Re: [Pki-devel] [PATCH] 0084..0086 Lightweight CA replication support

2016-03-21 Thread Fraser Tweedale
On Fri, Mar 18, 2016 at 02:30:24PM +1000, Fraser Tweedale wrote: > Hi all, > > The attached patches implement replication support for lightweight > CAs. These patches do not implement key replication via Custodia > (my next task) but they do implement the persistent search thread > and appropriat

Re: [Pki-devel] [PATCH] 0082 Allow multiple ACLs of same name (union of rules)

2016-03-21 Thread Fraser Tweedale
On Mon, Mar 21, 2016 at 10:39:08PM -0500, Endi Sukma Dewata wrote: > On 3/15/2016 8:14 PM, Fraser Tweedale wrote: > >The attached patch makes a change to how ACLs are loaded from > >database, to allow a single ACL to be specified across several > >values. > > > >Thanks, > >Fraser > > Should the AC

Re: [Pki-devel] [PATCH] 0083 Add CRL dist points extension to OIDMap unconditionally

2016-03-21 Thread Fraser Tweedale
On Mon, Mar 21, 2016 at 11:00:41PM -0500, Endi Sukma Dewata wrote: > On 3/17/2016 7:58 PM, Fraser Tweedale wrote: > >Hello all, > > > >The attached patch fixes https://fedorahosted.org/pki/ticket/2237. > > > >Cheers, > >Fraser > > ACK. Alternatively: > > addAttribute(CRLDistributionPointsExtens

Re: [Pki-devel] [PATCH] 0083 Add CRL dist points extension to OIDMap unconditionally

2016-03-21 Thread Endi Sukma Dewata
On 3/17/2016 7:58 PM, Fraser Tweedale wrote: Hello all, The attached patch fixes https://fedorahosted.org/pki/ticket/2237. Cheers, Fraser ACK. Alternatively: addAttribute(CRLDistributionPointsExtension.class, addClass(CRLDistributionPointsExtension.OID, addClass(CRLDistribution

Re: [Pki-devel] [PATCH] 0077..0081 assorted code deletions

2016-03-21 Thread Fraser Tweedale
On Mon, Mar 21, 2016 at 10:16:43PM -0500, Endi Sukma Dewata wrote: > On 3/13/2016 7:25 PM, Fraser Tweedale wrote: > >Hi all, > > > >Attached patches implement various drive-by or long-threatened code > >deletions. > > > >0077 > > Remove unuesd imports cause by me in a recent patch > >0078 > > R

Re: [Pki-devel] [PATCH] 0082 Allow multiple ACLs of same name (union of rules)

2016-03-21 Thread Endi Sukma Dewata
On 3/15/2016 8:14 PM, Fraser Tweedale wrote: The attached patch makes a change to how ACLs are loaded from database, to allow a single ACL to be specified across several values. Thanks, Fraser Should the ACL.rights be merged as well? -- Endi S. Dewata

Re: [Pki-devel] [PATCH] 0077..0081 assorted code deletions

2016-03-21 Thread Endi Sukma Dewata
On 3/13/2016 7:25 PM, Fraser Tweedale wrote: Hi all, Attached patches implement various drive-by or long-threatened code deletions. 0077 Remove unuesd imports cause by me in a recent patch 0078 Remove unused vars/fields from ProfileService/ProfileSubsystem 0079 Remove RAEnrollProfile c

[Pki-devel] [PATCH] 701 Generating TEMP_LOST to UNINITIALIZED/ACTIVE transitions dynamically.

2016-03-21 Thread Endi Sukma Dewata
The TPS subsystem has been modified to generate the token state transitions from TEMP_LOST to UNINITIALIZED or ACTIVE dynamically depending on whether the token has certificates. The TEMP_LOST to ACTIVE transition has been removed from the CS.cfg. Duplicate code that loads the allowed transition

Re: [Pki-devel] [PATCH] 700 Removed unnecessary URL encoding on admin cert request.

2016-03-21 Thread Endi Sukma Dewata
On 3/21/2016 1:58 PM, Christina Fu wrote: looks good. ACK. Christina Thanks! Pushed to master. -- Endi S. Dewata ___ Pki-devel mailing list Pki-devel@redhat.com https://www.redhat.com/mailman/listinfo/pki-devel

Re: [Pki-devel] [PATCH] 700 Removed unnecessary URL encoding on admin cert request.

2016-03-21 Thread Christina Fu
looks good. ACK. Christina On 03/21/2016 09:55 AM, Endi Sukma Dewata wrote: Due to changes in aaacd71a2f125501645885d3da1de18459782572, when pki_import_admin_cert is set to False the installation code performs an unnecessary URL encoding on the admin certificate request. The extra URL encoding

[Pki-devel] [PATCH] 700 Removed unnecessary URL encoding on admin cert request.

2016-03-21 Thread Endi Sukma Dewata
Due to changes in aaacd71a2f125501645885d3da1de18459782572, when pki_import_admin_cert is set to False the installation code performs an unnecessary URL encoding on the admin certificate request. The extra URL encoding has now been removed. https://fedorahosted.org/pki/ticket/1803 -- Endi S. Dew

[Pki-devel] [PATCH] 699 Fixed exception handling in EnrollProfile.

2016-03-21 Thread Endi Sukma Dewata
To help troubleshooting the EnrollProfile has been modified to log the stack trace and chain the exception. https://fedorahosted.org/pki/ticket/1654 -- Endi S. Dewata >From 77b149c869a26ae2a09fafa2833a879fec4de666 Mon Sep 17 00:00:00 2001 From: "Endi S. Dewata" Date: Sat, 19 Mar 2016 03:06:25 +

Re: [Pki-devel] [PATCH] 697 Additional clean-ups for PKCS #12 utilities.

2016-03-21 Thread Ade Lee
ack On Fri, 2016-03-18 at 11:30 -0500, Endi Sukma Dewata wrote: > The pki_server_external_cert_path has been renamed to > pki_server_external_certs_path to match the file name. > > A default pki_server_external_certs_path has been added to > default.cfg. > > The pki pkcs12-export has been modifi