[Pkg-freeipa-devel] [Git][freeipa-team/certmonger][master] 16 commits: Add some missing test files to dist

[Timo Aaltonen (@tjaalton)]

Timo Aaltonen pushed to branch master at FreeIPA packaging / certmonger


Commits:
1b682f10 by Fraser Tweedale at 2025-02-06T13:46:01-05:00
Add some missing test files to dist

SRPM misses some essential test files, causing failure during RPM
build test phase.  Add the missing files.

- - - - -
a96cf5fc by Thorsten Scherf at 2025-06-02T15:00:34+02:00
Update README.md to include CEP/CES support.

- - - - -
b1194b89 by Rob Crittenden at 2025-09-05T08:44:22-04:00
Use the IPA API by default for dogtag requests

This retains compatibility with the XML-based PKI API but will
default to using IPA.

The ultimate purpose is to limit the number of dogtag PKI APIs that
certmonger needs to support. The bootstrap issue, where we have to
talk directly to the CA because IPA is not fully setup yet, will
be handled at a later date.

Fixes: https://pagure.io/certmonger/issue/284

Signed-off-by: Rob Crittenden <rcritten at redhat.com>

- - - - -
e1637da7 by Rob Crittenden at 2025-09-05T08:44:22-04:00
Add tests for the expanded dogtag requests through IPA API

This extends the current 019-dparse tests to include IPA json output
validation.

Fixes: https://pagure.io/certmonger/issue/284

Signed-off-by: Rob Crittenden <rcritten at redhat.com>

- - - - -
66a523ff by Rob Crittenden at 2025-09-05T08:44:22-04:00
Drop unused cm_submit_d parameters

I think these were probably initially added in case they might
be useful and they've just remained. We don't need them so drop
them.

Related: https://pagure.io/certmonger/issue/284

Signed-off-by: Rob Crittenden <rcritten at redhat.com>

- - - - -
b1653638 by Rob Crittenden at 2025-09-05T08:44:22-04:00
Fix format-overflow warning when converting time

This removes warnings like:
note: ‘sprintf’ output between 15 and 67 bytes into a destination of size 15

by converting to an unsigned short instead of a decimal.

Signed-off-by: Rob Crittenden <rcritten at redhat.com>

- - - - -
712a1570 by Rob Crittenden at 2025-09-05T08:44:22-04:00
Fix directive argument is NULL errors (-Wformat-overflow)

Don't knowingly pass in a NULL value to an output statement.

Fixes: https://pagure.io/certmonger/issue/283

Signed-off-by: Rob Crittenden <rcritten at redhat.com>

- - - - -
fc590194 by Rob Crittenden at 2025-09-05T08:44:22-04:00
Suppress unused arguments to the LDAP SASL interactive callback

Signed-off-by: Rob Crittenden <rcritten at redhat.com>

- - - - -
64e95065 by Rob Crittenden at 2025-09-05T08:44:22-04:00
Pass all=True to certprofile-find to retrieve all profiles

Otherwise certprofile-find will only return the "local" profiles
stored in IPA LDAP.

The user must both have permission to read the CA profiles and pass
all=True.

Signed-off-by: Rob Crittenden <rcritten at redhat.com>

- - - - -
acabe1d6 by Fraser Tweedale at 2025-09-05T09:04:35-04:00
express payload type via an enum

Introduce `enum cm_rpm_protocol` for more ergonomic and readable
expression of whether the payload is XML or JSON, and update call
sites.

Related: https://pagure.io/certmonger/issue/284

- - - - -
357fde9c by Rob Crittenden at 2025-10-01T10:19:26-04:00
Temporarily stop testing the c (valid ca) flag due to NSS bug

Replace C,c,p with C,,p in tests/007-certsave because the valid
CA flag is not working as expected in NSS 3.115.

RHBZ https://bugzilla.redhat.com/show_bug.cgi?id=2395904
Mozilla BZ https://bugzilla.mozilla.org/show_bug.cgi?id=1990444

This is a temporary workaround while upstream works on fixing
the issue.

Related: https://pagure.io/certmonger/issue/297

Signed-off-by: Rob Crittenden <rcritten at redhat.com>

- - - - -
5e53a204 by Rob Crittenden at 2025-10-01T10:34:32-04:00
Tag 0.79.21

- - - - -
adf7a9c0 by Timo Aaltonen at 2025-10-30T19:05:47+02:00
Merge branch 'upstream'

- - - - -
d025c090 by Timo Aaltonen at 2025-10-30T19:06:11+02:00
version bump

- - - - -
00dd203d by Timo Aaltonen at 2025-11-10T13:42:59+02:00
watch: Updated.

- - - - -
73da271a by Timo Aaltonen at 2025-11-10T13:43:09+02:00
releasing package certmonger version 0.79.21-1

- - - - -


56 changed files:

- README.md
- certmonger.spec
- configure.ac
- debian/changelog
- debian/watch
- src/Makefile.am
- src/dogtag.c
- src/ipa.c
- src/scep.c
- src/store-gen.c
- src/store.h
- src/submit-d.c
- src/submit-d.h
- + src/util-ipa.c
- + src/util-ipa.h
- tests/007-certsave-sql/expected.out
- tests/007-certsave/run.sh
- + tests/019-dparse/bad.checkRequest.nosuch.json
- tests/019-dparse/bad.checkRequest.nosuch → tests/019-dparse/bad.checkRequest.nosuch.xml
- tests/019-dparse/bad.displayCertFromRequest.incomplete → tests/019-dparse/bad.displayCertFromRequest.incomplete.xml
- + tests/019-dparse/bad.displayCertFromRequest.no-such-request.json
- tests/019-dparse/bad.displayCertFromRequest.no-such-request → tests/019-dparse/bad.displayCertFromRequest.no-such-request.xml
- tests/019-dparse/bad.displayCertFromRequest.rejected → tests/019-dparse/bad.displayCertFromRequest.rejected.xml
- tests/019-dparse/bad.profileProcess.bad-property → tests/019-dparse/bad.profileProcess.bad-property.xml
- tests/019-dparse/bad.profileProcess.no-agent-cert → tests/019-dparse/bad.profileProcess.no-agent-cert.xml
- tests/019-dparse/bad.profileProcess.no-ca-cert → tests/019-dparse/bad.profileProcess.no-ca-cert.xml
- tests/019-dparse/bad.profileProcess.no-property → tests/019-dparse/bad.profileProcess.no-property.xml
- tests/019-dparse/bad.profileProcess.not-pending → tests/019-dparse/bad.profileProcess.not-pending.xml
- tests/019-dparse/bad.profileReview.no-such-request → tests/019-dparse/bad.profileReview.no-such-request.xml
- tests/019-dparse/bad.profileReview.unauthorized-cert → tests/019-dparse/bad.profileReview.unauthorized-cert.xml
- tests/019-dparse/bad.profileReview.wrong-nssdb → tests/019-dparse/bad.profileReview.wrong-nssdb.xml
- + tests/019-dparse/bad.profileSubmit.csr.empty.json
- tests/019-dparse/bad.profileSubmit.csr.empty → tests/019-dparse/bad.profileSubmit.csr.empty.xml
- + tests/019-dparse/bad.profileSubmit.csr.invalid.json
- tests/019-dparse/bad.profileSubmit.csr.subject-mismatch → tests/019-dparse/bad.profileSubmit.csr.subject-mismatch.xml
- tests/019-dparse/bad.profileSubmit.serial.empty → tests/019-dparse/bad.profileSubmit.serial.empty.xml
- tests/019-dparse/bad.profileSubmit.serial.invalid → tests/019-dparse/bad.profileSubmit.serial.invalid.xml
- tests/019-dparse/bad.profileSubmit.serial.out-of-range → tests/019-dparse/bad.profileSubmit.serial.out-of-range.xml
- tests/019-dparse/expected.out
- + tests/019-dparse/good.checkRequest.complete.json
- tests/019-dparse/good.checkRequest.complete → tests/019-dparse/good.checkRequest.complete.xml
- + tests/019-dparse/good.checkRequest.pending.json
- tests/019-dparse/good.checkRequest.pending → tests/019-dparse/good.checkRequest.pending.xml
- tests/019-dparse/good.displayCertFromRequest-extra-line → tests/019-dparse/good.displayCertFromRequest-extra-line.xml
- + tests/019-dparse/good.displayCertFromRequest.json
- tests/019-dparse/good.displayCertFromRequest → tests/019-dparse/good.displayCertFromRequest.xml
- + tests/019-dparse/good.profileList.json
- tests/019-dparse/good.profileList → tests/019-dparse/good.profileList.xml
- tests/019-dparse/good.profileReview → tests/019-dparse/good.profileReview.xml
- + tests/019-dparse/good.profileSubmit.issued.json
- tests/019-dparse/good.profileSubmit.issued → tests/019-dparse/good.profileSubmit.issued.xml
- tests/019-dparse/good.profileSubmit.serial.in-range → tests/019-dparse/good.profileSubmit.serial.in-range.xml
- tests/019-dparse/run.sh
- tests/Makefile.am
- tests/tools/Makefile.am
- tests/tools/dparse.c


The diff was not included because it is too large.


View it on GitLab: https://salsa.debian.org/freeipa-team/certmonger/-/compare/a7a9232727fff6c3fd68a957229df0e01713de7a...73da271a40c6a00d85810044c6316f05470f87b3

-- 
View it on GitLab: https://salsa.debian.org/freeipa-team/certmonger/-/compare/a7a9232727fff6c3fd68a957229df0e01713de7a...73da271a40c6a00d85810044c6316f05470f87b3
You're receiving this email because of your account on salsa.debian.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/pkg-freeipa-devel/attachments/20251110/058d0a4f/attachment-0001.htm>