Re: [Pki-devel] [Freeipa-devel] [DESIGN] Lightweight CA renewal

2016-06-17 Thread Fraser Tweedale
On Mon, May 09, 2016 at 09:35:06AM +0200, Jan Cholasta wrote: > Hi, > > On 6.5.2016 08:01, Fraser Tweedale wrote: > > Hullo all, > > > > FreeIPA Lightweight CAs implementation is progressing well. The > > remaining big unknown in the design is how to do renewal. I have > > put my ideas into the

Re: [Pki-devel] [PATCH] 775-776 Fixed Java dependency

2016-06-17 Thread Endi Sukma Dewata
On 6/17/2016 12:54 AM, Endi Sukma Dewata wrote: On 06/16/2016 06:09 PM, Endi Sukma Dewata wrote: The code has been modified to use the JAVA_HOME path specified in the pki.conf. The spec file has been modified to depend specifically on OpenJDK 1.8.0 and to provide the default JAVA_HOME path for

Re: [Pki-devel] [PATCH] 777 Added upgrade script to fix JAVA_HOME.

2016-06-17 Thread Endi Sukma Dewata
On 6/17/2016 12:54 AM, Endi Sukma Dewata wrote: https://fedorahosted.org/pki/ticket/2363 ACKed by jmagne, and ftweedal also helped with the review. Thanks! Pushed to master. -- Endi S. Dewata ___ Pki-devel mailing list Pki-devel@redhat.com https:/

Re: [Pki-devel] [pki-devel][PATCH] 0072-Revocation-failure-causes-AUDIT_PRIVATE_KEY_ARCHIVE_.patch

2016-06-17 Thread John Magne
ACK'd by cfu: Pushed to master, closing ticket #2340 - Original Message - From: "John Magne" To: "pki-devel" Sent: Tuesday, June 14, 2016 4:07:49 PM Subject: [pki-devel][PATCH] 0072-Revocation-failure-causes-AUDIT_PRIVATE_KEY_ARCHIVE_.patch Revocation failure causes AUDIT_PRIVATE_

Re: [Pki-devel] [pki-devel][PATCH] 0070-Fix-coverity-warnings-for-tkstool.patch

2016-06-17 Thread John Magne
ACK'ed by mharmsen, pushed to master: Closing ticket #1199 - Original Message - From: "John Magne" To: "pki-devel" Sent: Monday, June 6, 2016 4:39:43 PM Subject: [pki-devel][PATCH] 0070-Fix-coverity-warnings-for-tkstool.patch Fix attached. _

[Pki-devel] [PATCH] pki-cfu-0139-Ticket-2298-Part3-trim-down-debug-log-in-non-TMS-crm.patch

2016-06-17 Thread Christina Fu
This is the last patch for ttps://fedorahosted.org/pki/ticket/2298 [non-TMS] for key archival/recovery, not to record certain data in ldap and logs It mainly trims down the debug log and rids off CRMF requests. it also gets rid of some excessive debugging in exercised areas. In the last patch

Re: [Pki-devel] [PATCH] pki-cfu-0139-Ticket-2298-Part3-trim-down-debug-log-in-non-TMS-crm.patch

2016-06-17 Thread John Magne
If tested to work and no offending logs remain: ACK - Original Message - From: "Christina Fu" To: "pki-devel" Sent: Friday, June 17, 2016 2:54:33 PM Subject: [Pki-devel] [PATCH] pki-cfu-0139-Ticket-2298-Part3-trim-down-debug-log-in-non-TMS-crm.patch This is the last patch for ttps://f

Re: [Pki-devel] [PATCH] pki-cfu-0139-Ticket-2298-Part3-trim-down-debug-log-in-non-TMS-crm.patch

2016-06-17 Thread Christina Fu
pushed to master: commit 62d8908d91e74320db647b939c0d9900c09d0608 thanks, Christina On 06/17/2016 03:06 PM, John Magne wrote: If tested to work and no offending logs remain: ACK - Original Message - From: "Christina Fu" To: "pki-devel" Sent: Friday, June 17, 2016 2:54:33 PM Subject:

[Pki-devel] [PATCH] pki-cfu-0140-Ticket-2346-support-SHA384withRSA.patch

2016-06-17 Thread Christina Fu
This patch adds support for SHA384withRSA signing algorithm. It addresses ticket: https://fedorahosted.org/pki/ticket/2346 java.security.NoSuchAlgorithmException: no such algorithm: OID.1.2.840.113549.1.1.12 for provider Mozilla-JSS when signing a CSR using SHA384withRSA Tested to work with 1

Re: [Pki-devel] [PATCH] pki-cfu-0140-Ticket-2346-support-SHA384withRSA.patch

2016-06-17 Thread Christina Fu
forgot to attach patch... here you go. On 06/17/2016 04:48 PM, Christina Fu wrote: This patch adds support for SHA384withRSA signing algorithm. It addresses ticket: https://fedorahosted.org/pki/ticket/2346 java.security.NoSuchAlgorithmException: no such algorithm: OID.1.2.840.113549.1.1.12 for

Re: [Pki-devel] [PATCH] pki-cfu-0140-Ticket-2346-support-SHA384withRSA.patch

2016-06-17 Thread John Magne
Looked over. Pretty straightforward additions. As long as the stated successful test worked. ACK - Original Message - From: "Christina Fu" To: pki-devel@redhat.com Sent: Friday, June 17, 2016 5:08:17 PM Subject: Re: [Pki-devel] [PATCH] pki-cfu-0140-Ticket-2346-support-SHA384withRSA.pat

Re: [Pki-devel] [PATCH] pki-cfu-0140-Ticket-2346-support-SHA384withRSA.patch

2016-06-17 Thread Christina Fu
pushed to master: commit 158bb22a87832ff2be07ac4b75c8f2927caefd55 thanks, Christina On 06/17/2016 05:31 PM, John Magne wrote: Looked over. Pretty straightforward additions. As long as the stated successful test worked. ACK - Original Message - From: "Christina Fu" To: pki-devel@redh

Re: [Pki-devel] [Freeipa-devel] [DESIGN] Lightweight CA renewal

2016-06-17 Thread Fraser Tweedale
On Fri, Jun 17, 2016 at 03:21:07PM +0200, Jan Cholasta wrote: > On 17.6.2016 09:34, Fraser Tweedale wrote: > > On Mon, May 09, 2016 at 09:35:06AM +0200, Jan Cholasta wrote: > > > Hi, > > > > > > On 6.5.2016 08:01, Fraser Tweedale wrote: > > > > Hullo all, > > > > > > > > FreeIPA Lightweight CAs i