2023-03-31T10:13:19-05:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Update CAUpdateNumberRange to use @WebServlet

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/b607d2042739ce52aaefc232e3e7c2c11d321680">b607d204</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2023-03-31T10:13:19-05:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Update GetCertChainAdmin to use @WebServlet

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/fc561753ddc9d3036deadcbe1c3595153d3fcd3a">fc561753</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2023-03-31T10:13:19-05:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Update GetCertChain to use @WebServlet

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/4b77ca5f4be4ec543814acdde356d1e35ba00472">4b77ca5f</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2023-03-31T10:13:19-05:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Update CAPolicyAdminServlet to use @WebServlet

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/f13bcdc264894e3ca0787675d04063aa23e53ebc">f13bcdc2</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2023-03-31T10:13:19-05:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Update GetAgentBySerial to use @WebServlet

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/b1337d7e8e131aabaf4f580b6fda0aee4ab6eef8">b1337d7e</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2023-03-31T10:13:19-05:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Update GetAdminCertBySerial to use @WebServlet

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/5ea5b7b51cec72f64c35e3530883e701e3b239a4">5ea5b7b5</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2023-03-31T10:13:19-05:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Update GetAdminBySerial to use @WebServlet

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/511cd1b5ca7926b82fe811530292352d757cceb7">511cd1b5</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2023-03-31T10:13:19-05:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Update GetBySerial to use @WebServlet

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/060c4cabf5aa620b9b3b06306f2c5089daca94d6">060c4cab</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2023-03-31T10:13:19-05:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Update CAAdminServlet to use @WebServlet

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/ff5e5e4df3e22095101d58dc7c7340b5485f1c6b">ff5e5e4d</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2023-03-31T10:13:19-05:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Update RegistryAdminServlet to use @WebServlet

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/6ca825f7fa63f77d035838505ecfde8d2ad34095">6ca825f7</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2023-03-31T10:13:19-05:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Update ProfileSubmitSSLClientServlet to use @WebServlet

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/36c6dc1825c81cd458863e36f6bbef3799b3bd09">36c6dc18</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2023-03-31T10:13:19-05:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Update ProfileSubmitServlet to use @WebServlet

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/2f1b7a3ef81d82351a69f65d37034adca5801a35">2f1b7a3e</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2023-03-31T10:13:19-05:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Update ProfileAdminServlet to use @WebServlet

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/0190eb01f0c97b4c50de3a5c6ae7fafe7f3cce41">0190eb01</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2023-03-31T10:29:38-05:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Move CMSEngine.signedAuditLogger to Auditor

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/289ef1b7137bcd99fdac80f12237ca03d16cc6de">289ef1b7</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2023-03-31T10:29:38-05:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Update PKIRealm to use Auditor

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/5ee1a2906d8cd5a4f28ad7e8f2d75a1652d123e0">5ee1a290</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2023-03-31T10:29:38-05:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Update PKIProcessor to use Auditor

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/fefc505f407f826d4f8aac1b95c48115ee87ab3b">fefc505f</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2023-03-31T10:29:38-05:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Update SelfTestSubsystem to use Auditor

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/0b9a6655d6670549599d4dcc37ad056444b39d04">0b9a6655</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2023-03-31T10:29:38-05:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Update ACLInterceptor to use Auditor

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/49fc4210a5fdd2af697f095cc9034059d5e4970a">49fc4210</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2023-03-31T10:29:38-05:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Update Processor to use Auditor

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/cf3c07ce8b8aab5588d82ef888d9a0bd645cdf63">cf3c07ce</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2023-03-31T10:29:38-05:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Update SubsystemService to use Auditor

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/07da3adde06a9754e28aaef2d1075a84a7bbe01d">07da3add</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2023-03-31T10:29:38-05:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Remove unused CertUtils.signedAuditLogger

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/d47354f9c99dfc97bfbd6a04b8d041b1ef9b26fb">d47354f9</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2023-03-31T18:18:19-05:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Fix Connector initialization in CAService.getConnector()

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/7b7cba5b9f29a7c01d235a1a6ba67f4ce5197c53">7b7cba5b</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2023-03-31T18:18:19-05:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Fix KRA test with sequential serial numbers

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/b058bc65750eec61efe6e9662c2f03f62c00a927">b058bc65</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2023-03-31T18:18:19-05:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Update log messages in EnrollDefault.getSigningCert()

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/8d658d9cf95b9f217448a12cc2fef8bd061363da">8d658d9c</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2023-03-31T18:18:19-05:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Add CAHeaderServlet

The CAHeaderServlet has been added to provide a separate class

for each servlet in web.xml.

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/b7e11152fd96bbbb8c18b761681f62c37c1a63c7">b7e11152</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2023-03-31T18:18:19-05:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Update PKISocketFactory to use Auditor

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/38daa6a1a681335cacf85bf6fd32d84c18d38d21">38daa6a1</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2023-03-31T18:18:19-05:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Update CMSServlet to use Auditor

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/d0ebdd3477cd57158dd8dee66a062201c6ace732">d0ebdd34</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2023-03-31T18:18:19-05:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Update TPSProcessor to use Auditor

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/1d459320a25d1cb0a27c76bebe70df5d2b09f023">1d459320</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2023-03-31T18:18:19-05:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Update AdminServlet to use Auditor

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/9681b248c1de18cd893ce5834f8a5888a8f5ab94">9681b248</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2023-03-31T19:16:21-05:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Update SessionTimer to use Auditor

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/971c57bf6e610d4cfae10ab5751c3185fa5b723e">971c57bf</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2023-03-31T20:06:30-05:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Add getters for ConnectorConfig

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/3886b184d53588e0f70ae50817f9f5e7407a518d">3886b184</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2023-03-31T20:07:57-05:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Add HttpConnector.init()

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/4b358d6c83630b5c6186ce264563c62aefa4cee6">4b358d6c</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2023-03-31T20:07:57-05:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Update HttpConnection to use Auditor

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/bf5135dae9f9ab704d1229cc9c72ea980bde21db">bf5135da</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2023-04-03T11:06:28-05:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Remove CMS.engine

The static CMS.engine variable has been removed since it could

potentially create conflicts between subsystems. Instead, the

engine instances are now stored in the actual engine classes of

each subsystem.

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/9abddd7a9b3e2a4987304d17ea875177a3598bd9">9abddd7a</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2023-04-03T13:00:24-05:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Add PKISocketFactory.engine

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/fcb81d3fea4e6afaa5ffe58e4f895de3cb0d98e1">fcb81d3f</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2023-04-03T13:19:05-05:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Add UGSubsystem.engine

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/fd2c66bd16e38a09db04d31725d17d45226e0c3d">fd2c66bd</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2023-04-03T13:26:05-05:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Add DBSubsystem.engine

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/1f6c7e374b9620076d260950ae89ffaebd02c906">1f6c7e37</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2023-04-03T14:13:09-05:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Move LdapConnFactory to pki-server

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/f67ee01247da4602da95eb95ba975fcc2e30a786">f67ee012</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2023-04-03T14:13:09-05:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Add LdapConnFactory.engine

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/77df0196fa4ee3ed6a41d58743489c908f07362f">77df0196</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2023-04-03T15:34:49-05:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Initialize PKISocketFactory.engine

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/4b1384e3d5e3c4dcf7baace9a4b310f79cb88c0d">4b1384e3</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2023-04-03T19:41:35-05:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Add setter/getter for PKISocketFactory.secure

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/c7440339b18b8618d382bce205fe48a2bc30e398">c7440339</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2023-04-03T19:41:35-05:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Add CMSEngine.testLDAPConnections()

The code that tests LDAP connections during server startup

has been moved into CMSEngine.testLDAPConnections().

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/4307c06faea243edf8c840f7abc99ddf57d7a197">4307c06f</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2023-04-03T20:49:15-05:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Add CMSEngine.initServerSocketListener()

The code that initializes server socket listener has been moved

into CMSEngine.initServerSocketListener().

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/ba0eaed0dabf4009e9af9dfea7cac7f8563a0b59">ba0eaed0</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2023-04-03T20:53:27-05:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Add CMSEngine.initClientSocketListener()

The code that initializes client socket listener has been moved

into CMSEngine.initClientSocketListener().

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/1e0828ab3ebf1bc37e5e4bef94742c25f10b3d6b">1e0828ab</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2023-04-03T20:53:29-05:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Add PKIClientSocketListener.engine

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/bd8898a037dc456e5439953ddeb3b2f11461674d">bd8898a0</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2023-04-03T20:53:29-05:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Update PKIServerSocketListener to use Auditor

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/bb1c1d01a499aee504fe15a2e32c3515e06b938f">bb1c1d01</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2023-04-03T20:53:29-05:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Update PKIClientSocketListener to use Auditor

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/fda8247278eeacac08a3fe0be1a2b759ca2de820">fda82472</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2023-04-03T21:11:42-05:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Update CA and KRA repositories to use PKISecureRandom

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/7ba9068b17d124fc2fb28d9c2d353bfaa4bf6914">7ba9068b</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2023-04-03T21:11:42-05:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Add PKISecureRandomSpi.engine

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/d938496ceef07ef131b5e3210bca1a4ade97e9e9">d938496c</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2023-04-03T21:11:42-05:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Update PKISecureRandomSpi to use Auditor

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/2d6460f23450ae25b55d04ba67bd0a63ca9810bf">2d6460f2</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2023-04-04T11:11:29-05:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Update PublisherAdminServlet to use @WebServlet

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/592403927359c077e59b49dcdcb36f4a3967d68b">59240392</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2023-04-04T11:11:29-05:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Update CAIndexServlet to use @WebServlet

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/293e917ad1d63c49c4900a7a9a0ba13e8495b70c">293e917a</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2023-04-04T11:11:29-05:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Update ReasonToRevoke to use @WebServlet

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/b135bf7a404dbdb60bb5691ca0f44a42af5e7fb1">b135bf7a</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2023-04-04T11:11:29-05:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Update CertSearchReqs to use @WebServlet

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/e9b09d5531e22656d5af420892c9dcbf7c18f790">e9b09d55</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2023-04-04T11:11:29-05:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Update ProfileApproveServlet to use @WebServlet

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/0cb8e43dc9a230f64ebc20fb51b1c73cde0db05c">0cb8e43d</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2023-04-04T11:11:29-05:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Update ProfileReviewServlet to use @WebServlet

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/217edbd51bc601f84f9d23405a17889dbc92ed15">217edbd5</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2023-04-04T11:11:29-05:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Update KRAConnectorServlet to use @WebServlet

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/7b19dbb92f446618bf2ab59a64cce2a7f1ca77f1">7b19dbb9</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2023-04-04T11:11:29-05:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Update CAHeaderServlet to use @WebServlet

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/3656afe568d8785999536b2cbb7a153e0c1cf045">3656afe5</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2023-04-04T11:11:29-05:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Update CheckRequest to use @WebServlet

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/ed35c8e3f4b4209f5b023332ad36922c0871816d">ed35c8e3</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2023-04-04T11:11:29-05:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Update DoRevokeTPS to use @WebServlet

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/a359310ca28ded533a88f0f4da2ed4b4df284b8c">a359310c</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2023-04-04T11:11:29-05:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Update CMCRevReqServlet to use @WebServlet

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/57d5fcfdd47d48b269cdc13fcdf35487e55386e5">57d5fcfd</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2023-04-04T11:11:29-05:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Update DoUnrevokeTPS to use @WebServlet

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/6f9ad1c83899f77285b8e6a1550b9d4ecb0979c4">6f9ad1c8</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2023-04-04T11:11:29-05:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Update RevocationServlet to use @WebServlet

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/22eb664ffa235ac04408700f28b2867a6cfe389c">22eb664f</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2023-04-04T11:11:29-05:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Update GetSubsystemCert to use @WebServlet

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/49041a7de72e77e4b90260e78b962db43896d4b5">49041a7d</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2023-04-04T11:11:29-05:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Update ProfileProcessServlet to use @WebServlet

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/b25ef3b3aa3c7687b3bd158082e0c265e9e87fe8">b25ef3b3</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2023-04-04T11:11:29-05:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Update ProcessCertReq to use @WebServlet

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/765d83ac200235bebc57a38a9e4e333e44c1f0ad">765d83ac</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2023-04-04T11:11:29-05:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Update UpdateCRL to use @WebServlet

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/f7c873665f60d1bb0e00ebd2f6456d3c6a3d2bb7">f7c87366</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2023-04-04T11:11:29-05:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Update DisplayCRL to use @WebServlet

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/649644419cbe44398913cd69d7878380c397a3d9">64964441</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2023-04-04T15:49:04-05:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Add CAMainPageServlet

The CAMainPageServlet has been added to provide a separate

class for each servlet in web.xml.

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/8e76fcc69be77e12f9149bd09cab5302d34d794f">8e76fcc6</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2023-04-04T15:53:52-05:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Add CAACLAdminServlet

The CAACLAdminServlet has been added to provide a separate class

for each servlet in web.xml.

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/6ef476bf997bb10202f9e5df10e5d7ae1f5128ec">6ef476bf</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2023-04-04T15:58:01-05:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Add CAUsrGrpAdminServlet

The CAUsrGrpAdminServlet has been added to provide a separate

class for each servlet in web.xml.

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/0b70e4622c8d512a58c51b18f1741f829150f9c8">0b70e462</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2023-04-04T16:02:53-05:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Add CALogAdminServlet

The CALogAdminServlet has been added to provide a separate class

for each servlet in web.xml.

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/c7ab9327e06b00472521a22b1d903ad90f5b06d8">c7ab9327</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2023-04-04T16:12:17-05:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Add RASCEPServlet

The RASCEPServlet has been added to provide a separate class for

each servlet in web.xml.

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/973b67575652f39ea7999a4818c0d86168def275">973b6757</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2023-04-04T16:12:17-05:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Add DynamicProfileSCEPServlet

The DynamicProfileSCEPServlet has been added to provide a separate

class for each servlet in web.xml.

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/f82d269cd99f726073e88e6f0908e54883c5a2c9">f82d269c</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2023-04-04T18:25:32-05:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Update pki.spec

The meta package contains only a README file, so it has been

converted into a noarch.

The package description has been updated to include the EST

Responder.

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/19fdb876b8d4728a9bc66178b92298a7b4f0ac74">19fdb876</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2023-04-04T18:46:25-05:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Initialize Auditor before LogSubsystem

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/d9f5392757d7620fd4ddc4d504e072e908a914d3">d9f53927</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2023-04-04T18:46:26-05:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Update LogEventListener to use Auditor

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/42f01b2ebd3198431777589483224851b2affc93">42f01b2e</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2023-04-04T18:46:28-05:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Update RollingLogFile to use Auditor

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/0737f5db5df51bf3b9e23fbb4ec8eb52b62befa2">0737f5db</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2023-04-04T19:55:09-05:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Update CertificateAuthority to use Auditor

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/78cd92cabbe0e463d266813de68d22aa2ddd7171">78cd92ca</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2023-04-04T19:58:02-05:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Update AuthManager to use Auditor

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/b39f58c15d68f28c449ef077b65dc7416867b9a9">b39f58c1</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2023-04-04T21:05:53-05:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Update CMCUserSignedAuth to use Auditor

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/674e7b2a558587f88bfd5c991dc7732d22ef3c0e">674e7b2a</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2023-04-04T21:05:56-05:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Update ProfileSubmitCMCServlet to use Auditor

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/d1aeca73acc84595c9554d160eb6a176132afbde">d1aeca73</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2023-04-04T21:05:56-05:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Update CAService to use Auditor

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/b31056fcf022b99179a4001604f81535fc3fe69d">b31056fc</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2023-04-04T21:05:56-05:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Update CRLIssuingPoint to use Auditor

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/3a4f99491058fb74677f5c071e0dbc76f6b6b406">3a4f9949</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2023-04-04T21:05:56-05:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Update EnrollProfile to use Auditor

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/7be2a7733b65bf1eb53095eefa4068e9d2f605f0">7be2a773</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2023-04-04T21:05:56-05:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Update CAEnrollProfile to use Auditor

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/34c41b3063029797b7e987461bdc16969d3b3dc3">34c41b30</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2023-04-04T21:05:56-05:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Update EnrollInput to use Auditor

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/c58379dbe52562d42c0f3a1080c5d0d5165b5c76">c58379db</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2023-04-04T21:05:56-05:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Update SubsystemGroupUpdater to use Auditor

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/14e05ce5f7cab87177ba2d1cb9c20270b04c9008">14e05ce5</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2023-04-04T21:05:56-05:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Update CRSEnrollment to use Auditor

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/3cef3591a099e7c9a6fb88829b72e57195d799dc">3cef3591</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2023-04-04T21:05:56-05:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Update CMCOutputTemplate to use Auditor

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/f4a6f7e172bd35fe25fa41fa38b94974a604af93">f4a6f7e1</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2023-04-04T21:05:56-05:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Update AsymKeyGenService to use Auditor

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/e9d7df318f8c4c4acb7f0de3583f3316a9dc5dc6">e9d7df31</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2023-04-04T21:05:56-05:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Update EnrollmentService to use Auditor

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/1d0e6ea540cb53f792c9387750fe16f68bf904ef">1d0e6ea5</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2023-04-04T21:05:56-05:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Update NetkeyKeygenService to use Auditor

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/d34818be9ac60eee01a49de318fc31b7082fc5c9">d34818be</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2023-04-04T21:05:56-05:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Update SecurityDataProcessor to use Auditor

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/508a9cf8a9ea73a5fe369577da872e4e82c40ff3">508a9cf8</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2023-04-04T21:05:56-05:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Update SecurityDataRecoveryService to use Auditor

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/c7e334b49e42c2f2c4ed56ba4640e263e85691b6">c7e334b4</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2023-04-04T21:05:56-05:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Update SymKeyGenService to use Auditor

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/6de9b17f8cc122ff0a1dd168a7ebde2c85a807bd">6de9b17f</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2023-04-04T21:05:56-05:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Update TokenKeyRecoveryService to use Auditor

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/e5d34f919402c784bbd68ec8e02028c741fcd0b1">e5d34f91</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2023-04-04T21:05:56-05:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Update KeyRecoveryAuthority to use Auditor

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/2a70bd2935f20e8b7662644b92ad8266ae4c677e">2a70bd29</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2023-04-04T21:05:56-05:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Update OCSPAuthority to use Auditor

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/37709e80e56165d67075e2b90d71fadffd4178f9">37709e80</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2023-04-04T21:05:57-05:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Move SignedAuditLogger.INSTANCE into Auditor

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/8eb06ba0f0b7e9166d5e6d13a521b571b178cffc">8eb06ba0</a></strong>

<div>

<span> by Marco Fargetta </span> <i> at 2023-04-05T11:08:02+02:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Fix pkispawn error with custom SKI

The `hex()` method separation parameter is available only in python > 3.8 but RHEL8 comes with 3.6.

The paramter has been removed and an additional step to add the

separation is introduced.

Fix 2184288

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/a620e40a454a3d9129104f0acc67404f56c520dc">a620e40a</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2023-04-05T10:20:38-05:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Update DoUnrevoke to use @WebServlet

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/ff122def9cfed8b5d78c7f5885b3d7e3382b88ba">ff122def</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2023-04-05T10:20:38-05:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Update CertProcessReq to use @WebServlet

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/63cd61fe13213e6db35f2b29856910ac8265adeb">63cd61fe</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2023-04-05T10:20:38-05:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Update RenewalServlet to use @WebServlet

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/b32aaaea1cade729415d676413c1faf047e30ce6">b32aaaea</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2023-04-05T10:20:38-05:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Update CertQueryReq to use @WebServlet

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/2a1c61f022377812a2c18a4e1a3b430a74ef4911">2a1c61f0</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2023-04-05T10:20:38-05:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Update GetCRL to use @WebServlet

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/5a92492192107345e4fae0693e99ef5fc57b48ff">5a924921</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2023-04-05T10:20:38-05:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Update GetCAChain to use @WebServlet

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/9abbaa697a7fb2697a9bd9592747fcae776d06d8">9abbaa69</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2023-04-05T10:20:38-05:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Update UpdateOCSPConfig to use @WebServlet

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/9acd9be6799f30e26df5171bc001caa2561212db">9acd9be6</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2023-04-05T10:20:38-05:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Update CAMainPageServlet to use @WebServlet

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/541c2e110d2c4540e48a25e901516a9cdcc4a1f5">541c2e11</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2023-04-05T10:20:38-05:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Update CAACLAdminServlet to use @WebServlet

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/a3e4e3b5522e39e7853e33186f0f4f449f19f67d">a3e4e3b5</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2023-04-05T10:20:38-05:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Update CAUsrGrpAdminServlet to use @WebServlet

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/0dddbe998b8a396e666413cb81ca906c0e0e92c1">0dddbe99</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2023-04-05T10:20:38-05:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Update CALogAdminServlet to use @WebServlet

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/9b4602243e971aa4a6f34a99cc87ff2e4c0535e6">9b460224</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2023-04-05T10:20:38-05:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Update RASCEPServlet to use @WebServlet

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/72ef6378d007299a1960aedb3786dcd7f639f4ab">72ef6378</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2023-04-05T10:20:38-05:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Update DynamicProfileSCEPServlet to use @WebServlet

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/ca9f8876dbdfed1706b55a1ae6d4b105a1434c7e">ca9f8876</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2023-04-05T10:20:38-05:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Update CRSEnrollment to use @WebServlet

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/da293ba293d7996c910c61203a47e04a23604a46">da293ba2</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2023-04-05T10:20:38-05:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Update UpdateConnector to use @WebServlet

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/113930e765ee4ec7327a060011b8ffb65356a670">113930e7</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2023-04-05T10:20:38-05:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Update Monitor to use @WebServlet

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/8ae1ce1f78262463920e35d5278ec77e1070118e">8ae1ce1f</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2023-04-05T16:44:06-05:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Add CARegisterUser

The CARegisterUser has been added to provide a separate class

for each servlet in web.xml.

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/fce91181666b893d78a7f510918895a84c724185">fce91181</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2023-04-05T16:44:06-05:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Add RARegisterUser

The RARegisterUser has been added to provide a separate class

for each servlet in web.xml.

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/8d52cd39fe5f494c21659c8b68f240a452f85d30">8d52cd39</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2023-04-05T16:44:16-05:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Add CAUpdateDomainXML

The CAUpdateDomainXML has been added to provide a separate class

for each servlet in web.xml.

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/b607c312aebc5bffb9f14112a0de542a153abcdd">b607c312</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2023-04-05T16:52:00-05:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Add CAAdminUpdateDomainXML

The CAAdminUpdateDomainXML has been added to provide a separate

class for each servlet in web.xml.

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/0f64c00bbccd26a04bd095d80319569a2c751fae">0f64c00b</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2023-04-05T17:00:28-05:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Add CADownloadPKCS12

The CADownloadPKCS12 has been added to provide a separate class

for each servlet in web.xml.

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/3083b58540525f9a28ec89cce74953117ae40f43">3083b585</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2023-04-05T17:10:37-05:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Add CAGetStatus

The CAGetStatus has been added to provide a separate class for

each servlet in web.xml.

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/14b8fe77dd8fe3aae7016d218871d6374e06f03c">14b8fe77</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2023-04-05T17:15:36-05:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Add CAGetConfigEntries

The CAGetConfigEntries has been added to provide a separate class

for each servlet in web.xml.

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/03b2312f1575889f44c7e28d84652542111b35d0">03b2312f</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2023-04-05T17:21:21-05:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Add CAAuthAdminServlet

The CAAuthAdminServlet has been added to provide a separate class

for each servlet in web.xml.

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/d79452552d111093cf785e09ce228ae425ebef63">d7945255</a></strong>

<div>

<span> by Chris Kelley </span> <i> at 2023-04-06T10:19:45+01:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Allow graceful handling of CADogtagCertsConfigCheck with no certs

Currently if no cert is returned from the nssdb with the requested

nickname the test tries to process the NoneType cert and throws a

TypeError, check explicitly if the cert is not None before proceeding

with the rest of the test.

Resolves #2182990

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/7101141b39e2a24d67cb738b6f4a0649283510c5">7101141b</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2023-04-06T10:35:03-05:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Update pki-server http-connector-find

The pki-server http-connector-find has been modified to display

additional params for AJP connectors.

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/fc8f6911f031379e6dc25a7e8de959f67302ca49">fc8f6911</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2023-04-06T10:35:03-05:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Remove hard-coded port in pki-healthcheck

The DogtagCACertsConnectivityCheck and DogtagKRAConnectivityCheck

have been modified to get the secure port from server.xml.

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/983c69eccde01d9d6f0f428a909b80bd93ac156d">983c69ec</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2023-04-06T11:12:35-05:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Update CARegisterUser to use @WebServlet

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/62d54a27110ca1ced572703f1dba667e0cd0a099">62d54a27</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2023-04-06T11:12:35-05:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Update RARegisterUser to use @WebServlet

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/7e997dad4b6f9e46ae8f10829da64f9a45d71331">7e997dad</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2023-04-06T11:12:35-05:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Update CAUpdateDomainXML to use @WebServlet

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/128944ce310d8bae685c77a6e3fdb56542acfc70">128944ce</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2023-04-06T11:12:35-05:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Update CAAdminUpdateDomainXML to use @WebServlet

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/5130a26b8a3b8270cbfe8292e58b9588ba589d84">5130a26b</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2023-04-06T11:12:35-05:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Update CADownloadPKCS12 to use @WebServlet

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/9760a0996638a9d1d7e82c73747c17579d3f1c36">9760a099</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2023-04-06T11:12:35-05:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Update CAGetStatus to use @WebServlet

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/b72b9bf4cc41fd3f01bc20da6a0a81f4dac057e3">b72b9bf4</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2023-04-06T11:12:35-05:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Update CAGetConfigEntries to use @WebServlet

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/985b1c304d538b01f9f386761dd3a31138fcf275">985b1c30</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2023-04-06T11:12:35-05:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Update CAAuthAdminServlet to use @WebServlet

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/48246d53d2eaf2ba041586b8ae58b225998f4af4">48246d53</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2023-04-06T13:10:13-05:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Remove JobsScheduler singleton

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/07bcdf643a41c87eb7c479ca7de74777306c10d8">07bcdf64</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2023-04-06T13:10:13-05:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Remove AuthzSubsystem singleton

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/e18da9be1276eb856903cab38ae05be7cba10399">e18da9be</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2023-04-06T13:10:13-05:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Remove X500NameSubsystem singleton

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/dc124803c88ae4dfcfb73e8eefee117d8a1d0b27">dc124803</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2023-04-06T13:10:13-05:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Remove OidLoaderSubsystem singleton

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/fc9c479b86b6a70832809998ac4322da22436bb7">fc9c479b</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2023-04-06T13:10:13-05:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Remove LogSubsystem singleton

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/cdc084f4783411dc880222936cd0d2acaa2a5ba7">cdc084f4</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2023-04-06T13:10:13-05:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Remove CMSExtensionsMap singleton

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/262cdeb633bcb29fdba798c776227c15d44cb790">262cdeb6</a></strong>

<div>

<span> by Marco Fargetta </span> <i> at 2023-04-06T20:35:06+02:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Fix audit log

Requests and certificate identifiers are now written in hex format in the

output and in the log. CA signed audit log was still using the decimal

format making difficult to mach the requests. Audit logs are converted

to the hex format.

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/248694ab4a36c3bb79abff52e96e018a8395e3f2">248694ab</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2023-04-06T19:12:56-05:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Update version numbers in pom.xml and azure-pipelines.yml

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/6a2ab37d3d976ac56f0c869d0257dae7e8705a27">6a2ab37d</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2023-04-10T09:09:45-05:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Update pki.spec to use Maven dependencies

The RPM dependencies for Java in pki.spec has been replaced with

Maven dependencies as defined in pom.xml. For now the version

numbers are not included since there are minor differences on

different platforms.

Note: When the RPM is built/installed it will get the dependencies

from other RPM packages instead of downloading from external Maven

repository.

The dependency on jpackage-utils has been dropped since it will be

automatically added:

https://docs.fedoraproject.org/en-US/java-packaging-howto/packaging_maven_project/

The duplicate BuildRequires: python3-lxml has been removed.

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/c9d3bd26b68072d34fbdf6eafa805893c5f0e534">c9d3bd26</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2023-04-11T15:52:22-05:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Simplify TPS installation config examples

The tps.cfg and tps-clone.cfg have been modified to no longer

set pki_enable_server_side_keygen to True such that it can be

used to install a simple TPS system without KRA.

The current TPS tests have been modified to set the parameter

using pkispawn command line option such that the tests will

continue to work with KRA.

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/029170226f11f161359e6e8cbadf1270c8d6e3bb">02917022</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2023-04-11T20:18:26-05:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Update LogEventListener.init() to take LoggerConfig

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/3a0c9ddaa8bc5c4bdd23cb1acdd752a1a69941d1">3a0c9dda</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2023-04-11T20:27:28-05:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Add getters for LoggerConfig

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/adc872225ae3ed3c5c1f2fdbdcf0644aa31f04c5">adc87222</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2023-04-11T22:40:59-05:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Move LogFile constants to LoggerConfig

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/8552cd8300276f29cf985edc2f928b73ada11a64">8552cd83</a></strong>

<div>

<span> by Chris Kelley </span> <i> at 2023-04-12T16:08:09+01:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Remove unnecessary else clauses from 50 more classes

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/1915f3b4b9f697b2f67ccc55963040a39d026940">1915f3b4</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2023-04-12T17:39:51-05:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Add new servlets for CA

Some new servlets have been added to provide a separate class

for each servlet in CA's web.xml.

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/03c15fe4130b1c142fba510f7b460bb3428bbd52">03c15fe4</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2023-04-13T08:28:46-05:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Update IPA tests

The IPA test workflow has been modified to build ipa-runner

image separately from the main build workflow. This way the

non-IPA test workflows can start the test earlier because

they don't need to wait for ipa-runner to be built anymore.

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/abc290a2022d247a319ea3c3caa2e1ce38b9c793">abc290a2</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2023-04-13T08:55:58-05:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Update CAJobsAdminServlet to use @WebServlet

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/504c3cde6fdbd8578cdecbc9a9051cff9ac03b3f">504c3cde</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2023-04-13T08:55:58-05:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Update AdminEnrollServlet to use @WebServlet

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/2d264a68590f84054dc11155f0b8ccd92dae17ff">2d264a68</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2023-04-13T08:55:58-05:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Update BulkIssuanceServlet to use @WebServlet

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/8b66b7170ab61bf807e569d4be49076c3369457e">8b66b717</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2023-04-13T08:55:58-05:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Update CertBasedEnrollServlet to use @WebServlet

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/357b6728303963cfde8446cd0dcde002d5560c30">357b6728</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2023-04-13T08:55:58-05:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Update EnrollServlet to use @WebServlet

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/2b0248e0dea1b15ab4d01d88e51161ca32072a6b">2b0248e0</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2023-04-13T08:55:58-05:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Update CAGetOCSPInfo to use @WebServlet

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/788f65b790ed1a27981ca4f8cc1fde675614611e">788f65b7</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2023-04-13T08:55:58-05:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Update UpdateDir to use @WebServlet

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/b73c611313fd645f41fcef64604189a0b3a9b81a">b73c6113</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2023-04-13T08:55:58-05:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Update DisplayCertFromRequestAgent to use @WebServlet

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/ba6df570eb74e33963ad8d31dd9cb713993826b4">ba6df570</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2023-04-13T08:55:58-05:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Update DisplayCertFromRequest to use @WebServlet

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/9ebe43bcbc7ef029bcf39a0755f007155ca955fb">9ebe43bc</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2023-04-13T08:55:58-05:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Update GetCertFromRequestAgent to use @WebServlet

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/d508088f774d4b3f9cae1e92126679530d4c8f89">d508088f</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2023-04-13T08:55:58-05:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Update GetCertFromRequest to use @WebServlet

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/751d92066e694935494547dd6afba176a0fc2008">751d9206</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2023-04-13T08:55:58-05:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Update ProfileSelectAgentServlet to use @WebServlet

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/6b9c014edfe19f34b38a530178e1b374db6d081f">6b9c014e</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2023-04-13T08:55:58-05:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Update ProfileSelectServlet to use @WebServlet

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/b714a90a751d98ed5e145d1fb4cff2a0d1621435">b714a90a</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2023-04-13T08:55:58-05:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Update CAGetStats to use @WebServlet

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/5095dfaf6010ff5e2cd60e60be0a63ff46d3d2f7">5095dfaf</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2023-04-13T08:55:58-05:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Update SrchCertsAgent to use @WebServlet

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/ce8d0f8ddab090509d1384941fb573bbb91d71d8">ce8d0f8d</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2023-04-13T08:55:58-05:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Update SrchCerts to use @WebServlet

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/7d6e23f617e33ac406430d5fec71e55ccaac8205">7d6e23f6</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2023-04-13T08:55:58-05:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Update ListCertsAgent to use @WebServlet

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/af67477e95b80b60277bd68f87d766e1382fb1df">af67477e</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2023-04-13T08:55:58-05:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Update ListCerts to use @WebServlet

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/7b9c3ad98f799e0b76f9b4a9e47d7d5a97813d15">7b9c3ad9</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2023-04-13T12:51:14-05:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Remove obsolete references to pki-symkey

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/65d2796d740e4760c5b41c2befdb7f04f19c6d51">65d2796d</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2023-04-13T17:04:56-05:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Remove obsolete references to jss-symkey.jar

The jss-symkey.jar has been merged into jss.jar in JSS 5.4

so all references to the file needs to be removed.

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/0270f3aa981970014574429d4abc50907110830d">0270f3aa</a></strong>

<div>

<span> by Marco Fargetta </span> <i> at 2023-04-14T12:19:21+02:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Fix maven compile

The commit incluide:

- update JSS version

- modify the tomcatjss dependecy to the correct module

- add flatten plugin to fix the installation phase using the `revision`

  property

If the dependency are installed (**jss**, **tomcatjss** and

**ldap-sdk**) with `mvn install` then `pki` can be compiled with maven.

The only problem is that the test are not correctly configured so for

now the compile has been executed with the option `mvn package

-Dmaven.test.skip=true`.

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/3517d4d5d0791afd411e728f10fb9446d02870d9">3517d4d5</a></strong>

<div>

<span> by Chris Kelley </span> <i> at 2023-04-17T16:01:14+01:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Remove code in web UI to retrieve Links from requests

Some time ago we removed the Link objects from server-side classes.

Therefore, there is nothing to retrieve so these redundant methods can

also be removed.</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/eff9bfe633143e51bebd5742aa3233ed8092cd10">eff9bfe6</a></strong>

<div>

<span> by Chris Kelley </span> <i> at 2023-04-17T16:15:32+01:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Code clean up in CryptoUtil

* Access static method in a static fashion

* Hide implicit public constructor

* Combine identical catch blocks

* Use try-with-resources where appropriate

* Don't create variables just to return them

* Put array designator on the type

* Remove unnecessary boolean literal and logical jumps

* Reorder modifiers to match the JLS

* Remove double-brace initialization</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/f84e44495d0b7267f7e36a6766fc5f0eaaa83725">f84e4449</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2023-04-18T17:35:17-05:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Add AuthzSubsystem.addACLInfo()

The code that adds ACL info into authorization manager has been

merged into AuthzSubsystem.addACLInfo().

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/6b2f3c9a68c8de5ff728cad6da0e5a32bc097fe1">6b2f3c9a</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2023-04-18T17:35:31-05:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Add AuthorizationConfig.getSourceType()

The code that returns authz.sourceType config param has been

merged into AuthorizationConfig.getSourceType().

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/7a5ace604763b6e547156f6dc90717624dfa1dac">7a5ace60</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2023-04-18T17:40:54-05:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Merge ServletUtils into CAProcessor

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/b85bcc47d06b2085e534976313c2a71965ea5713">b85bcc47</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2023-04-18T17:54:17-05:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Update AuthzManager.getACLs() to return Collection

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/8493927137b1a6127582c22d346347d27665a2f5">84939271</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2023-04-18T17:57:14-05:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Update AAclAuthz.getTargetNames() to return Set

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/b22f12e934f31c0af21165a10fdb5581220d24b7">b22f12e9</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2023-04-18T18:00:11-05:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Replace AAclAuthz.aclResElements() with getACLs()

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/da188dc2bc46485c12c619f2dc674b1b4737dbbe">da188dc2</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2023-04-18T18:01:56-05:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Convert AAclAuthz.mACLs into Map

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/b6a9338fd7f9aa2be14e6991160927f93dc335a4">b6a9338f</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2023-04-18T18:04:18-05:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Add DirAclAuthz.loadACLs()

The code that loads ACL resources from LDAP into memory

in DirAclAuthz has been moved into loadACLs().

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/ad927437a0c77529169e5db656550c071fd51cf4">ad927437</a></strong>

<div>

<span> by Chris Kelley </span> <i> at 2023-04-19T15:42:26+01:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Restore certificate search functionality to the TPS UI

With bug #2008162 the newly enforced token profile separation breaks the

Home -> Certificates page as it does not provide a tokenID to the

server.

Now, if the server receives no tokenID, we return all certs that match

the search filter that are allowed for the authorised profiles.

Resolves: #2049901

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/123f0cd93d896a9aafcd7886a88ce018e81bf422">123f0cd9</a></strong>

<div>

<span> by Chris Kelley </span> <i> at 2023-04-19T16:21:22+01:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Fix adding user in TPS UI

Various things were not displaying correctly as well due to incorrect

JSON mappings, so that is fixed too.

Resolves: #2027712

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/1c49e9983f65a23db7c7ccf2c0b77f0c4e10022c">1c49e998</a></strong>

<div>

<span> by Endi S. Dewata </span> <i> at 2023-04-19T16:20:07-05:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Publish to GitHub Maven registry

A new job has been added to build PKI with Maven and publish

the artifacts to GitHub Maven registry. Currently the tests

have to be disabled due to missing JSS shared libraries. The

group ID and artifact ID have been renamed to follow a more

commonly used pattern.

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/58730a52732224a1fc28a0919d7007cc39f50261">58730a52</a></strong>

<div>

<span> by Chris Kelley </span> <i> at 2023-04-19T22:31:53+01:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Updating version to v11.4.0

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/415d7b67c8cf5d042104ca811b4ec5f4b086853e">415d7b67</a></strong>

<div>

<span> by Chris Kelley </span> <i> at 2023-04-27T14:55:58+01:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Make use of xmvn-resolve conditional on it being installed

Drops the distro-specific code and relies only on whether xmvn is

present. The spec is updated to explicitly BuildRequires: xmvn-tools so

xmvn-resolve is there at build time for JAR resolution.

Resolves: #2188716

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/fd405cb468d0d83caf4dd8c40d525edca9003417">fd405cb4</a></strong>

<div>

<span> by Chris Kelley </span> <i> at 2023-04-27T14:56:08+01:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Only BuildRequires xmvn-tools on distros that have it

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/e277607048d1850784f9996e13dfc2de02777524">e2776070</a></strong>

<div>

<span> by Chris Kelley </span> <i> at 2023-04-27T14:58:17+01:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Update paths for jaxb and jakarta-activation JARs

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/2217bf6676f13512ab734e9c3d6ab0db47e968ee">2217bf66</a></strong>

<div>

<span> by Chris Kelley </span> <i> at 2023-04-28T21:48:22+01:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Fix pylint failures in upstream CI.

The new version of pylint (pylint-2.17.2-1.fc38) in F38 causes failures

due to containing a configuration setting that will become invalid in

pylint 3. The pylintrc file is future-proofed to work with pylint 3.

overgeneral-exceptions now causes test failure rather than a warning, it

has been disabled for now as there are many failures and it could take

some time to go through them all individually and catch less general

exceptions.</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/44185469b7a8a9adbc3e7c88296ebc4976b00d8d">44185469</a></strong>

<div>

<span> by Chris Kelley </span> <i> at 2023-04-28T22:20:17+01:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Updating version to v11.4.1

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/bcffbf80a13d020f3c2edbf012855275be0bca6b">bcffbf80</a></strong>

<div>

<span> by Christina Fu </span> <i> at 2023-05-11T16:47:36+02:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Bug2190283-AddCRLServlet-SEVERE-NOT-SUPPORTED-messages

This patch fixes the following issue:

It appears that the following parameter in ca's CS.cfg is set to true

by default:

ca.publish.rule.instance.ocsprule-ccrsa-1-rhcs10-example-com-32443.enable

which triggers the CA to attempt publishing of its CRLs directly

from CA->OCSP and causing the following SEVERE error messages:

SEVERE: CRL issuing point CN=CA Signing Certificate, nott found.

The CA->OCSP direct push of CRLs appears to not be working.

CA->ldap publishing (and ocsp pulling from ldap) is working and

 should be used instead.

In addition, this patch also fixes it so that the following will no

longer appear (it has no reason to. See bug description for explanation):

[CRLIssuingPoint-MasterCRL] WARNING: LdapSimpleMap: crl issuer dn:...

org.mozilla.jss.netscape.security.x509.X509CRLImpl cannot be cast to java.security.cert.X509Certificate

fixes https://bugzilla.redhat.com/show_bug.cgi?id=2190283

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/e6066a59bd7c2cff4108ace2c73177615ace4bd9">e6066a59</a></strong>

<div>

<span> by Marco Fargetta </span> <i> at 2023-05-11T17:33:50+02:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Disable OCSP direct pushing during upgrade

The direct publishing to OCSP is not working properly and a previous

commit has change the default value for the `ca.publish.rule.instance.ocsprule-<instance-<port>.enable` attribute to false. This commit add the upgrade script to set false for the existing instances during the upgrade.

There are no problems with existing instances because the communication

with OCSP was not properly working and other mechanism were in place.

Close the issue: RHCS-4085

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/228b98b6bae7bbd44f17a689b0f77bdbe7443a5d">228b98b6</a></strong>

<div>

<span> by Marco Fargetta </span> <i> at 2023-05-11T17:45:47+02:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Fix upgrade script version

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/c4f03fcc05b452b0cab3308d4468cb818ac0a251">c4f03fcc</a></strong>

<div>

<span> by Marco Fargetta </span> <i> at 2023-05-15T11:30:39+02:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Revert "Disable OCSP direct pushing during upgrade"

This revert commit e6066a59bd7c2cff4108ace2c73177615ace4bd9.

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/4b2fe9306925b5aca1dd3185f98a1d2a88979301">4b2fe930</a></strong>

<div>

<span> by Chris Kelley </span> <i> at 2023-05-15T11:31:17+02:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Revert "Bug2190283-AddCRLServlet-SEVERE-NOT-SUPPORTED-messages"

This reverts commit bcffbf80a13d020f3c2edbf012855275be0bca6b.

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/e5a606a4a3c10796acbb8ad6c2bd8112e26e87b0">e5a606a4</a></strong>

<div>

<span> by Christina Fu </span> <i> at 2023-05-29T11:12:41+02:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Bug2190283-part2_LdapSimpleMap_Invalid_cast_warning

This patch was part of the patch that was taken out earlier.

It fixes a frivilous WARNING message:

[CRLIssuingPoint-MasterCRL] WARNING: LdapSimpleMap: crl issuer dn:...

org.mozilla.jss.netscape.security.x509.X509CRLImpl cannot be cast to java.security.cert.X509Certificate

It did not attribute to the CI break so I'm putting it back.

fixes (part2) https://bugzilla.redhat.com/show_bug.cgi?id=2190283

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/eda90d5f27a666a98dd43f30b18b44e893fe3efa">eda90d5f</a></strong>

<div>

<span> by Chris Kelley </span> <i> at 2023-06-05T10:54:17+01:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Updating version to v11.4.2

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/d7656b8bc1d6b1d04a809d17fe6e3bc7bf63dd61">d7656b8b</a></strong>

<div>

<span> by Chris Kelley </span> <i> at 2023-06-05T11:23:15+01:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Upstream some spec file changes to reduce diff

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/7ce96c1feacc929ff5ab12858ede2d9784c5cad5">7ce96c1f</a></strong>

<div>

<span> by Chris Kelley </span> <i> at 2023-06-16T13:49:54+01:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Introduce Packit config and upstream some spec updates

</pre>

</li>

<li>

<strong style="font-weight: bold;"><a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/commit/0982e23079279131794ecbb67475c4a8bd18cc6b">0982e230</a></strong>

<div>

<span> by Chris Kelley </span> <i> at 2023-06-16T13:50:18+01:00 </i>

</div>

<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Updating version to v11.4.3

</pre>

</li>

</ul>

<h4 style="margin-top: 10px; margin-bottom: 10px;">

15 changed files:

</h4>

<ul>

<li class="file-stats">

<a href="#354079a72b91a4280407c16a36f47d1986fd85a5">

.classpath

</a>

</li>

<li class="file-stats">

<a href="#eae40b507f9c3502accc6d7f8a39c9a7d9936b6f">

.copr/Makefile

</a>

</li>

<li class="file-stats">

<a href="#05a721ebe3ba0754116825ed1359ff1785f4bbac">

<span class="new-file">

+

.dockerignore

</span>

</a>

</li>

<li class="file-stats">

<a href="#412502b0712158acef2cfcae24bbe6add53f1b32">

<span class="new-file">

+

.github/workflows/PKICertImport-test.yml

</span>

</a>

</li>

<li class="file-stats">

<a href="#9cb57476d54184163c471063413162bcde691bd9">

<span class="new-file">

+

.github/workflows/acme-certbot-test.yml

</span>

</a>

</li>

<li class="file-stats">

<a href="#a3a60fc99f2b5ec75956b09c2008aa57462f9e29">

<span class="new-file">

+

.github/workflows/acme-container-test.yml

</span>

</a>

</li>

<li class="file-stats">

<a href="#1a45c0b786fd7908358e0a84fea991c87ed01159">

<span class="new-file">

+

.github/workflows/acme-postgresql-test.yml

</span>

</a>

</li>

<li class="file-stats">

<a href="#9d4b5fb502c734038d196048d3c01825fb06a644">

<span class="new-file">

+

.github/workflows/acme-switchover-test.yml

</span>

</a>

</li>

<li class="file-stats">

<a href="#ecae19c77a082e8b0487ab1eb8428f56f72e4341">

.github/workflows/acme-tests.yml

</a>

</li>

<li class="file-stats">

<a href="#fe77d5d1439f26e353a42bbd38dece2467ff6558">

<span class="new-file">

+

.github/workflows/build.yml

</span>

</a>

</li>

<li class="file-stats">

<a href="#836c6dc852b7dc36072f05f81015b43e2785b527">

<span class="new-file">

+

.github/workflows/ca-basic-test.yml

</span>

</a>

</li>

<li class="file-stats">

<a href="#f2d8937c64396431fb1352637cd50645ac082304">

<span class="new-file">

+

.github/workflows/ca-clone-hsm-test.yml

</span>

</a>

</li>

<li class="file-stats">

<a href="#a30a65a378a9fa5cbe8f71c4374320adb85292fd">

<span class="new-file">

+

.github/workflows/ca-clone-secure-ds-test.yml

</span>

</a>

</li>

<li class="file-stats">

<a href="#1e3ff435a06019335523255e0045ff15b6df2bb0">

<span class="new-file">

+

.github/workflows/ca-clone-test.yml

</span>

</a>

</li>

<li class="file-stats">

<a href="#b6a0cd6d6e6e9047f4e8f04e9c9d7913a30fdc90">

<span class="new-file">

+

.github/workflows/ca-container-test.yml

</span>

</a>

</li>

</ul>

<h5 style="margin-top: 10px; margin-bottom: 10px; font-size: 0.875rem;">

The diff was not included because it is too large.

</h5>

</div>

<div class="footer" style="margin-top: 10px;">

<p style="font-size: small; color: #737278;">

—

<br>

<a href="https://salsa.debian.org/freeipa-team/dogtag-pki/-/compare/6beb1bd260c14868f6c5b761185016d0d6826e1a...0982e23079279131794ecbb67475c4a8bd18cc6b">View it on GitLab</a>.

<br>

You're receiving this email because of your account on <a target="_blank" rel="noopener noreferrer" href="https://salsa.debian.org">salsa.debian.org</a>. <a href="https://salsa.debian.org/-/profile/notifications" target="_blank" rel="noopener noreferrer" class="mng-notif-link">Manage all notifications</a> · <a href="https://salsa.debian.org/help" target="_blank" rel="noopener noreferrer" class="help-link">Help</a>

</p>

</div>

</body>

</html>