Re: [Pki-devel] [PATCH] pki-cfu-0143-Ticket-2389-Installation-subsystem-certs-could-have-.patch

2016-06-28 Thread Endi Sukma Dewata
On 6/28/2016 8:03 PM, Christina Fu wrote: This patch addresses https://fedorahosted.org/pki/ticket/2389 Installation: subsystem certs could have notAfter beyond CA signing cert in case of external or existing CA thanks, Christina Just one thing, to help troubleshooting the exception should be

[Pki-devel] [PATCH] pki-cfu-0143-Ticket-2389-Installation-subsystem-certs-could-have-.patch

2016-06-28 Thread Christina Fu
This patch addresses https://fedorahosted.org/pki/ticket/2389 Installation: subsystem certs could have notAfter beyond CA signing cert in case of external or existing CA thanks, Christina >From c79ff72288dd27b6b55840c0d5066b9b233a2b3a Mon Sep 17 00:00:00 2001 From: Christina Fu Date: Tue, 28 J

Re: [Pki-devel] [PATCH] 778 Fixed KRA cloning issue.

2016-06-28 Thread Endi Sukma Dewata
On 6/28/2016 6:07 PM, Matthew Harmsen wrote: Ran the following test: Steps to reproduce: 1. Install CA and KRA on master: $ ipa-server-install -U -r EXAMPLE.COM -p Secret123 -a Secret123 $ ipa-kra-install -p Secret123 2. Install CA and KRA on replica: $ ipa-client-i

Re: [Pki-devel] [PATCH] 778 Fixed KRA cloning issue.

2016-06-28 Thread Matthew Harmsen
On 06/21/2016 01:03 PM, Endi Sukma Dewata wrote: The pki pkcs12-import CLI has been modified not to import certificates that already exist in the NSS database unless specifically requested with the --overwrite parameter. This will avoid changing the trust flags of the CA signing certificate durin

Re: [Pki-devel] [PATCH] pki-cfu-0142-Ticket-1308-RFE-Provide-ability-to-perform-off-card-.patch

2016-06-28 Thread Christina Fu
received verbal ack from Jack. Pushed to master: commit 98c12f05c38c9d21389f03a99f849151d9b68c84 thanks, Christina On 06/28/2016 02:55 PM, Christina Fu wrote: This is the patch to add missing serverKeygen params for non-encryption certs. By default it is disabled. thanks, Christina ___

[Pki-devel] [PATCH] pki-cfu-0142-Ticket-1308-RFE-Provide-ability-to-perform-off-card-.patch

2016-06-28 Thread Christina Fu
This is the patch to add missing serverKeygen params for non-encryption certs. By default it is disabled. thanks, Christina >From 98c12f05c38c9d21389f03a99f849151d9b68c84 Mon Sep 17 00:00:00 2001 From: Christina Fu Date: Tue, 28 Jun 2016 11:28:42 -0700 Subject: [PATCH] Ticket #1308 [RFE] Provid

Re: [Pki-devel] Fixes exception while invalid module.

2016-06-28 Thread Endi Sukma Dewata
On 6/21/2016 3:19 AM, Amol Kahat wrote: Hi, Please review this patch. Fixes: https://bugzilla.redhat.com/show_bug.cgi?id=1348446 Thanks Amol K I think to fix this problem properly the code should raise a CLIException (needs to be added) if it cannot find the module, then the main program sh

Re: [Pki-devel] Invalid instance exception fix.

2016-06-28 Thread Endi Sukma Dewata
On 6/21/2016 2:55 AM, Amol Kahat wrote: Hi, Please review this patch. Fixes: https://bugzilla.redhat.com/show_bug.cgi?id=1348433 Thanks Amol K. Thanks! I pushed the patch with some changes for consistency. -- Endi S. Dewata ___ Pki-devel mailing

Re: [Pki-devel] Fixes pki-server subsystem --help options.

2016-06-28 Thread Endi Sukma Dewata
On 6/21/2016 2:23 AM, Amol Kahat wrote: Hi, Please review this patch. Fixes: https://bugzilla.redhat.com/show_bug.cgi?id=1340718 Thanks Amol K. Thanks for the patch! Pushed to master. -- Endi S. Dewata ___ Pki-devel mailing list Pki-devel@redhat