[Pkg-freeipa-devel] dogtag-pki: Changes to 'refs/tags/debian/10.2.6-1'

Timo Aaltonen tjaalton at moszumanska.debian.org
Wed Sep 23 15:55:47 UTC 2015


Tag 'debian/10.2.6-1' created by Timo Aaltonen <tjaalton at debian.org> at 2015-09-23 15:29 +0000

tagging package dogtag-pki version debian/10.2.6-1
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1

iQIcBAABAgAGBQJWAsVQAAoJEMtwMWWoiYTcPgwP/A81Fi8ZdGGnBdrBO8qKlfDg
efqkng1W4DASH8Bq0iYARXPHAecVE05+THtWa458qcUdQESZ4q0euRyX7q/aDfHC
WtKAOihAsDs+4gDEJlSTkFMi4sHQxPQsA8HnPG6UTt4+eMQckVjH7fVuw23Yja+h
MVfNKtHoH68IZJcdpQHawLfzltqUP47o1AAQDkJmLS8TCGpGAJFv4auGog9uCt0J
IESW1HL5q9HJ5L++nm5NKo2zJ8/Iddixwe9+OVbCR+MnDfajPlcHN8wf+sG6qknp
GjwHfbN1S2VuH+50e/P4LQht1CRHQeD8vaX+VhO138wOMg2oc3sk4zmVAIbs8mt1
9aObvhHyk1iFOOS39iD23MzRsZTuPJ2xzQcvg1UWCHUylTsiWmXNkUHTvm6M6FbR
XQofelZKExtEPVQEGNeRrBchWOAHw2t9D076isi+a22SxKVVQoQNgXT+HUe3VUGe
Xq5YOg2pw3x43cyRQmnCikzxQvlasNJSxfBTSWjrOzYN1e5I4mpVJYpO5aLhy70c
I1VrAz8kzCSsbUjIYHbKnFFzCPMEtAVyRMkl0es2I4vRDn3/XWthSyMsKiizOkQE
ZzHYXonwYbIl22fafvB/8NINlaaTYWf6iwelXS89nBuG4Jb97/+s0+Lp66MvItZ3
zNopM3SUIWZshFBxhvze
=dlxf
-----END PGP SIGNATURE-----

Changes since debian/10.2.0-4:
Abhishek Koneru (3):
      Incorrect status change in key-request-review.
      Fixing upstream trac ticket 1150.
      Add a man page for profile CLI commands.

Ade Lee (31):
      Added idempotent 01-MoveWebApplicationContextFile migration script
      Added missing audit event ASYMKEY_GENERATION_REQUEST to KRA CS.cfg
      Fix sub-CA installation with own security domain
      Remove pylint from rhel build
      Fixes to spec file for RHEL build
      Added Python Client API Docs to build
      Updates to some python client classes for prettier API docs.
      Require resteasy sub modules for F22+
      Bugzilla 1134405 - CRL publishing fails after Java heap out of memory error
      Add granularity to token termination in TPS
      Add nuxwdog functionality to Dogtag
      Changes to config files to support nuxwdog
      Added pki-server-nuxwdog tool to create config file for nuxwdog
      Add back the getPassword(tag) code to handle old tomcatjss interface
      Remove duplicate prompt on nuxwdog startup
      Fix some javadoc errors that prevent F23 build
      Add conditional to disable doclint for javadocs on java >= 1.8
      Add ability to pki-server to enable/disable nuxwdog for an instance
      Add nuxwdog to java policy
      Code cleanup - simplify pkispawn code
      Trac Ticket 1196 - serverCertNick.conf is replaced incorrectly
      Fix interactive install to not reprompt for ports
      Patches to get nuxwdog working with systemd
      Update nuxwdog and tomcatjss dependencies
      BZ1226025 -  pkidaemon script checks for wrong symlinks for nuxwdog startup
      Fix typo in CS.cfg
      Ticket 1414: Add documentation of pki_clone_setup_replication
      Add details on exporting and importing system certs when cloning.
      Man page updates for cloning
      Added man pages for pki-server
      Fix exception when talking to dogtag 9 systems

Asha Akkiangady (26):
      Added script to create role users
      Included java files needed for GenerateCRMFRequest
      All pki-user clis with host and port changes
      The path to pki-qe-tools.jar is fixed in Makefile
      File runtest.sh updated with pki-user tests.
      Increased Testtime to 480 mins in Makefile.
      User cli tests modified with host and port in
      Fixed uid with i18n tests to expect error message.
      Modified ca-user-del tests to include host/port
      CA user add,delete,find and user membership
      Modified quickinstall subca install scripts.
      Made changes in install script for
      Removed the script to turn off firewall using
      Removed pki_client_database_password param from the
      Added check for installation to exit if CA
      CLI user-add and ca-user-add tests modified
      Installer tests for CA, KRA, OCSP and TKS.
      CA renewal manual, directory authenticated and
      CA and SUBCA scep tests using sscep.
      Created new scep tests for CA and SUBCA.
      Removed a duplicate rlPhaseStart line in the test.
      Added script to keep subsystem installed status
      Added pki user KRA, OCSP, TKS and TPS tests.
      Created tests for pki kra-user, ocsp-user,
      Added pki kra-user files location to Makefile.
      Added subsystem installation status check to

Benjamin Drung (2):
      Fix manpage errors
      fix typo succesfully -> successfully

Christian Heimes (7):
      NPE when modifying profile without 'action' param
      Add new KRA audit events to KRA's CS.cfg
      Make pki group-member-show case insensitive
      Run pylint on upgrade scripts
      In-tree tests and linting with tox
      Handle JSON decode error in handle_exceptions()
      Create pkiuser user and group during installation

Christina Fu (33):
      ticket #1158 CMCRequest does not support internal token
      ticket #1110 pkispawn (configuration) does not provide CA extensions in subordinate certificate signing requests (CSR)
      Bug1151147 issuerDN encoding correction
      bugzilla 871171 (client-side code) Provide Tomcat support for TLS v1.1 and TLS v1.2
      Ticket 1206 (java console) TLS range support: code change needed for cs when acting as client
      Ticket 1198 Bugzilla 1158410 add TLS range support to server.xml by default and upgrade
      Ticket 1198 Bugzilla 1158410 add TLS range support (spec file jss tomcatjss dependencies)
      Ticket 1173 Directory-based renewal evaluator fails authorization
      Ticket 1180 RFE: show link to request record from cert display
      Ticket #864 866 (part 1 symkey, common) NIST SP800-108 KDF
      Ticket#1028 Phase1:TPS rewrite: provide externalReg functionality
      ticket#822 creates root CA subject DN when renewing with empty params.name in orig profile
      Ticket#1028 phase2: TPS rewrite: provide externalReg functionality
      Ticket 1339 doRevoke error string doesn't clear after failure.
      Ticket 1316 Allow adding SAN to server cert during the install process
      TKS Parameterized (revised, again)
      Ticket #1295 CA: OCSP via GET does not work
      Ticket 1295 Upgrade script for - CA: OCSP via GET does not work
      Ticket 1160 audit logging needed: REST API auth/authz; kra for getKeyInfo
      Ticket 1160 audit needed for getKeyInfo; audit missing for auth/authz at REST. This patch addresses: (2) audit needed for getKeyInfo, the 2nd part of this ticket where the key services are missing some auditing.
      Ticket 1307 (part1 refactoring) [RFE] Support multiple keySets for different cards for ExternalReg This patch is mainly refactoring the names of the Mapping Resolver framework in preparation for ticket 1307 to support keySet mapping in addition to the original purpose of resolving tokenType mapping. The reason to separate out refactoring from the real code is for ease of reviewing. TPS is currently a Tech Preview feature, so upgrade is not of consideration at the moment.
      Ticket 1307 (part2 keySet mapping) [RFE] Support multiple keySets for different cards for ExternalReg This patch adds support to keyset mapping
      Ticket 1309 Recovering of a revoked cert erroneously reflects "active" in the token db cert entry
      remove extra space in CS.cfg for op.format.soCleanSOToken.validateCardKeyInfoAgainstTokenDB=true
      Ticket 867 Need to support TPS as a separate tomcat instance.
      Ticket 1410 Issue with Generic Extension being critical
      Ticket 1412 Should disable the caCrossSignedCACert and caRACert profile
      fix pylint issue
      ticket 867 symkey library path link fix
      Ticket 1438 pkispawn: SSL_ForceHandshake issue for non-CA on HSM on both shared and nonshared tomcat instances
      Ticket 1447 pkispawn: findCertByNickname fails to find cert in creating shared tomcat subsystems on HSM
      ecc Console - 1. clean up the tabs in the JSSConnection constructor
      Ticket 1459 Dogtag clients cannot connect when CS is configured with ECC

Endi S. Dewata (107):
      Added client-cert-request CLI.
      Displaying request status in ca-cert-request-review.
      Added option to import user cert from CA.
      Added option to import client cert from CA.
      Added CLI to import/export certificates with private keys.
      Updated KRA Python client library.
      Updated version to 10.2.1-0.1.
      Updated JUnit JAR file name.
      Fixed pylint failure on F21.
      Fixed incorrect Python API docs format.
      Removed profile input/output IDs from CLI output.
      Improvements for KeyClient.archive_encrypted_data().
      Fixed problem importing renewed system certificate.
      Cleaned up clone installation code.
      Added rangeUnit property to certificate profiles.
      Removed unnecessary EBaseException constructor.
      Added support for exception chains in EBaseException.
      Fixed exception chains in ConfigurationUtils.
      Moved web application deployment locations.
      Added server management library.
      Added server management CLI.
      Disabling subsystem on selftest failure.
      Refactored CRMFPopClient.
      Updated Resteasy and Jackson dependencies
      Added missing python-lxml build dependency.
      Fixed pylint report.
      Fixed problem cloning Dogtag 10.1.x to 10.2.x.
      Fixed additional pylint warnings.
      Refactored LDAPDatabase.createFilter().
      Refactored OCSPClient.
      Updated CRMFPopClient parameter handling.
      Fixed systemd errors/warnings after upgrade.
      Fixed CMake issues on F22.
      Fixed missing port error during installation.
      Added interface to show TPS token certificates.
      Fixed incorrect link in TPS UI.
      Fixed problem with TPS profile default status.
      Fixed problem deleting newly created TPS profiles.
      Added upgrade script to fix instance work folder ownership.
      Simplified login response formats
      Customized TPS UI menu based on user roles.
      Fixed TPS REST services.
      Fixed action menu in TPS UI.
      Added bulk property editor in TPS UI.
      Fixed problem upgrading to F22.
      Added support for Tomcat 8.
      Added server migration command.
      Parameterized CA's services.template.
      Parameterized service.template in all subsystems.
      Parameterized ROOT's index.jsp.
      Parameterized /ca/ee/ca/index.html.
      Parameterized /ca/agent/header.
      Fixed build issues.
      Added direct deployment for all subsystems.
      Moved fonts and images to theme package.
      Moved CSS files to theme package.
      Moved color settings to CSS.
      Parameterized CA templates.
      Added direct deployment for theme.
      Fixed problem deploying without theme.
      Fixed authentication data in audit log.
      Fixed migration tool to update Tomcat libraries.
      Fixed pylint warnings.
      Fixed installation logs.
      Added options for internal token and replication passwords.
      Refactored upgrade scripts.
      Added key-show option.
      Fixed problem redeploying subsystem.
      Fixed pylint warning in pkihelper.py.
      Cleaned up log messages in ConfigurationUtils.getPortFromSecurityDomain().
      Fixed key archival problem in CLI with separate KRA instance.
      Added deployment parameters to construct pki_clone_uri.
      Cleaned up python docs generation.
      Fixed overwritten deployment property.
      Fixed man page for pki user-mod.
      Added man page for pki user-cert.
      Added man page for pki group-member.
      Fixed NPE in ROOT's index.jsp.
      Cleaned up links in main page.
      CRMFPopClient improvements.
      Startup log message improvementes.
      Fixed typos in Web UI.
      Fixed pkidaemon to show TPS status.
      Fixed thread leaks during shutdown.
      Displaying pkispawn/pkidestroy log file names.
      Fixed ProxyRealm for Tomcat 8.
      Fixed selftests log message.
      Fixed Modutil.is_security_module_registered().
      Updated pki-cert man page.
      Updated pki man page.
      Cleaned up SystemConfigService.validateRequest().
      Cleaned up SystemConfigService.configureClone().
      Fixed pki help CLI.
      Fixed NPE in key-archive CLI.
      Fixed fail-over in HttpConnection.
      Fixed default cert-find filter.
      Fixed user-cert-add --serial with remote CA.
      Fixed NPE during key-retrieve.
      Fixed cert-find performance.
      Fixed PKCS12Export output.
      Updated pkispawn man page.
      Removed hard-coded /root in pkispawn man page.
      Removed audit CLI from non-TPS subsystems.
      Added pki-audit man page.
      Updated man page for configuring secure LDAP connection.
      Updated man pages with TPS info.
      Added pki-tps-profile man page.

Fraser Tweedale (30):
      Fix ECC curve name typos
      Fix BasicConstraints min/max path length check
      Decode challengePassword attribute as DirectoryString
      Enable Authority Key Identifier CRL extension by default
      Store groups on AuthToken and update group evaluator
      Add schema for LDAP-based profiles
      Add LDAPConfigStore class
      Add LDAPProfileSubsystem to store profiles in LDAP
      Add ability to enable/disable dynamic subsystems
      Import profiles when spawning CA instance
      Update pki-profile CLI commands to work with "raw" format
      Monitor database for changes to LDAP profiles.
      Add pkispawn config option for ldap profiles
      Remove unneeded collection from profile subsystems
      Consolidate profile persistent search try/catch blocks
      Chain InvocationTargetException thrown during PKCS10Attribute decoding
      Remove unused RequestSubsystem constructor
      Remove duplicate getRequestQueue code
      Fix incorrect class name in debug message
      Remove unneeded class EnrollProfileContext
      Only read pki_profiles_in_ldap when spawning CA instance
      Enumerate profiles in order of discovery
      Get profile ID from DN instead of CN attribute
      Use SimpleProperties to handle raw profile format
      Invoke PKIInstance.load() during upgrade
      Upgrade: check file exists before chowning
      Upgrade: add scriptlet to fix nuxwdog listener class
      Update: fix CS.cfg permissions
      Add profiles schema update file
      Verify raw profile config before accepting it

Jack Magne (22):
      Provide standalone Pin Reset Processor.
      Fix-for-Bug-1170867-TPS-Installation-Failed
      Ticket: TPS Rewrite: Implement Secure Channel Protocol 02 (#883).
      NISTSP8000 feature.
      Bug 1186896 - NIST SP800-108 KDF - add sanity checking.
      Bugzilla 1186896 - NIST SP800-108 KDF (cfu for community member) - remove harmful bit of sanity checking, not needed.
      OCSP Parameterized.
      OCSP and CA minor cloning fixes
      Ticket #572 - CRL scheduler adds extra CRL generation at midnight for daily schedules.
      Fix #1351 pki securitydomain-get-install-token fails when run with caadmin user.
      Simple fix for this is not requiring the pki_client_database_password to be set when performing a clone operation.
      Fix XSS attacks on the dogtag administration page #1373.
      Warning for the main index to tell the user that the crypto object is not available for use in the browser.
      Mozilla crypto object warning:
      Ability to toggle profile usablity in Web vs CLI tools.
      Add GP211 applet and latest GP201 applet for RSA.
      Fix Pin Reset tokenType resolution.
      Unable to select ECC Curves from EE fix.
      Omit OCSP from clone description.
      The man page for tpsclient does not exist.
      TPS add phone home URLs to pkidaemon status message.
      Document workaround for 1454 in 'pkispawn' man page.

Matthew Harmsen (64):
      Remove IPA theme component and old unused UI directories
      Remove 'pki-selinux' code
      spec file modifications
      Remove legacy multilib JNI_JAR_DIR logic
      Fix spec file to address the following ticket:
      Spec file changes to support the following issues:
      Modified RHEL Source URL to prevent potential collisions with Fedora releases
      Update dependencies
      Fixed bash syntax error
      Update release number for release build (10.2.1-1)
      Updated version number to 10.2.2-0.1
      Updated version number to 10.2.2-0.1
      Synced spec files with DOGTAG_10_2_RHEL_BRANCH
      Fix for developer script on Fedora 21.
      Update compose_functions development script to account for remote tarballs
      PKI TRAC Ticket #1284 - pkispawn URL redirect issue (simple fix)
      Allow use of secure LDAPS connection
      Update release number for release build (10.2.2)
      Fixed development script.
      Removed problematic header file from CMakeLists.txt file that prevented
      Fix for pylint 1.3 --> 1.4 (e1101 - no member on all C extension)
      Fix for pylint 1.3 --> 1.4
      Updated version number to 10.2.3-0.1
      Updated version number to 10.2.3-0.1
      PKI TRAC Ticket #1319 - Invalid upgrade script in 10.2.1
      Updated version number to 10.3.0-0.1.
      Reverted version number back to 10.2.3-0.1.
      pki-tomcatd fails to start on system boot
      Add HSM options to pkispawn
      Add HSM passwords to pkispawn
      Parameterized KRA
      Fixed typos.
      After discussions on IRC, changed runtime requirement from "nuxwdog" to
      Added missing "logo" theme properties to OCSP and TKS "ports.template".
      RHCS 9.0 theme fixes
      Bumped release number for official release of 10.2.3.
      Updated version number to 10.2.4-0.1
      Fixed minor UI inconsistencies.
      Restored requirement for 'jss-javadocs'
      modify contents of serverCertNick.conf
      disable backup keys and share master keys when using an HSM
      Update release number for release build (10.2.4-1)
      Updated version number to 10.2.5-0.1
      PKI TRAC Ticket #1388 - pylint unidiomatic-typecheck warnings cause koji builds to fail
      Remove x86 architecture limitations
      Suppress interactive HSM installation
      add pkiuser to nfast group
      Fix for HSM cloning issue
      Bugzilla Bug #1230970 - Errata TPS tests for rpm verification failed
      Check security module registration
      Update release number for release build (10.2.5-1)
      Updated version number to 10.2.6-0.1
      Remove ExcludeArch directive
      Limited Interactive Installation Support
      Note on overriding pki_client_dir when using an HSM
      pkispawn man page ECC example
      remove inaccessible URLs from server.xml
      Disable 'W1401' anomalous-backslash-in-string pylint warning for regex
      Renamed deprecated pylint 'disable-msg' to 'disable'.
      Remove 'setup' directory containing remaining Perl routines
      Added 'pkidaemon' man page.
      Update release number for release build (10.2.5-1)
      Update release number for release build (10.2.6-1)
      Merge branch 'master' of ssh://git.fedorahosted.org/git/pki

Niranjan Mallapadi (104):
      Modified create_new_cert_request to add ROLE Info
      Add functions for symmetric key and passphrase
      Add function get_topo_stack to return subsystems
      Add pki key-generate automation
      Add pki key-find automation
      Add pki key-cli Automation
      Add pki key-mod automation
      Add pki key-request-find automation
      Add pki key-request-show automation
      Add pki key-show automation
      Add pki key-template-find and show automation
      Add key automation scripts in Makefile and runtest
      Add automation for pki key-recover
      Add Automation for pki key-retrieve
      Add automation for pki key-archive
      Add automation for pki key-request-review
      Modify the function in pki key-archive
      Add pki key tests in Makefile and runtest.sh
      Add pki kra-key-cli config automation
      Add automation for pki kra-key-generate
      Add automation for pki kra-key-find
      Add automation for pki kra-key-show
      Add automation for pki kra-key-mod
      Add automation for pki kra-key-request-find
      Add automation for pki kra-key-template-find, show
      Modified kra-key-template-find for minor changes
      Add automation for pki kra-key-archive
      Add automation for pki kra-key-recover
      Add automation for pki kra-key-retrieve
      Add automation for pki kra-key-request-review
      Add automation for pki kra key-request-show
      Minor modifications to pki kra key cli automation
      Add pki kra-key automation to runtest & Makefile
      include modified generateCRMFRequest.class
      update argparse & common path GenerateCRMFRequest
      Add pki-qe-tools.jar to class path
      Add host and port info to pki cert-find automation
      Add host and port info to pki cert-request-find
      Add host & port info to cert-request-profile-find
      Add host & port info to cert-request-profile-show
      Add host & port info to cert-request-review
      Add host & port info to cert-request-submit
      Add host & port info to cert-hold automation
      Add host & port info to cert-release-hold
      Add host & port info to cert-request-show
      Add host & Port info to cert-revoke
      Add host & port info to cert-show
      Pass subsystemType and ROLE to all cert functions
      Minor changes to pki-key-cli-archive-kra.sh
      Minor changes to pki-key-cli-generate-kra.sh
      Minor changes to pki-key-cli-kra.sh
      Minor changes to pki-key-cli-mod-kra.sh
      Minor changes to pki-kra-key-cli-archive-kra.sh
      Add pki ca-cert-cli config automation
      Add pki-ca-cert-hold automation
      Add pki ca-cert-find automation
      Add pki ca-cert-release-hold automation
      Add pki-ca-cert-request-find automation
      Add pki ca-cert-request-profile-find automation
      Add pki ca-cert-request-profile-show automation
      Add pki ca-cert-request-review automation
      Add pki ca-cert-request-show automation
      Add pki ca-cert-request-submit automation
      Add pki ca-cert-revoke automation
      Add pki ca-cert-show automation
      Add pki ca-cert test to runtest and Makefile
      Minor changes to key-recover and key-request-find
      Add python scripts for profile cli automation
      Add python scripts for ca profile cli
      Use $RANDOM instead of /dev/urandom
      Add pki ca-profile-add Automation
      Add pki ca-profile-mod Automation
      Add pki ca-profile-find Automation
      Add pki ca-profile-show Automation
      Add pki ca-profile-enable Automation
      Add pki ca-profile-disable Automation
      Add pki ca-profile-del automation
      Add pki ca-profile config automation
      Add pki ca-profile-tests in runtest and Makefile
      Remove --password from group-add-member, cert-add
      Modify importP12FileNew function to check NSS DB
      Replace /dev/urandom with openssl rand
      Remove /dev/urandom from ca-cert-cli
      Remove /dev/urandom from key-cli
      emove /dev/urandom from kra-key-cli
      Modify ca profile cli's tests with minor changes
      Minor fixes to pki-cert-cli-lib.sh
      Minor fixes to pki-cert.sh
      Add minor fixes to cert-release-hold and revoke
      Minor changes to pki-ca-cert-cli-release & revoke
      Add CA Legacy profile tests
      comment lines which add cer to TEMP NSS DB
      Add CA Profiles legacy tests
      Add legacy cert-enrollment tests
      Add legacy CA logs tests
      Add legacy drm tests
      Add Legacy drm-logs and some subca tests
      Port OCSP legacy tests beaker framewokr
      Update rhcs-shared.sh with more shared functions
      Port TKS legacy tests to beaker
      Adding legacy ipa-tests and ca-clone tests
      Port legacy clone drm tests to beaker
      Update pki-qe-tools.jar file
      pki ca,kra,ocsp,tks,tps selftest cli automation

Roshni Pattath (24):
      Bug Verification automation scripts
      Added new jar file pki-qe-tools.jar
      host/port changes, pki ca-user-mod, pki ca-user-cert
      removed pki ca-group related file information
      removed pki ca-group file location info from runtest.sh
      pki ca-group tests
      KRA user-mod and user-cert cli commands and some fixes to ca group
      RHEL 7.1 bug verification automation
      Changes to Makefile and runtest.sh
      KRA group test scripts and CI changes
      Removed reference to files that are not added to git
      Changed the CA Host parameter
      Some updates to the script for certutil
      Minor changes relating to CI modifications
      CA Admin Porting tests
      Fixed some typos in Makefile and runtest.sh
      crlissuingpoint dir was spelled wrong in Makefile and runtest.sh
      CA EE OCSP and related java files
      Subca legacy tests
      Modified test-ids
      TPS Legacy tests
      OCSP, TKS and TPS group tests
      Merge branch 'master' of ssh://git.fedorahosted.org/git/pki
      Changes to directory hierarchy of CA and KRA group tests

Timo Aaltonen (33):
      Fix Debian specific paths to jackson jars
      Merge branch 'experimental' into master-next
      update changelog, refresh patches and drop upstream ones
      control: Drop libcrypt-ssleay-perl and libxml-perl from depends.
      pki-tools.install: Add pki-ca-profile manpage.
      control: Add python-sphinx to build-depends.
      Merge tag 'DOGTAG_10_2_2_FEDORA_22_20150318' into master-next
      fix-jackson-paths.diff: Dropped, obsolete. Refresh other patches to drop unused jackson includes.
      pki-server.install: Add sbin/pki-server.
      control: strongswan-starter didn't rename it's 'pki' as planned, so add an unversioned Conflicts to pki-tools. (Closes: #767561)
      control: Update vcs-git location (-> dogtag-pki.git).
      Merge branch 'upstream' into master-next
      update changelog
      Merge branch 'upstream'
      bump the version
      refresh debian support, drop fix-obsolete-target.diff
      Merge branch 'upstream'
      bump version
      Update patches.
      control, pki-server.install: Clean up perl stuff, drop pki-setup- proxy which is gone.
      control: Add libnuxwdog-java to build-depends, and pki-server depends.
      install: Added new manpages, nuxwdog support, html docs to pki-base.
      debian-support.diff: Fix nuxwdog paths.
      debian-support.diff: Don't try to manage rc3.d/* symlinks.
      debian-support.diff: Fix pki_registry_dir, broke when patch got refreshed.
      debian-support.diff: Fix EnvironmentFile in systemd service.
      rules: Symlink jars under subsystem WEB-INF.
      pki-server.postinst, pki-base.post{inst,rm}: Add pki-upgrade/pki- server-upgrade snippets.
      rules, patches: Explicitly build using tomcat7, and add a dummy method.
      close bug 789138
      use-dot-instead-of-source.diff: Fix bashisms.
      debian-support.diff: Fix JNI_JAR_DIR.
      releasing package dogtag-pki version 10.2.6-1

root (2):
      Remove 'pki-migrate' code
      OCSP, TKS and TPS group tests

---
 .classpath                                                                                         |   16 
 .gitignore                                                                                         |    5 
 CMakeLists.txt                                                                                     |   39 
 base/CMakeLists.txt                                                                                |    6 
 base/ca/CMakeLists.txt                                                                             |    8 
 base/ca/shared/conf/CS.cfg.in                                                                      |   15 
 base/ca/shared/conf/Catalina/localhost/ca.xml                                                      |   37 
 base/ca/shared/conf/database.ldif                                                                  |    4 
 base/ca/shared/conf/db.ldif                                                                        |    5 
 base/ca/shared/conf/manager.ldif                                                                   |   48 
 base/ca/shared/conf/schema.ldif                                                                    |  489 
 base/ca/shared/conf/server.xml                                                                     |  277 
 base/ca/shared/conf/serverCert.profile.exampleWithSANpattern                                       |   68 
 base/ca/shared/profiles/ca/caCrossSignedCACert.cfg                                                 |    4 
 base/ca/shared/profiles/ca/caInternalAuthServerCert.cfg                                            |   23 
 base/ca/shared/profiles/ca/caRACert.cfg                                                            |    4 
 base/ca/shared/webapps/ca/404.html                                                                 |   41 
 base/ca/shared/webapps/ca/500.html                                                                 |   41 
 base/ca/shared/webapps/ca/WEB-INF/velocity.properties                                              |    2 
 base/ca/shared/webapps/ca/WEB-INF/web.xml                                                          |    5 
 base/ca/shared/webapps/ca/admin/ca/securitydomainlogin.template                                    |   32 
 base/ca/shared/webapps/ca/admin/ca/sendCookie.template                                             |   32 
 base/ca/shared/webapps/ca/agent/ca/displayBySerial.template                                        |   13 
 base/ca/shared/webapps/ca/agent/header.template                                                    |   28 
 base/ca/shared/webapps/ca/agent/index.template                                                     |   28 
 base/ca/shared/webapps/ca/agent/ports.template                                                     |   28 
 base/ca/shared/webapps/ca/ee/ca/ProfileSelect.template                                             |   83 
 base/ca/shared/webapps/ca/ee/ca/index.html                                                         |   35 
 base/ca/shared/webapps/ca/ee/ca/tabs.html                                                          |    3 
 base/ca/shared/webapps/ca/index.html                                                               |    3 
 base/ca/shared/webapps/ca/services.template                                                        |   39 
 base/ca/src/com/netscape/ca/CAService.java                                                         |   18 
 base/ca/src/com/netscape/ca/CRLIssuingPoint.java                                                   |    6 
 base/ca/src/com/netscape/ca/CertificateAuthority.java                                              |   39 
 base/ca/src/org/dogtagpki/server/ca/rest/CAApplication.java                                        |    8 
 base/ca/src/org/dogtagpki/server/ca/rest/CAInstallerService.java                                   |  157 
 base/ca/src/org/dogtagpki/server/ca/rest/CertRequestService.java                                   |    5 
 base/ca/src/org/dogtagpki/server/ca/rest/CertService.java                                          |   57 
 base/ca/src/org/dogtagpki/server/ca/rest/ProfileService.java                                       |  259 
 base/ca/tomcat7/CMakeLists.txt                                                                     |    6 
 base/ca/tomcat7/conf/Catalina/localhost/ca.xml                                                     |   37 
 base/ca/tomcat8/CMakeLists.txt                                                                     |    6 
 base/ca/tomcat8/conf/Catalina/localhost/ca.xml                                                     |   39 
 base/common/CMakeLists.txt                                                                         |   15 
 base/common/functional/src/com/netscape/cms/servlet/test/ConfigurationTest.java                    |    2 
 base/common/python/CMakeLists.txt                                                                  |   63 
 base/common/python/_static/.gitignore                                                              |    4 
 base/common/python/conf.py                                                                         |  285 
 base/common/python/index.rst                                                                       |   22 
 base/common/python/pki.rst                                                                         |  107 
 base/common/python/pki/__init__.py                                                                 |  188 
 base/common/python/pki/account.py                                                                  |   30 
 base/common/python/pki/cert.py                                                                     |  169 
 base/common/python/pki/cli.py                                                                      |  195 
 base/common/python/pki/client.py                                                                   |   99 
 base/common/python/pki/crypto.py                                                                   |   39 
 base/common/python/pki/encoder.py                                                                  |   43 
 base/common/python/pki/key.py                                                                      |  149 
 base/common/python/pki/kra.py                                                                      |    4 
 base/common/python/pki/profile.py                                                                  |  118 
 base/common/python/pki/system.py                                                                   |  170 
 base/common/python/pki/systemcert.py                                                               |    6 
 base/common/python/pki/upgrade.py                                                                  |    4 
 base/common/sbin/pki-upgrade                                                                       |    8 
 base/common/share/etc/pki.conf                                                                     |    2 
 base/common/src/com/netscape/certsrv/account/AccountInfo.java                                      |   42 
 base/common/src/com/netscape/certsrv/apps/CMS.java                                                 |   54 
 base/common/src/com/netscape/certsrv/apps/ICMSEngine.java                                          |   21 
 base/common/src/com/netscape/certsrv/authentication/EAuthException.java                            |   11 
 base/common/src/com/netscape/certsrv/authentication/IAuthToken.java                                |    2 
 base/common/src/com/netscape/certsrv/authorization/EAuthzException.java                            |   11 
 base/common/src/com/netscape/certsrv/base/BadRequestDataException.java                             |    5 
 base/common/src/com/netscape/certsrv/base/EBaseException.java                                      |   74 
 base/common/src/com/netscape/certsrv/base/ISecurityDomainSessionTable.java                         |    2 
 base/common/src/com/netscape/certsrv/base/SessionContext.java                                      |   42 
 base/common/src/com/netscape/certsrv/ca/CAClient.java                                              |    2 
 base/common/src/com/netscape/certsrv/ca/ECAException.java                                          |   11 
 base/common/src/com/netscape/certsrv/ca/ICertificateAuthority.java                                 |    5 
 base/common/src/com/netscape/certsrv/cert/CertClient.java                                          |    5 
 base/common/src/com/netscape/certsrv/cert/CertEnrollmentRequest.java                               |   26 
 base/common/src/com/netscape/certsrv/client/ClientConfig.java                                      |   35 
 base/common/src/com/netscape/certsrv/client/PKICertificateApprovalCallback.java                    |  196 
 base/common/src/com/netscape/certsrv/client/PKIClient.java                                         |   69 
 base/common/src/com/netscape/certsrv/client/PKIConnection.java                                     |  280 
 base/common/src/com/netscape/certsrv/client/SubsystemClient.java                                   |   40 
 base/common/src/com/netscape/certsrv/common/Constants.java                                         |    6 
 base/common/src/com/netscape/certsrv/dbs/EDBException.java                                         |   11 
 base/common/src/com/netscape/certsrv/extensions/EExtensionsException.java                          |    4 
 base/common/src/com/netscape/certsrv/jobs/EJobsException.java                                      |    8 
 base/common/src/com/netscape/certsrv/kra/EKRAException.java                                        |   11 
 base/common/src/com/netscape/certsrv/kra/KRAClient.java                                            |    2 
 base/common/src/com/netscape/certsrv/ldap/ELdapException.java                                      |   12 
 base/common/src/com/netscape/certsrv/listeners/EListenersException.java                            |   11 
 base/common/src/com/netscape/certsrv/notification/ENotificationException.java                      |    8 
 base/common/src/com/netscape/certsrv/ocsp/OCSPClient.java                                          |    2 
 base/common/src/com/netscape/certsrv/password/EPasswordCheckException.java                         |   11 
 base/common/src/com/netscape/certsrv/profile/EProfileException.java                                |    4 
 base/common/src/com/netscape/certsrv/profile/IProfileInput.java                                    |    1 
 base/common/src/com/netscape/certsrv/profile/IProfileOutput.java                                   |    1 
 base/common/src/com/netscape/certsrv/profile/IProfileSubsystem.java                                |   19 
 base/common/src/com/netscape/certsrv/profile/ProfileClient.java                                    |   42 
 base/common/src/com/netscape/certsrv/profile/ProfileDataInfo.java                                  |    2 
 base/common/src/com/netscape/certsrv/profile/ProfileResource.java                                  |   20 
 base/common/src/com/netscape/certsrv/profile/ProfileRetrievalRequest.java                          |    2 
 base/common/src/com/netscape/certsrv/request/IRequestSubsystem.java                                |   28 
 base/common/src/com/netscape/certsrv/security/IEncryptionUnit.java                                 |    3 
 base/common/src/com/netscape/certsrv/security/ITransportKeyUnit.java                               |    3 
 base/common/src/com/netscape/certsrv/selftests/ISelfTest.java                                      |    5 
 base/common/src/com/netscape/certsrv/selftests/ISelfTestSubsystem.java                             |    5 
 base/common/src/com/netscape/certsrv/system/ConfigurationRequest.java                              |  159 
 base/common/src/com/netscape/certsrv/system/SystemCertData.java                                    |   53 
 base/common/src/com/netscape/certsrv/system/SystemConfigClient.java                                |    2 
 base/common/src/com/netscape/certsrv/system/SystemConfigResource.java                              |   12 
 base/common/src/com/netscape/certsrv/tks/TKSClient.java                                            |    2 
 base/common/src/com/netscape/certsrv/tps/authenticator/AuthenticatorClient.java                    |    2 
 base/common/src/com/netscape/certsrv/tps/authenticator/AuthenticatorResource.java                  |    4 
 base/common/src/com/netscape/certsrv/tps/cert/TPSCertClient.java                                   |    4 
 base/common/src/com/netscape/certsrv/tps/cert/TPSCertResource.java                                 |    1 
 base/common/src/com/netscape/certsrv/tps/connector/ConnectorClient.java                            |    2 
 base/common/src/com/netscape/certsrv/tps/connector/ConnectorResource.java                          |    4 
 base/common/src/com/netscape/certsrv/tps/profile/ProfileClient.java                                |    2 
 base/common/src/com/netscape/certsrv/tps/profile/ProfileMappingClient.java                         |    2 
 base/common/src/com/netscape/certsrv/tps/profile/ProfileMappingResource.java                       |    4 
 base/common/src/com/netscape/certsrv/tps/profile/ProfileResource.java                              |    4 
 base/common/src/com/netscape/certsrv/usrgrp/EUsrGrpException.java                                  |   11 
 base/common/src/org/dogtagpki/tps/apdu/APDU.java                                                   |   35 
 base/common/src/org/dogtagpki/tps/apdu/DeleteFileGP211APDU.java                                    |   31 
 base/common/src/org/dogtagpki/tps/apdu/ExternalAuthenticateAPDUGP211.java                          |  125 
 base/common/src/org/dogtagpki/tps/apdu/GetDataAPDU.java                                            |   11 
 base/common/src/org/dogtagpki/tps/apdu/InstallAppletAPDUGP211.java                                 |  101 
 base/common/src/org/dogtagpki/tps/apdu/InstallLoadGP211APDU.java                                   |   51 
 base/common/src/org/dogtagpki/tps/apdu/LoadFileAPDUGP211.java                                      |   48 
 base/common/src/org/dogtagpki/tps/main/TPSBuffer.java                                              |   10 
 base/common/src/org/dogtagpki/tps/main/TPSException.java                                           |    4 
 base/common/src/org/dogtagpki/tps/main/Util.java                                                   |  165 
 base/common/src/org/dogtagpki/tps/msg/EndOpMsg.java                                                |    8 
 base/common/upgrade/10.0.1/01-AddJniJarDir                                                         |    8 
 base/common/upgrade/10.0.3/01-RemoveJniJarDir                                                      |    8 
 base/common/upgrade/10.1.2/.gitignore                                                              |    4 
 base/common/upgrade/10.2.0/.gitignore                                                              |    4 
 base/common/upgrade/10.2.1/.gitignore                                                              |    4 
 base/common/upgrade/10.2.2/.gitignore                                                              |    4 
 base/common/upgrade/10.2.3/.gitignore                                                              |    4 
 base/common/upgrade/10.2.5/.gitignore                                                              |    4 
 base/common/upgrade/10.2.6/.gitignore                                                              |    4 
 base/console/src/CMakeLists.txt                                                                    |   10 
 base/console/src/com/netscape/admin/certsrv/connection/JSSConnection.java                          |  118 
 base/console/templates/pki_console_wrapper                                                         |   16 
 base/java-tools/bin/pki                                                                            |   43 
 base/java-tools/man/man1/pki-audit.1                                                               |  104 
 base/java-tools/man/man1/pki-ca-profile.1                                                          |  148 
 base/java-tools/man/man1/pki-cert.1                                                                |   75 
 base/java-tools/man/man1/pki-client.1                                                              |   78 
 base/java-tools/man/man1/pki-group-member.1                                                        |   95 
 base/java-tools/man/man1/pki-group.1                                                               |   47 
 base/java-tools/man/man1/pki-key.1                                                                 |    2 
 base/java-tools/man/man1/pki-securitydomain.1                                                      |   12 
 base/java-tools/man/man1/pki-tps-profile.1                                                         |  152 
 base/java-tools/man/man1/pki-user-cert.1                                                           |   98 
 base/java-tools/man/man1/pki-user.1                                                                |   35 
 base/java-tools/man/man1/pki.1                                                                     |   55 
 base/java-tools/src/CMakeLists.txt                                                                 |   10 
 base/java-tools/src/com/netscape/cmstools/CMCRequest.java                                          |    2 
 base/java-tools/src/com/netscape/cmstools/CRMFPopClient.java                                       | 1282 -
 base/java-tools/src/com/netscape/cmstools/HttpClient.java                                          |   65 
 base/java-tools/src/com/netscape/cmstools/OCSPClient.java                                          |  414 
 base/java-tools/src/com/netscape/cmstools/PKCS12Export.java                                        |  468 
 base/java-tools/src/com/netscape/cmstools/cert/CertCLI.java                                        |   18 
 base/java-tools/src/com/netscape/cmstools/cert/CertFindCLI.java                                    |    1 
 base/java-tools/src/com/netscape/cmstools/cert/CertRequestReviewCLI.java                           |    4 
 base/java-tools/src/com/netscape/cmstools/cert/CertRequestSubmitCLI.java                           |   17 
 base/java-tools/src/com/netscape/cmstools/cli/CACLI.java                                           |    2 
 base/java-tools/src/com/netscape/cmstools/cli/CLI.java                                             |   72 
 base/java-tools/src/com/netscape/cmstools/cli/HelpCLI.java                                         |   27 
 base/java-tools/src/com/netscape/cmstools/cli/KRACLI.java                                          |    2 
 base/java-tools/src/com/netscape/cmstools/cli/MainCLI.java                                         |  104 
 base/java-tools/src/com/netscape/cmstools/cli/OCSPCLI.java                                         |    2 
 base/java-tools/src/com/netscape/cmstools/cli/SubsystemCLI.java                                    |   18 
 base/java-tools/src/com/netscape/cmstools/cli/TKSCLI.java                                          |    2 
 base/java-tools/src/com/netscape/cmstools/client/ClientCLI.java                                    |    8 
 base/java-tools/src/com/netscape/cmstools/client/ClientCertImportCLI.java                          |  260 
 base/java-tools/src/com/netscape/cmstools/client/ClientCertModifyCLI.java                          |  126 
 base/java-tools/src/com/netscape/cmstools/client/ClientCertRequestCLI.java                         |  376 
 base/java-tools/src/com/netscape/cmstools/client/ClientCertShowCLI.java                            |  256 
 base/java-tools/src/com/netscape/cmstools/group/GroupCLI.java                                      |    5 
 base/java-tools/src/com/netscape/cmstools/group/GroupMemberCLI.java                                |    5 
 base/java-tools/src/com/netscape/cmstools/key/KeyCLI.java                                          |   30 
 base/java-tools/src/com/netscape/cmstools/key/KeyRetrieveCLI.java                                  |  126 
 base/java-tools/src/com/netscape/cmstools/key/KeyShowCLI.java                                      |   28 
 base/java-tools/src/com/netscape/cmstools/logging/AuditCLI.java                                    |    5 
 base/java-tools/src/com/netscape/cmstools/logging/AuditModifyCLI.java                              |   20 
 base/java-tools/src/com/netscape/cmstools/profile/ProfileAddCLI.java                               |   21 
 base/java-tools/src/com/netscape/cmstools/profile/ProfileCLI.java                                  |   24 
 base/java-tools/src/com/netscape/cmstools/profile/ProfileEditCLI.java                              |  113 
 base/java-tools/src/com/netscape/cmstools/profile/ProfileModifyCLI.java                            |   30 
 base/java-tools/src/com/netscape/cmstools/profile/ProfileShowCLI.java                              |   34 
 base/java-tools/src/com/netscape/cmstools/system/SecurityDomainCLI.java                            |    6 
 base/java-tools/src/com/netscape/cmstools/system/SecurityDomainGetInstallTokenCLI.java             |   98 
 base/java-tools/src/com/netscape/cmstools/tps/cert/TPSCertFindCLI.java                             |   10 
 base/java-tools/src/com/netscape/cmstools/tps/profile/ProfileCLI.java                              |    5 
 base/java-tools/src/com/netscape/cmstools/tps/profile/ProfileModifyCLI.java                        |    2 
 base/java-tools/src/com/netscape/cmstools/user/UserCLI.java                                        |    5 
 base/java-tools/src/com/netscape/cmstools/user/UserCertAddCLI.java                                 |   61 
 base/java-tools/src/com/netscape/cmstools/user/UserCertCLI.java                                    |    5 
 base/java-tools/templates/pki_java_command_wrapper.in                                              |   26 
 base/java-tools/templates/pretty_print_cert_command_wrapper.in                                     |   17 
 base/java-tools/templates/pretty_print_crl_command_wrapper.in                                      |   17 
 base/javadoc/CMakeLists.txt                                                                        |    9 
 base/kra/CMakeLists.txt                                                                            |    8 
 base/kra/functional/drmtest.py                                                                     |   87 
 base/kra/functional/drmtest.readme.txt                                                             |   75 
 base/kra/shared/conf/CS.cfg.in                                                                     |   15 
 base/kra/shared/conf/Catalina/localhost/kra.xml                                                    |   37 
 base/kra/shared/conf/database.ldif                                                                 |    4 
 base/kra/shared/conf/manager.ldif                                                                  |   48 
 base/kra/shared/conf/schema.ldif                                                                   |  489 
 base/kra/shared/conf/server.xml                                                                    |  265 
 base/kra/shared/webapps/kra/404.html                                                               |   40 
 base/kra/shared/webapps/kra/500.html                                                               |   40 
 base/kra/shared/webapps/kra/WEB-INF/velocity.properties                                            |    2 
 base/kra/shared/webapps/kra/agent/header.template                                                  |   28 
 base/kra/shared/webapps/kra/agent/index.template                                                   |   28 
 base/kra/shared/webapps/kra/agent/kra/top.html                                                     |   24 
 base/kra/shared/webapps/kra/index.html                                                             |    3 
 base/kra/shared/webapps/kra/services.template                                                      |   32 
 base/kra/src/com/netscape/kra/SecurityDataRecoveryService.java                                     |   67 
 base/kra/src/com/netscape/kra/TokenKeyRecoveryService.java                                         |  104 
 base/kra/src/org/dogtagpki/server/kra/rest/KRAApplication.java                                     |    8 
 base/kra/src/org/dogtagpki/server/kra/rest/KeyRequestService.java                                  |    4 
 base/kra/src/org/dogtagpki/server/kra/rest/KeyService.java                                         |  215 
 base/kra/tomcat7/CMakeLists.txt                                                                    |    6 
 base/kra/tomcat7/conf/Catalina/localhost/kra.xml                                                   |   37 
 base/kra/tomcat8/CMakeLists.txt                                                                    |    6 
 base/kra/tomcat8/conf/Catalina/localhost/kra.xml                                                   |   39 
 base/native-tools/src/p7tool/SSLerrs.h                                                             |    2 
 base/native-tools/src/revoker/revoker.c                                                            |    6 
 base/native-tools/src/sslget/sslget.c                                                              |    6 
 base/native-tools/src/tkstool/SSLerrs.h                                                            |    2 
 base/ocsp/CMakeLists.txt                                                                           |    8 
 base/ocsp/shared/conf/CS.cfg.in                                                                    |   11 
 base/ocsp/shared/conf/Catalina/localhost/ocsp.xml                                                  |   37 
 base/ocsp/shared/conf/database.ldif                                                                |    9 
 base/ocsp/shared/conf/manager.ldif                                                                 |   48 
 base/ocsp/shared/conf/schema.ldif                                                                  |  489 
 base/ocsp/shared/conf/server.xml                                                                   |  258 
 base/ocsp/shared/webapps/ocsp/404.html                                                             |   42 
 base/ocsp/shared/webapps/ocsp/500.html                                                             |   45 
 base/ocsp/shared/webapps/ocsp/WEB-INF/velocity.properties                                          |    2 
 base/ocsp/shared/webapps/ocsp/agent/header.template                                                |   28 
 base/ocsp/shared/webapps/ocsp/agent/index.template                                                 |   28 
 base/ocsp/shared/webapps/ocsp/agent/ports.template                                                 |   28 
 base/ocsp/shared/webapps/ocsp/index.html                                                           |    3 
 base/ocsp/shared/webapps/ocsp/services.template                                                    |   32 
 base/ocsp/src/com/netscape/ocsp/EOCSPException.java                                                |    8 
 base/ocsp/src/org/dogtagpki/server/ocsp/rest/OCSPApplication.java                                  |    8 
 base/ocsp/src/org/dogtagpki/server/ocsp/rest/OCSPInstallerService.java                             |   29 
 base/ocsp/tomcat7/CMakeLists.txt                                                                   |    6 
 base/ocsp/tomcat7/conf/Catalina/localhost/ocsp.xml                                                 |   37 
 base/ocsp/tomcat8/CMakeLists.txt                                                                   |    6 
 base/ocsp/tomcat8/conf/Catalina/localhost/ocsp.xml                                                 |   39 
 base/selinux/CMakeLists.txt                                                                        |   11 
 base/selinux/LICENSE                                                                               |  291 
 base/selinux/src/CMakeLists.txt                                                                    |   28 
 base/selinux/src/Makefile                                                                          |   18 
 base/selinux/src/pki.fc                                                                            |   51 
 base/selinux/src/pki.if                                                                            |  293 
 base/selinux/src/pki.sh                                                                            |   41 
 base/selinux/src/pki.te                                                                            |  221 
 base/server/CMakeLists.txt                                                                         |    8 
 base/server/cms/src/com/netscape/cms/authentication/DNPattern.java                                 |    2 
 base/server/cms/src/com/netscape/cms/authentication/DirBasedAuthentication.java                    |   38 
 base/server/cms/src/com/netscape/cms/authentication/PortalEnroll.java                              |    2 
 base/server/cms/src/com/netscape/cms/authentication/TokenAuthentication.java                       |    9 
 base/server/cms/src/com/netscape/cms/authentication/UidPwdDirAuthentication.java                   |  106 
 base/server/cms/src/com/netscape/cms/authentication/UidPwdPinDirAuthentication.java                |    2 
 base/server/cms/src/com/netscape/cms/authorization/DirAclAuthz.java                                |    2 
 base/server/cms/src/com/netscape/cms/evaluators/GroupAccessEvaluator.java                          |   23 
 base/server/cms/src/com/netscape/cms/evaluators/UserOrigReqAccessEvaluator.java                    |   20 
 base/server/cms/src/com/netscape/cms/listeners/PinRemovalListener.java                             |    2 
 base/server/cms/src/com/netscape/cms/logging/LogFile.java                                          |   16 
 base/server/cms/src/com/netscape/cms/logging/RollingLogFile.java                                   |   20 
 base/server/cms/src/com/netscape/cms/policy/constraints/AttributePresentConstraints.java           |    2 
 base/server/cms/src/com/netscape/cms/profile/common/EnrollProfile.java                             |   27 
 base/server/cms/src/com/netscape/cms/profile/common/EnrollProfileContext.java                      |   31 
 base/server/cms/src/com/netscape/cms/profile/constraint/BasicConstraintsExtConstraint.java         |    2 
 base/server/cms/src/com/netscape/cms/profile/constraint/EnrollConstraint.java                      |   34 
 base/server/cms/src/com/netscape/cms/profile/constraint/ValidityConstraint.java                    |   70 
 base/server/cms/src/com/netscape/cms/profile/def/AuthorityKeyIdentifierExtDefault.java             |    2 
 base/server/cms/src/com/netscape/cms/profile/def/EnrollDefault.java                                |   44 
 base/server/cms/src/com/netscape/cms/profile/def/GenericExtDefault.java                            |   17 
 base/server/cms/src/com/netscape/cms/profile/def/SubjectAltNameExtDefault.java                     |   11 
 base/server/cms/src/com/netscape/cms/profile/def/ValidityDefault.java                              |   73 
 base/server/cms/src/com/netscape/cms/profile/def/nsNKeySubjectNameDefault.java                     |    2 
 base/server/cms/src/com/netscape/cms/profile/def/nsTokenUserKeySubjectNameDefault.java             |    2 
 base/server/cms/src/com/netscape/cms/publish/publishers/LdapCaCertPublisher.java                   |    2 
 base/server/cms/src/com/netscape/cms/publish/publishers/LdapCrlPublisher.java                      |   26 
 base/server/cms/src/com/netscape/cms/publish/publishers/LdapUserCertPublisher.java                 |    2 
 base/server/cms/src/com/netscape/cms/realm/PKIRealm.java                                           |   91 
 base/server/cms/src/com/netscape/cms/selftests/ASelfTest.java                                      |    5 
 base/server/cms/src/com/netscape/cms/selftests/ca/CAPresence.java                                  |   97 
 base/server/cms/src/com/netscape/cms/selftests/ca/CAValidity.java                                  |  102 
 base/server/cms/src/com/netscape/cms/selftests/common/SystemCertsVerification.java                 |   35 
 base/server/cms/src/com/netscape/cms/selftests/kra/KRAPresence.java                                |   84 
 base/server/cms/src/com/netscape/cms/selftests/ocsp/OCSPPresence.java                              |  123 
 base/server/cms/src/com/netscape/cms/selftests/ocsp/OCSPValidity.java                              |  127 
 base/server/cms/src/com/netscape/cms/selftests/ra/RAPresence.java                                  |  261 
 base/server/cms/src/com/netscape/cms/selftests/tks/TKSKnownSessionKey.java                         |  109 
 base/server/cms/src/com/netscape/cms/servlet/admin/CMSAdminServlet.java                            |   12 
 base/server/cms/src/com/netscape/cms/servlet/admin/GroupMemberProcessor.java                       |    4 
 base/server/cms/src/com/netscape/cms/servlet/admin/ProfileAdminServlet.java                        |   30 
 base/server/cms/src/com/netscape/cms/servlet/base/PKIService.java                                  |   37 
 base/server/cms/src/com/netscape/cms/servlet/cert/DisplayBySerial.java                             |    1 
 base/server/cms/src/com/netscape/cms/servlet/cert/DisplayCRL.java                                  |    2 
 base/server/cms/src/com/netscape/cms/servlet/cert/DoRevokeTPS.java                                 |    2 
 base/server/cms/src/com/netscape/cms/servlet/cert/EnrollmentProcessor.java                         |    9 
 base/server/cms/src/com/netscape/cms/servlet/cert/FilterBuilder.java                               |  248 
 base/server/cms/src/com/netscape/cms/servlet/cert/GetCertFromRequest.java                          |    5 
 base/server/cms/src/com/netscape/cms/servlet/cert/ListCerts.java                                   |   86 
 base/server/cms/src/com/netscape/cms/servlet/cert/RenewalProcessor.java                            |   15 
 base/server/cms/src/com/netscape/cms/servlet/cert/scep/ChallengePassword.java                      |    2 
 base/server/cms/src/com/netscape/cms/servlet/common/CMSTemplate.java                               |  138 
 base/server/cms/src/com/netscape/cms/servlet/common/ECMSGWException.java                           |    8 
 base/server/cms/src/com/netscape/cms/servlet/csadmin/CertUtil.java                                 |  112 
 base/server/cms/src/com/netscape/cms/servlet/csadmin/ConfigurationUtils.java                       |  519 
 base/server/cms/src/com/netscape/cms/servlet/csadmin/GetConfigEntries.java                         |    8 
 base/server/cms/src/com/netscape/cms/servlet/csadmin/SecurityDomainProcessor.java                  |    2 
 base/server/cms/src/com/netscape/cms/servlet/csadmin/UpdateDomainXML.java                          |    6 
 base/server/cms/src/com/netscape/cms/servlet/key/KeyRequestDAO.java                                |    4 
 base/server/cms/src/com/netscape/cms/servlet/profile/ProfileApproveServlet.java                    |    5 
 base/server/cms/src/com/netscape/cms/servlet/profile/ProfileProcessServlet.java                    |    5 
 base/server/cms/src/com/netscape/cms/servlet/profile/ProfileReviewServlet.java                     |    7 
 base/server/cms/src/com/netscape/cms/servlet/profile/ProfileSelectServlet.java                     |    3 
 base/server/cms/src/com/netscape/cms/servlet/profile/ProfileServlet.java                           |   93 
 base/server/cms/src/com/netscape/cms/servlet/profile/ProfileSubmitCMCServlet.java                  |    5 
 base/server/cms/src/com/netscape/cms/servlet/request/CheckRequest.java                             |    6 
 base/server/cms/src/com/netscape/cms/servlet/tks/TokenServlet.java                                 | 1437 +
 base/server/cms/src/org/dogtagpki/server/connector/IRemoteRequest.java                             |   10 
 base/server/cms/src/org/dogtagpki/server/rest/ACLInterceptor.java                                  |  224 
 base/server/cms/src/org/dogtagpki/server/rest/SessionContextInterceptor.java                       |  100 
 base/server/cms/src/org/dogtagpki/server/rest/SystemCertService.java                               |  113 
 base/server/cms/src/org/dogtagpki/server/rest/SystemConfigService.java                             |  439 
 base/server/cmsbundle/src/LogMessages.properties                                                   |  100 
 base/server/cmsbundle/src/UserMessages.properties                                                  |    9 
 base/server/cmscore/src/CMakeLists.txt                                                             |    9 
 base/server/cmscore/src/com/netscape/cmscore/apps/CMSEngine.java                                   |  285 
 base/server/cmscore/src/com/netscape/cmscore/authentication/AuthSubsystem.java                     |   20 
 base/server/cmscore/src/com/netscape/cmscore/authentication/CertUserDBAuthentication.java          |    3 
 base/server/cmscore/src/com/netscape/cmscore/authentication/ChallengePhraseAuthentication.java     |    3 
 base/server/cmscore/src/com/netscape/cmscore/authentication/PasswdUserDBAuthentication.java        |    5 
 base/server/cmscore/src/com/netscape/cmscore/base/FileConfigStore.java                             |    4 
 base/server/cmscore/src/com/netscape/cmscore/base/LDAPConfigStore.java                             |  165 
 base/server/cmscore/src/com/netscape/cmscore/cert/CertUtils.java                                   |   10 
 base/server/cmscore/src/com/netscape/cmscore/cert/CrossCertPairSubsystem.java                      |    2 
 base/server/cmscore/src/com/netscape/cmscore/connector/HttpConnection.java                         |  214 
 base/server/cmscore/src/com/netscape/cmscore/dbs/CSCfgDatabase.java                                |    3 
 base/server/cmscore/src/com/netscape/cmscore/dbs/CertificateRepository.java                        |   46 
 base/server/cmscore/src/com/netscape/cmscore/dbs/DBRegistry.java                                   |    3 
 base/server/cmscore/src/com/netscape/cmscore/dbs/DBSubsystem.java                                  |   30 
 base/server/cmscore/src/com/netscape/cmscore/dbs/DBVirtualList.java                                |   29 
 base/server/cmscore/src/com/netscape/cmscore/dbs/LDAPDatabase.java                                 |   29 
 base/server/cmscore/src/com/netscape/cmscore/dbs/Repository.java                                   |   10 
 base/server/cmscore/src/com/netscape/cmscore/ldap/LdapConnModule.java                              |    2 
 base/server/cmscore/src/com/netscape/cmscore/ldap/LdapPublishModule.java                           |    4 
 base/server/cmscore/src/com/netscape/cmscore/ldapconn/LdapAnonConnFactory.java                     |   16 
 base/server/cmscore/src/com/netscape/cmscore/ldapconn/LdapAuthInfo.java                            |    6 
 base/server/cmscore/src/com/netscape/cmscore/ldapconn/LdapBoundConnFactory.java                    |   18 
 base/server/cmscore/src/com/netscape/cmscore/ldapconn/LdapJssSSLSocketFactory.java                 |    7 
 base/server/cmscore/src/com/netscape/cmscore/logging/LogQueue.java                                 |    9 
 base/server/cmscore/src/com/netscape/cmscore/profile/AbstractProfileSubsystem.java                 |  150 
 base/server/cmscore/src/com/netscape/cmscore/profile/LDAPProfileSubsystem.java                     |  354 
 base/server/cmscore/src/com/netscape/cmscore/profile/ProfileSubsystem.java                         |  186 
 base/server/cmscore/src/com/netscape/cmscore/request/ARequestQueue.java                            |    6 
 base/server/cmscore/src/com/netscape/cmscore/request/RequestSubsystem.java                         |    6 
 base/server/cmscore/src/com/netscape/cmscore/security/JssSubsystem.java                            |    4 
 base/server/cmscore/src/com/netscape/cmscore/selftests/SelfTestSubsystem.java                      |  254 
 base/server/cmscore/src/com/netscape/cmscore/session/LDAPSecurityDomainSessionTable.java           |   10 
 base/server/cmscore/src/com/netscape/cmscore/session/SecurityDomainSessionTable.java               |    3 
 base/server/cmscore/src/com/netscape/cmscore/usrgrp/UGSubsystem.java                               |    2 
 base/server/cmscore/src/com/netscape/cmscore/util/Debug.java                                       |   24 
 base/server/config/pkislots.cfg                                                                    |    6 
 base/server/etc/default.cfg                                                                        |   37 
 base/server/man/man1/pkidaemon.1                                                                   |  304 
 base/server/man/man5/pki_default.cfg.5                                                             |  119 
 base/server/man/man8/pki-server-instance.8                                                         |  104 
 base/server/man/man8/pki-server-migrate.8                                                          |   46 
 base/server/man/man8/pki-server-nuxwdog.8                                                          |  102 
 base/server/man/man8/pki-server-subsystem.8                                                        |   95 
 base/server/man/man8/pki-server.8                                                                  |   82 
 base/server/man/man8/pkidestroy.8                                                                  |    2 
 base/server/man/man8/pkispawn.8                                                                    |  742 
 base/server/python/pki/server/__init__.py                                                          |  175 
 base/server/python/pki/server/cli/instance.py                                                      |  435 
 base/server/python/pki/server/cli/migrate.py                                                       |  468 
 base/server/python/pki/server/cli/nuxwdog.py                                                       |  404 
 base/server/python/pki/server/cli/subsystem.py                                                     |  310 
 base/server/python/pki/server/deployment/pkiconfig.py                                              |    6 
 base/server/python/pki/server/deployment/pkihelper.py                                              | 1060 -
 base/server/python/pki/server/deployment/pkimessages.py                                            |   63 
 base/server/python/pki/server/deployment/pkiparser.py                                              |  796 
 base/server/python/pki/server/deployment/pkiscriptlet.py                                           |    4 
 base/server/python/pki/server/deployment/scriptlets/configuration.py                               |   26 
 base/server/python/pki/server/deployment/scriptlets/finalization.py                                |   17 
 base/server/python/pki/server/deployment/scriptlets/infrastructure_layout.py                       |   10 
 base/server/python/pki/server/deployment/scriptlets/initialization.py                              |   23 
 base/server/python/pki/server/deployment/scriptlets/instance_layout.py                             |  155 
 base/server/python/pki/server/deployment/scriptlets/security_databases.py                          |   56 
 base/server/python/pki/server/deployment/scriptlets/selinux_setup.py                               |   10 
 base/server/python/pki/server/deployment/scriptlets/slot_substitution.py                           |   48 
 base/server/python/pki/server/deployment/scriptlets/subsystem_layout.py                            |  109 
 base/server/python/pki/server/deployment/scriptlets/webapp_deployment.py                           |  177 
 base/server/python/pki/server/upgrade.py                                                           |   32 
 base/server/sbin/pki-server                                                                        |   93 
 base/server/sbin/pki-server-nuxwdog                                                                |   43 
 base/server/sbin/pki-server-upgrade                                                                |    2 
 base/server/sbin/pkidestroy                                                                        |   12 
 base/server/sbin/pkispawn                                                                          |  152 
 base/server/scripts/operations                                                                     |  191 
 base/server/share/conf/Catalina/localhost/ROOT.xml                                                 |   30 
 base/server/share/conf/Catalina/localhost/pki.xml                                                  |   30 
 base/server/share/conf/database.ldif                                                               |    9 
 base/server/share/conf/manager.ldif                                                                |   46 
 base/server/share/conf/pki.policy                                                                  |   27 
 base/server/share/conf/schema-certProfile.ldif                                                     |    4 
 base/server/share/conf/schema.ldif                                                                 |  669 
 base/server/share/conf/server.xml                                                                  |  304 
 base/server/share/conf/tomcat.conf                                                                 |    5 
 base/server/share/lib/systemd/system/pki-tomcatd-nuxwdog.target                                    |    7 
 base/server/share/lib/systemd/system/pki-tomcatd-nuxwdog at .service                                  |   15 
 base/server/share/lib/systemd/system/pki-tomcatd.target                                            |    5 
 base/server/share/lib/systemd/system/pki-tomcatd at .service                                          |    4 
 base/server/share/webapps/ROOT/index.jsp                                                           |  200 
 base/server/share/webapps/pki/admin/console/config/config_addhsm.vm                                |    2 
 base/server/share/webapps/pki/admin/console/config/login.vm                                        |    2 
 base/server/share/webapps/pki/admin/console/config/securitydomainloginpanel.vm                     |    2 
 base/server/share/webapps/pki/admin/console/config/wizard.vm                                       |    2 
 base/server/share/webapps/pki/css/patternfly.css                                                   | 9492 ----------
 base/server/share/webapps/pki/css/pki-forms.css                                                    |  240 
 base/server/share/webapps/pki/css/pki-tables.css                                                   |   70 
 base/server/share/webapps/pki/css/pki-ui.css                                                       |  159 
 base/server/share/webapps/pki/js/pki-ui.js                                                         |   38 
 base/server/test/CMakeLists.txt                                                                    |    2 
 base/server/test/com/netscape/cmscore/app/CMSEngineDefaultStub.java                                |    9 
 base/server/tomcat/CMakeLists.txt                                                                  |    2 
 base/server/tomcat/src/CMakeLists.txt                                                              |   53 
 base/server/tomcat/src/com/netscape/cms/tomcat/NuxwdogPasswordStore.java                           |  115 
 base/server/tomcat/src/com/netscape/cms/tomcat/PKIListener.java                                    |  119 
 base/server/tomcat/src/com/netscape/cms/tomcat/ProxyRealm.java                                     |  139 
 base/server/tomcat/src/com/netscape/cms/tomcat/SSLAuthenticatorWithFallback.java                   |  172 
 base/server/tomcat/src/pki-tomcat.mf                                                               |    3 
 base/server/tomcat7/CMakeLists.txt                                                                 |   10 
 base/server/tomcat7/conf/Catalina/localhost/ROOT.xml                                               |   30 
 base/server/tomcat7/conf/Catalina/localhost/pki#admin.xml                                          |   30 
 base/server/tomcat7/conf/Catalina/localhost/pki#js.xml                                             |   30 
 base/server/tomcat7/conf/Catalina/localhost/pki.xml                                                |   30 
 base/server/tomcat7/conf/server.xml                                                                |  317 
 base/server/tomcat7/src/CMakeLists.txt                                                             |  159 
 base/server/tomcat7/src/com/netscape/cms/tomcat/ProxyRealm.java                                    |  139 
 base/server/tomcat7/src/com/netscape/cms/tomcat/SSLAuthenticatorWithFallback.java                  |  172 
 base/server/tomcat7/src/pki-tomcat.mf                                                              |    3 
 base/server/tomcat8/CMakeLists.txt                                                                 |   10 
 base/server/tomcat8/conf/Catalina/localhost/ROOT.xml                                               |   32 



More information about the Pkg-freeipa-devel mailing list