Re: [Freeipa-devel] [TESTING] Please test and add karma to pki-core-10.4.0-1

2017-03-17 Thread Matthew Harmsen 

On 03/17/2017 10:02 AM, Lukas Slebodnik wrote:

On (17/03/17 12:14), Martin Babinsky wrote:

A new update for Dogtag PKI (pki-core-10.4.0-1.fc25) landed it Fedora 25
updates-testing yesterday.[1]


It was also pushed to fedora26
https://bodhi.fedoraproject.org/updates/FEDORA-2017-9cc27242c1


I have already provided negative karma as the update broke CA clone deployment
on FreeIPA replica install.

It would be nice if you could test it and provide +1/-1 ASAP so that we can
push it out before it hits stable and give Matthew a change to privode fixes.


The fastest will be if it will be unpushed by fedora maintainer
Adding mharmsen to CC.

LS


Lukas and Martin,

After speaking with some members of the PKI team, I have unpushed both 
the F25 and F26 builds from Bodhi.


The following unresolved issues on cloning were documented in:

 * dogtagpki Pagure Issue #2336 - IPA Replica CA configuration failed
   Clone does not have all the required certificates
   

Was this the same cloning failure that you were seeing?

If not, please file a detailed Pagure Issue describing the failure 
complete with log attachment.


As for the vault issue, we may have an idea on this as the code in that 
area has been changing.


Thanks,
-- Matt

-- 
Manage your subscription for the Freeipa-devel mailing list:
https://www.redhat.com/mailman/listinfo/freeipa-devel
Contribute to FreeIPA: http://www.freeipa.org/page/Contribute/Code

[Freeipa-devel] Karma Requests for tomcatjss-7.2.1-1

2017-03-14 Thread Matthew Harmsen 

Everyone,

Sorry, due to a dependency glitch, tomcatjss needed to be re-spun again 
(please ignore previous tomcatjss Karma emails):


*The following updated candidate builds of tomcatjss 7.2.1 were generated:*

 * *Fedora 25:*
 o *tomcatjss-7.2.1-1.fc25
   
   *
 * *Fedora 26:*
 o *tomcatjss-7.2.1-1.fc26
   
   *
 * *Fedora 27:*
 o *tomcatjss-7.2.1-1.fc27
   *

*Please provide Karma for the following builds:*

 * *Fedora 25:*
 o *https://bodhi.fedoraproject.org/updates/FEDORA-2017-122cb7e152
   tomcatjss-7.2.1-1.fc25
   
   *
 * *Fedora 26:*
 o *https://bodhi.fedoraproject.org/updates/FEDORA-2017-2363353a6d
   tomcatjss-7.2.1-1.fc26
   *

-- Matt

-- 
Manage your subscription for the Freeipa-devel mailing list:
https://www.redhat.com/mailman/listinfo/freeipa-devel
Contribute to FreeIPA: http://www.freeipa.org/page/Contribute/Code

[Freeipa-devel] Karma Requests for jss-4.4.0-1

2017-03-14 Thread Matthew Harmsen 

*The following updated candidate builds of jss 4.4.0 were generated:*

 * *Fedora 25:*
 o *jss-4.4.0-1.fc25
   
   *
 * *Fedora 26:*
 o *jss-4.4.0-1.fc26
   
   *
 * *Fedora 27:*
 o *jss-4.4.0-1.fc27
   *

*These builds address the following Bug:*

 * *Bugzilla Bug #1431937 - Rebase jss to 4.4.0 in Fedora 25+
   *

*Please provide Karma for the following builds:*

 * *Fedora 25:*
 o *https://bodhi.fedoraproject.org/updates/FEDORA-2017-155b9d81d2
   jss-4.4.0-1.fc25
   
   *
 * *Fedora 26:*
 o *https://bodhi.fedoraproject.org/updates/FEDORA-2017-70cf2c25eb
   jss-4.4.0-1.fc26
   
   *

-- 
Manage your subscription for the Freeipa-devel mailing list:
https://www.redhat.com/mailman/listinfo/freeipa-devel
Contribute to FreeIPA: http://www.freeipa.org/page/Contribute/Code

Re: [Freeipa-devel] Karma Requests for ldapjdk-4.19-1 and tomcatjss-7.2.0-1

2017-03-13 Thread Matthew Harmsen 

On 03/12/2017 11:39 PM, Matthew Harmsen wrote:


*The following updated candidate builds of ldapjdk 4.19 and tomcatjss 
7.2.0 were generated:*


  * *Fedora 25:*
  o *ldapjdk-4.19-1.fc25
<https://koji.fedoraproject.org/koji/buildinfo?buildID=867318>*
  o *tomcatjss-7.2.0-1.fc25
<https://koji.fedoraproject.org/koji/buildinfo?buildID=868071>
*
  * *Fedora 26:*
  o *ldapjdk-4.19-1.fc26
<https://koji.fedoraproject.org/koji/buildinfo?buildID=867320>*
  o *tomcatjss-7.2.0-1.fc26
<https://koji.fedoraproject.org/koji/buildinfo?buildID=868072>
*
  * *Fedora 27:*
  o *ldapjdk-4.19-1.fc27
<https://koji.fedoraproject.org/koji/buildinfo?buildID=867321>*
  o *tomcatjss-7.2.0-1.fc27
<https://koji.fedoraproject.org/koji/buildinfo?buildID=868073>
*

*These builds address the following Bugs and Pagure Issues:*

  * *Bugzilla Bug #1382856 - ldapjdk fails to parse ldap url with no
host:port <https://bugzilla.redhat.com/show_bug.cgi?id=1382856>*
  * *Bugzilla Bug #1394372 - Rebase ldapjdk to 4.19
<https://bugzilla.redhat.com/show_bug.cgi?id=1394372>*
  * *tomcatjss Pagure Issue #6 - Rebase tomcatjss to 7.2.0 in Fedora
25+ <https://pagure.io/tomcatjss/issue/6>*

*Please provide Karma for the following builds:*

  * *Fedora 25:*
  o *https://bodhi.fedoraproject.org/updates/FEDORA-2017-6559356a15
 ldapjdk-4.19-1.fc25*
  o *https://bodhi.fedoraproject.org/updates/FEDORA-2017-39eb143dc7
tomcatjss-7.2.0-1.fc25
<https://bodhi.fedoraproject.org/updates/FEDORA-2017-39eb143dc7>
*
  * *Fedora 26:*
  o *https://bodhi.fedoraproject.org/updates/FEDORA-2017-d10f519981
ldapjdk-4.19-1.fc26
<https://bodhi.fedoraproject.org/updates/FEDORA-2017-d10f519981>*
  o *https://bodhi.fedoraproject.org/updates/FEDORA-2017-a6d36fe632
tomcatjss-7.2.0-1.fc26
<https://bodhi.fedoraproject.org/updates/FEDORA-2017-a6d36fe632>
*

A problem was discovered in which the tomcatjss.spec file was embedded 
inside the tomcatjss tarball; this was fixed, the tarball was
republished, all packages were rebuilt, and new builds were submitted to 
bodhi:


*The following updated candidate builds of tomcatjss 7.2.0 were 
regenerated:*


 * *Fedora 25:*
 o *tomcatjss-7.2.0-2.fc25
   <https://koji.fedoraproject.org/koji/buildinfo?buildID=868412>
   *
 * *Fedora 26:*
 o *tomcatjss-7.2.0-2.fc26
   <https://koji.fedoraproject.org/koji/buildinfo?buildID=868417>
   *
 * *Fedora 27:*
 o *tomcatjss-7.2.0-2.fc27
   <https://koji.fedoraproject.org/koji/buildinfo?buildID=868424>
   *

*Please provide Karma for the following builds:*

 * *Fedora 25:*
 o *https://bodhi.fedoraproject.org/updates/FEDORA-2017-2fc4861133
 tomcatjss-7.2.0-2.fc25
   *
 * *Fedora 26:*
 o *https://bodhi.fedoraproject.org/updates/FEDORA-2017-9cd38eab18
   tomcatjss-7.2.0-2.fc26
   <https://bodhi.fedoraproject.org/updates/FEDORA-2017-9cd38eab18>
   *

-- 
Manage your subscription for the Freeipa-devel mailing list:
https://www.redhat.com/mailman/listinfo/freeipa-devel
Contribute to FreeIPA: http://www.freeipa.org/page/Contribute/Code

[Freeipa-devel] Karma Requests for ldapjdk-4.19-1 and tomcatjss-7.2.0-1

2017-03-12 Thread Matthew Harmsen 
*The following updated candidate builds of ldapjdk 4.19 and tomcatjss 
7.2.0 were generated:*


 * *Fedora 25:*
 o *ldapjdk-4.19-1.fc25
   *
 o *tomcatjss-7.2.0-1.fc25
   
   *
 * *Fedora 26:*
 o *ldapjdk-4.19-1.fc26
   *
 o *tomcatjss-7.2.0-1.fc26
   
   *
 * *Fedora 27:*
 o *ldapjdk-4.19-1.fc27
   *
 o *tomcatjss-7.2.0-1.fc27
   
   *

*These builds address the following Bugs and Pagure Issues:*

 * *Bugzilla Bug #1382856 - ldapjdk fails to parse ldap url with no
   host:port *
 * *Bugzilla Bug #1394372 - Rebase ldapjdk to 4.19
   *
 * *tomcatjss Pagure Issue #6 - Rebase tomcatjss to 7.2.0 in Fedora 25+
   *

*Please provide Karma for the following builds:*

 * *Fedora 25:*
 o *https://bodhi.fedoraproject.org/updates/FEDORA-2017-6559356a15
 ldapjdk-4.19-1.fc25*
 o *https://bodhi.fedoraproject.org/updates/FEDORA-2017-39eb143dc7
   tomcatjss-7.2.0-1.fc25
   
   *
 * *Fedora 26:*
 o *https://bodhi.fedoraproject.org/updates/FEDORA-2017-d10f519981
   ldapjdk-4.19-1.fc26
   *
 o *https://bodhi.fedoraproject.org/updates/FEDORA-2017-a6d36fe632
   tomcatjss-7.2.0-1.fc26
   
   *

-- 
Manage your subscription for the Freeipa-devel mailing list:
https://www.redhat.com/mailman/listinfo/freeipa-devel
Contribute to FreeIPA: http://www.freeipa.org/page/Contribute/Code

[Freeipa-devel] Karma Requests for pki-core-10.3.5-13

2017-03-06 Thread Matthew Harmsen 

*The following updated candidate builds of pki-core 10.3.5 were generated:*

 * *Fedora 24:*
 o *pki-core-10.3.5-13.fc24
   
   *
 * *Fedora 25:*
 o *pki-core-10.3.5-13.fc25
   
   *
 * ***Fedora 26:*
 o *pki-core-10.3.5-13.fc26
   
   *
 * *Fedora 27 (rawhide):*
 o *pki-core-10.3.5-13.fc27
   *

*These builds address the following PKI TRAC tickets:*

 * *dogtagpki Pagure Issue #1710 - Add profile component that copies CN
   to SAN *

*Please provide Karma for the following builds:*

 * *Fedora 24:*
 o *https://bodhi.fedoraproject.org/updates/FEDORA-2017-9ded483357
   pki-core-10.3.5-13.fc24*
 * *Fedora 25:*
 o *https://bodhi.fedoraproject.org/updates/FEDORA-2017-4f3325addf
   pki-core-10.3.5-13.fc25
   *
 * *Fedora 26:*
 o *https://bodhi.fedoraproject.org/updates/FEDORA-2017-e0afc56a2c
   pki-core-10.3.5-13.fc26
   
   *

-- 
Manage your subscription for the Freeipa-devel mailing list:
https://www.redhat.com/mailman/listinfo/freeipa-devel
Contribute to FreeIPA: http://www.freeipa.org/page/Contribute/Code

[Freeipa-devel] Karma Requests for pki-core-10.3.5-11

2017-01-31 Thread Matthew Harmsen 

*The following updated candidate builds of pki-core 10.3.5 were generated:*

 * *Fedora 24*
 o *pki-core-10.3.5-11.fc24
   
   *
 * *Fedora 25*
 o *pki-core-10.3.5-11.fc25
   
   *
 * *Fedora 26*
 o *pki-core-10.3.5-11.fc26
   *

*These builds address the following PKI TRAC tickets:*

 * *PKI TRAC Ticket #1741 - ECDSA Certificates Generated by Certificate
   System fail NIST validation test with parameter field.
   *
 * *PKI TRAC Ticket #2450 - Unable to search certificate requests using
   the latest request ID *
 * *PKI TRAC Ticket #2534 - Automatic recovery of encryption cert - CA
   and TPS tokendb shows different certificate status
   *
 * *PKI TRAC Ticket #2564 - pki-tomcat for 10+ minutes before
   generating cert *
 * *PKI TRAC Ticket #2570 - Problem with default AJP hostname in IPv6
   environment. *
 * *PKI TRAC Ticket #2573 - CA Certificate Issuance Date displayed on
   CA website incorrect *
 * *PKI TRAC Ticket #2579 - NumberFormatException in
   LDAPProfileSubsystem *

*Please provide Karma for the following builds:*

 * *Fedora 24*
 o *https://bodhi.fedoraproject.org/updates/FEDORA-2017-a2898f25b1
   pki-core-10.3.5-11.fc24
   
   *
 * *Fedora 25*
 o *https://bodhi.fedoraproject.org/updates/FEDORA-2017-fe062eaff7
   pki-core-10.3.5-11.fc25
   *


-- 
Manage your subscription for the Freeipa-devel mailing list:
https://www.redhat.com/mailman/listinfo/freeipa-devel
Contribute to FreeIPA: http://www.freeipa.org/page/Contribute/Code

[Freeipa-devel] Karma Requests for pki-core-10.3.5-9

2016-12-15 Thread Matthew Harmsen 

*The following updated candidate builds of pki-core 10.3.5 were generated:*

 * *Fedora 24*
 o *pki-core-10.3.5-9.fc24
   
   *
 * *Fedora 25*
 o *pki-core-10.3.5-9.fc25
   
   *
 * *Fedora 26*
 o *pki-core-10.3.5-9.fc26
   *

*These builds address the following PKI tickets:*

 * *PKI TRAC Ticket #1517 - user-cert-add --serial CLI request to
   secure port with remote CA shows authentication failure
   *
 * *PKI TRAC Ticket #1897 - [MAN] Man page for logging configuration.
   *
 * *PKI TRAC Ticket #1920 - [MAN] Man page for PKCS #12 utilities
   *
 * *PKI TRAC Ticket #2226 - KRA installation: NullPointerException in
   ProxyRealm.findSecurityConstraints
   *
 * *PKI TRAC Ticket #2289 - [MAN] pki ca-cert-request-submit fails
   presumably because of missing authentication even if it should not
   require any *
 * *PKI TRAC Ticket #2523 - Changes to target.agent.approve.list
   parameter is not reflected in the TPS Web UI
   *
 * *PKI TRAC Ticket #2534 - Automatic recovery of encryption cert - CA
   and TPS tokendb shows different certificate status
   *
 * *PKI TRAC Ticket #2543 - Unable to install subordinate CA with HSM
   in FIPS mode *
 * *PKI TRAC Ticket #2544 - TPS throws "err=6" when attempting to
   format and enroll G Cards *
 * *PKI TRAC Ticket #2552 - pkispawn does not change default ecc key
   size from nistp256 when nistp384 is specified in spawn config
   *

*Please provide Karma for the following builds:*

 * *Fedora 24*
 o *https://bodhi.fedoraproject.org/updates/FEDORA-2016-346c2e1366
 pki-core-10.3.5-9.fc24
   *
 * *Fedora 25*
 o *https://bodhi.fedoraproject.org/updates/FEDORA-2016-9100653751
   pki-core-10.3.5-9.fc25
   
   *

-- 
Manage your subscription for the Freeipa-devel mailing list:
https://www.redhat.com/mailman/listinfo/freeipa-devel
Contribute to FreeIPA: http://www.freeipa.org/page/Contribute/Code

[Freeipa-devel] Karma Requests for pki-core-10.3.5-8

2016-11-05 Thread Matthew Harmsen 

*The following updated candidate builds of pki-core 10.3.5 were generated:*

 * *Fedora 24*
 o *pki-core-10.3.5-8.fc24
   
   *
 * *Fedora 25*
 o *pki-core-10.3.5-8.fc25
   
   *
 * *Fedora 26*
 o *pki-core-10.3.5-8.fc26
   *

*Additionally, the CentOS 7 COPR EPEL Builds of Dogtag 10.3.3 were also 
updated:*


 *

   
https://copr.fedorainfracloud.org/coprs/g/pki/epel-7.3/repo/epel-7/group_pki-epel-7.3-epel-7.repo

   [group_pki-epel-7.3]
   name=Copr repo for epel-7.3 owned by @pki
   
baseurl=https://copr-be.cloud.fedoraproject.org/results/@pki/epel-7.3/epel-7-$basearch/
   type=rpm-md
   skip_if_unavailable=True
   gpgcheck=1
   
gpgkey=https://copr-be.cloud.fedoraproject.org/results/@pki/epel-7.3/pubkey.gpg
   repo_gpgcheck=0
   enabled=1
   enabled_metadata=1

*These builds address the following PKI tickets:*

 * *PKI TRAC Ticket #850 - JSS certificate validation function does not
   pass up exact errors from NSS *
 * *PKI TRAC Ticket #1247 - Better error message when try to renew a
   certificate that expires outside renewal grace period
   *
 * *PKI TRAC Ticket #1536 - CA EE: Submit caUserCert request without
   uid does not show proper error message
   *
 * *PKI TRAC Ticket #2460 - Typo in comment line of
   UserPwdDirAuthentication.java
   *
 * *PKI TRAC ticket #2486 - Automatic recovery of encryption cert is
   not working when a token is physically damaged and a temporary token
   is issued *
 * *PKI TRAC Ticket #2498 - Token format with external reg fails when
   op.format.externalRegAddToToken.revokeCert=true
   *
 * *PKI TRAC Ticket #2500 - Problems with FIPS mode
   *
 * *PKI TRAC Ticket #2510 - PIN_RESET policy is not giving expected
   results when set on a token *
 * *PKI TRAC Ticket #2513 - TPS token enrollment fails to
   setupSecureChannel when TPS and TKS security db is on fips mode.
   *

*Please provide Karma for the following builds:*

 * *Fedora 24*
 o *https://bodhi.fedoraproject.org/updates/FEDORA-2016-393715962d
   pki-core-10.3.5-8.fc24
   
   *
 * *Fedora 25*
 o *https://bodhi.fedoraproject.org/updates/FEDORA-2016-d0eb45e120
   pki-core-10.3.5-8.fc25
   
   *

-- 
Manage your subscription for the Freeipa-devel mailing list:
https://www.redhat.com/mailman/listinfo/freeipa-devel
Contribute to FreeIPA: http://www.freeipa.org/page/Contribute/Code

Re: [Freeipa-devel] Karma Requests for pki-core-10.3.5-7 and pki-console-10.3.5-2

2016-10-19 Thread Matthew Harmsen 

On 10/11/2016 01:12 PM, Matthew Harmsen wrote:
*The following updated candidate builds of pki-core 10.3.5 and 
pki-console 10.3.5 were generated:*


  * *Fedora 24*
  o *pki-core-10.3.5-7.fc24
<http://koji.fedoraproject.org/koji/buildinfo?buildID=808527>*
  o *pki-console-10.3.5-2.fc24
<http://koji.fedoraproject.org/koji/buildinfo?buildID=808789>
*
  * *Fedora 25*
  o *pki-core-10.3.5-7.fc25
<http://koji.fedoraproject.org/koji/buildinfo?buildID=808568>*
  o *pki-console-10.3.5-2.fc25
<http://koji.fedoraproject.org/koji/buildinfo?buildID=808800>
*
  * *Fedora 26*
  o *pki-core-10.3.5-7.fc26 (still working on build issues
encountered on rawhide)*


 * *pki-core-10.3.5-7.fc26
   <http://koji.fedoraproject.org/koji/buildinfo?buildID=808686>**
   *


  o *pki-console-10.3.5-2.fc26
<http://koji.fedoraproject.org/koji/buildinfo?buildID=808812>*

*Additionally, the CentOS 7 COPR EPEL Builds of Dogtag 10.3.3 were 
also updated:*


  * 
*https://copr.fedorainfracloud.org/coprs/g/pki/epel-7.3/repo/epel-7/group_pki-epel-7.3-epel-7.repo*

<https://copr.fedorainfracloud.org/coprs/g/pki/10.3.3/repo/epel-7/group_pki-10.3.3-epel-7.repo>

[group_pki-epel-7.3]
name=Copr repo for epel-7.3 owned by @pki

baseurl=https://copr-be.cloud.fedoraproject.org/results/@pki/epel-7.3/epel-7-$basearch/
type=rpm-md
skip_if_unavailable=True
gpgcheck=1

gpgkey=https://copr-be.cloud.fedoraproject.org/results/@pki/epel-7.3/pubkey.gpg
repo_gpgcheck=0
enabled=1
enabled_metadata=1

*These builds address the following PKI tickets:*

  * PKI TRAC Ticket #1527 - TPS Enrollment always goes to "ca1" (cfu)
<https://fedorahosted.org/pki/ticket/1527>
  * PKI TRAC Ticket #1664 - [BUG] Add ability to disallow TPS to
enroll a single user on multiple tokens. (jmagne)
<https://fedorahosted.org/pki/ticket/1664>
  * PKI TRAC Ticket #2463 - Troubleshooting improvements (edewata)
<https://fedorahosted.org/pki/ticket/2463>
  o potentially more to come in future releases
  * PKI TRAC Ticket #2466 - two-step externally-signed CA installation
fails due to missing AuthorityID (ftweedal)
<https://fedorahosted.org/pki/ticket/2466>
  * PKI TRAC Ticket #2475 - Multiple host authority entries created
(ftweedal) <https://fedorahosted.org/pki/ticket/2475>
  * PKI TRAC Ticket #2476 - Dogtag Miscellaneous Minor Changes
(edewata) <https://fedorahosted.org/pki/ticket/2476>
  o potentially more to come in future releases
  * PKI TRAC Ticket #2478 - pkispawn fails as it is not able to find
openssl as a dependency package (mharmsen)
<https://fedorahosted.org/pki/ticket/2478>
  * PKI TRAC Ticket #2483 - Unable to read an encrypted email using
renewed tokens (jmagne) <https://fedorahosted.org/pki/ticket/2483>
  * PKI TRAC Ticket #2496 - Cert/Key recovery is successful when the
cert serial number and key id on the ldap user mismatches (cfu)
<https://fedorahosted.org/pki/ticket/2496>
  * PKI TRAC Ticket #2497 - KRA installation failed against
externally-signed CA with partial certificate chain (edewata)
<https://fedorahosted.org/pki/ticket/2497>
  * PKI TRAC Ticket #2505 - Fix packaging duplicates of classes in
multiple jar files (edewata)
<https://fedorahosted.org/pki/ticket/2505>

*Please provide Karma for the following builds:*

  * *Fedora 24*
  o *https://bodhi.fedoraproject.org/updates/FEDORA-2016-76fae7b25f
pki-core-10.3.5-7.fc24
<https://bodhi.fedoraproject.org/updates/FEDORA-2016-76fae7b25f>*
  o *https://bodhi.fedoraproject.org/updates/FEDORA-2016-a9e6c42783
pki-console-10.3.5-2.fc24
<https://bodhi.fedoraproject.org/updates/FEDORA-2016-a9e6c42783>*
  * *Fedora 25*
  o *https://bodhi.fedoraproject.org/updates/FEDORA-2016-3496056579
   pki-core-10.3.5-7.fc25*
  o *https://bodhi.fedoraproject.org/updates/FEDORA-2016-70b3b8b697
pki-console-10.3.5-2.fc25
<https://bodhi.fedoraproject.org/updates/FEDORA-2016-70b3b8b697>
*



-- 
Manage your subscription for the Freeipa-devel mailing list:
https://www.redhat.com/mailman/listinfo/freeipa-devel
Contribute to FreeIPA: http://www.freeipa.org/page/Contribute/Code

[Freeipa-devel] Karma Requests for pki-core-10.3.5-7 and pki-console-10.3.5-2

2016-10-11 Thread Matthew Harmsen 
*The following updated candidate builds of pki-core 10.3.5 and 
pki-console 10.3.5 were generated:*


 * *Fedora 24*
 o *pki-core-10.3.5-7.fc24
   *
 o *pki-console-10.3.5-2.fc24
   
   *
 * *Fedora 25*
 o *pki-core-10.3.5-7.fc25
   *
 o *pki-console-10.3.5-2.fc25
   
   *
 * *Fedora 26*
 o *pki-core-10.3.5-7.fc26 (still working on build issues
   encountered on rawhide)*
 o *pki-console-10.3.5-2.fc26
   *

*Additionally, the CentOS 7 COPR EPEL Builds of Dogtag 10.3.3 were also 
updated:*


 * 
*https://copr.fedorainfracloud.org/coprs/g/pki/epel-7.3/repo/epel-7/group_pki-epel-7.3-epel-7.repo*
   



   [group_pki-epel-7.3]
   name=Copr repo for epel-7.3 owned by @pki
   
baseurl=https://copr-be.cloud.fedoraproject.org/results/@pki/epel-7.3/epel-7-$basearch/
   type=rpm-md
   skip_if_unavailable=True
   gpgcheck=1
   
gpgkey=https://copr-be.cloud.fedoraproject.org/results/@pki/epel-7.3/pubkey.gpg
   repo_gpgcheck=0
   enabled=1
   enabled_metadata=1

*These builds address the following PKI tickets:*

 * PKI TRAC Ticket #1527 - TPS Enrollment always goes to "ca1" (cfu)
   
 * PKI TRAC Ticket #1664 - [BUG] Add ability to disallow TPS to enroll
   a single user on multiple tokens. (jmagne)
   
 * PKI TRAC Ticket #2463 - Troubleshooting improvements (edewata)
   
 o potentially more to come in future releases
 * PKI TRAC Ticket #2466 - two-step externally-signed CA installation
   fails due to missing AuthorityID (ftweedal)
   
 * PKI TRAC Ticket #2475 - Multiple host authority entries created
   (ftweedal) 
 * PKI TRAC Ticket #2476 - Dogtag Miscellaneous Minor Changes (edewata)
   
 o potentially more to come in future releases
 * PKI TRAC Ticket #2478 - pkispawn fails as it is not able to find
   openssl as a dependency package (mharmsen)
   
 * PKI TRAC Ticket #2483 - Unable to read an encrypted email using
   renewed tokens (jmagne) 
 * PKI TRAC Ticket #2496 - Cert/Key recovery is successful when the
   cert serial number and key id on the ldap user mismatches (cfu)
   
 * PKI TRAC Ticket #2497 - KRA installation failed against
   externally-signed CA with partial certificate chain (edewata)
   
 * PKI TRAC Ticket #2505 - Fix packaging duplicates of classes in
   multiple jar files (edewata) 

*Please provide Karma for the following builds:*

 * *Fedora 24*
 o *https://bodhi.fedoraproject.org/updates/FEDORA-2016-76fae7b25f
   pki-core-10.3.5-7.fc24
   *
 o *https://bodhi.fedoraproject.org/updates/FEDORA-2016-a9e6c42783
   pki-console-10.3.5-2.fc24
   *
 * *Fedora 25*
 o *https://bodhi.fedoraproject.org/updates/FEDORA-2016-3496056579
   pki-core-10.3.5-7.fc25*
 o *https://bodhi.fedoraproject.org/updates/FEDORA-2016-70b3b8b697
   pki-console-10.3.5-2.fc25
   
   *

-- 
Manage your subscription for the Freeipa-devel mailing list:
https://www.redhat.com/mailman/listinfo/freeipa-devel
Contribute to FreeIPA: http://www.freeipa.org/page/Contribute/Code

[Freeipa-devel] Karma Requests for pki-core-10.3.5-6

2016-09-12 Thread Matthew Harmsen 
*The following updated candidate builds of pki-core 10.3.5 on Fedora 
24, 25, and 26 (rawhide) consist of the following:

*

  * *Fedora 24*
  o *pki-core-10.3.5-5.fc24

*


 * *pki-core-10.3.5-6.fc24
   *


  o **
  * *Fedora 25*
  o *pki-core-10.3.5-5.fc25
*


 o *pki-core-10.3.5-6.fc25
   *


  o **
  * *Fedora 26*
  o *pki-core-10.3.5-5.fc26
*


 o *pki-core-10.3.5-6.fc26
   **
   *

*Additionally, the CentOS 7 COPR EPEL Builds of Dogtag 10.3.3 were 
also updated:*


  * 
*https://copr.fedorainfracloud.org/coprs/g/pki/10.3.3/repo/epel-7/group_pki-10.3.3-epel-7.repo*



[group_pki-10.3.3]
name=Copr repo for 10.3.3 owned by @pki

baseurl=https://copr-be.cloud.fedoraproject.org/results/@pki/10.3.3/epel-7-$basearch/
skip_if_unavailable=True
gpgcheck=1

gpgkey=https://copr-be.cloud.fedoraproject.org/results/@pki/10.3.3/pubkey.gpg
enabled=1
enabled_metadata=1

*These builds address the following PKI tickets:
*

  * PKI TRAC Ticket #1638 - Lightweight CAs: revoke certificate on CA
deletion 
  * PKI TRAC Ticket #2346 - Dogtag 10.3.6: Miscellaneous Enhancements

  * PKI TRAC Ticket #2443 - Prevent deletion of host CA's keys if LWCA
entry deleted 
  * PKI TRAC Ticket #2444 - Authority entry without entryUSN is
skipped even if USN plugin enabled

  * PKI TRAC Ticket #2446 - pkispawn: make subject_dn defaults unique
per instance name (for shared HSM)

  * PKI TRAC Ticket #2447 - CertRequestInfo has incorrect URLs

  * PKI TRAC Ticket #2449 - Unable to create system certificates in
different tokens 


 * *REVOKES PATCH FOR **PKI TRAC Ticket #2449 - Unable to create system
   certificates in different tokens
   *


*Please provide Karma for the following builds:
*

  * *Fedora 24*
  o 
*https://bodhi.fedoraproject.org/updates/FEDORA-2016-994f943797pki-core-10.3.5-5.fc24
*


 o 
*https://bodhi.fedoraproject.org/updates/FEDORA-2016-7b06393ae4**pki-core-10.3.5-6.fc24*


  * *Fedora 25*
  o 
*https://bodhi.fedoraproject.org/updates/FEDORA-2016-d363d36e22pki-core-10.3.5-5.fc25
*


 o 
*https://bodhi.fedoraproject.org/updates/FEDORA-2016-734ba29899**pki-core-10.3.5-6.fc25**
   *

-- 
Manage your subscription for the Freeipa-devel mailing list:
https://www.redhat.com/mailman/listinfo/freeipa-devel
Contribute to FreeIPA: http://www.freeipa.org/page/Contribute/Code

[Freeipa-devel] Karma Requests for pki-core-10.3.5-5

2016-09-07 Thread Matthew Harmsen 
*The following updated candidate builds of pki-core 10.3.5 on Fedora 24, 
25, and 26 (rawhide) consist of the following:

*

 * *Fedora 24*
 o *pki-core-10.3.5-5.fc24
   
   *
 * *Fedora 25*
 o *pki-core-10.3.5-5.fc25
   
   *
 * *Fedora 26*
 o *pki-core-10.3.5-5.fc26
   *

*Additionally, the CentOS 7 COPR EPEL Builds of Dogtag 10.3.3 were also 
updated:*


 * 
*https://copr.fedorainfracloud.org/coprs/g/pki/10.3.3/repo/epel-7/group_pki-10.3.3-epel-7.repo*
   



   [group_pki-10.3.3]
   name=Copr repo for 10.3.3 owned by @pki
   
baseurl=https://copr-be.cloud.fedoraproject.org/results/@pki/10.3.3/epel-7-$basearch/
   skip_if_unavailable=True
   gpgcheck=1
   gpgkey=https://copr-be.cloud.fedoraproject.org/results/@pki/10.3.3/pubkey.gpg
   enabled=1
   enabled_metadata=1

*These builds address the following PKI tickets:
*

 * PKI TRAC Ticket #1638 - Lightweight CAs: revoke certificate on CA
   deletion 
 * PKI TRAC Ticket #2346 - Dogtag 10.3.6: Miscellaneous Enhancements
   
 * PKI TRAC Ticket #2443 - Prevent deletion of host CA's keys if LWCA
   entry deleted 
 * PKI TRAC Ticket #2444 - Authority entry without entryUSN is skipped
   even if USN plugin enabled 
 * PKI TRAC Ticket #2446 - pkispawn: make subject_dn defaults unique
   per instance name (for shared HSM)
   
 * PKI TRAC Ticket #2447 - CertRequestInfo has incorrect URLs
   
 * PKI TRAC Ticket #2449 - Unable to create system certificates in
   different tokens 

*Please provide Karma for the following builds:
*

 * *Fedora 24*
 o *https://bodhi.fedoraproject.org/updates/FEDORA-2016-994f943797
   pki-core-10.3.5-5.fc24*
 * *Fedora 25*
 o *https://bodhi.fedoraproject.org/updates/FEDORA-2016-d363d36e22
   pki-core-10.3.5-5.fc25
   *

-- 
Manage your subscription for the Freeipa-devel mailing list:
https://www.redhat.com/mailman/listinfo/freeipa-devel
Contribute to FreeIPA: http://www.freeipa.org/page/Contribute/Code

[Freeipa-devel] Karma Requests for pki-core-10.3.5-4

2016-08-30 Thread Matthew Harmsen 
*The following updated candidate builds of pki-core 10.3.5 on Fedora 24, 
25, and 26 (rawhide) consist of the following:

*

 * *Fedora 24*
 o *pki-core-10.3.5-4.fc24
   
   *
 * *Fedora 25*
 o *pki-core-10.3.5-4.fc25
   
   *
 * *Fedora 26*
 o *pki-core-10.3.5-4.fc26
   
   *

*Additionally, the CentOS 7 COPR EPEL Builds of Dogtag 10.3.3 were also 
updated:

*

 * 
*https://copr.fedorainfracloud.org/coprs/g/pki/10.3.3/repo/epel-7/group_pki-10.3.3-epel-7.repo
   *

   [group_pki-10.3.3]
   name=Copr repo for 10.3.3 owned by @pki
   
baseurl=https://copr-be.cloud.fedoraproject.org/results/@pki/10.3.3/epel-7-$basearch/
   skip_if_unavailable=True
   gpgcheck=1
   gpgkey=https://copr-be.cloud.fedoraproject.org/results/@pki/10.3.3/pubkey.gpg
   enabled=1
   enabled_metadata=1

*These builds address the following PKI tickets:
*

 * PKI TRAC Ticket #1578 - Authentication Instance Id PinDirEnrollment
   with authType value as SslclientAuth is not working
   
 * PKI TRAC Ticket #2414 - pki pkcs12-cert-del shows a successfully
   deleted message when a wrong nickname is provided
   
 * PKI TRAC Ticket #2423 - pki_ca_signing_token when not specified does
   not fallback to pki_token_name value
   
 * PKI TRAC Ticket #2436 - Dogtag 10.3.6: Miscellaneous Enhancements
   
 o added check for pki-server-nuxwdog parameter
 * PKI TRAC Ticket #2439 - Outdated deployment descriptors in upgraded
   server 

*Please provide Karma for the following builds:
*

 * *Fedora 24*
 o *https://bodhi.fedoraproject.org/updates/FEDORA-2016-36fa3fd8c3
   pki-core-10.3.5-4.fc24
   *
 * *Fedora 25*
 o *https://bodhi.fedoraproject.org/updates/FEDORA-2016-abb1e5d2a6
   pki-core-10.3.5-4.fc25
   *

-- 
Manage your subscription for the Freeipa-devel mailing list:
https://www.redhat.com/mailman/listinfo/freeipa-devel
Contribute to FreeIPA: http://www.freeipa.org/page/Contribute/Code

[Freeipa-devel] Karma Requests for pki-core-10.3.5-3

2016-08-24 Thread Matthew Harmsen 
*The following updated candidate builds of pki-core 10.3.5 on Fedora 24, 
25, and 26 (rawhide) consist of the following:*


 * *Fedora 24*
 o *pki-core-10.3.5-3.fc24
   
   *
 * *Fedora 25*
 o *pki-core-10.3.5-3.fc25
   
   *
 * *Fedora 26*
 o *pki-core-10.3.5-3.fc26
   
   *

*Additionally, the CentOS 7 COPR EPEL Builds of Dogtag 10.3.3 were also 
updated:

*

 * 
https://copr.fedorainfracloud.org/coprs/g/pki/10.3.3/repo/epel-7/group_pki-10.3.3-epel-7.repo

   [group_pki-10.3.3]
   name=Copr repo for 10.3.3 owned by @pki
   
baseurl=https://copr-be.cloud.fedoraproject.org/results/@pki/10.3.3/epel-7-$basearch/
   skip_if_unavailable=True
   gpgcheck=1
   gpgkey=https://copr-be.cloud.fedoraproject.org/results/@pki/10.3.3/pubkey.gpg
   enabled=1
   enabled_metadata=1

*These builds address the following PKI tickets:
*

 * PKI TRAC Ticket #690 - pki-tools man pages --- CMCEnroll
   
 * PKI TRAC Ticket #833 - pki user-mod fullName="" gives an error
   message "PKIException: LDAP error (21): error result"
   
 * PKI TRAC Ticket #2429 - [RFE] TPS UI: profile property needs to be
   added one by one can we add in bulk
   
 * PKI TRAC Ticket #2431 - Errors noticed during ipa server upgrade.
   
 * PKI TRAC Ticket #2432 - Kra-selftest behavior is not as expected
   
 * PKI TRAC Ticket #2436 - Dogtag 10.3.6: Miscellaneous Enhancements
   
 o include JSS cert validation error message in selftest log
 o add debug messages to ConfigurationUtils.handleCerts()
 o apply RFC 7468 
   Headers/Trailers to PKI tools
 * PKI TRAC Ticket #2437 - TPS UI: while adding certs for users from
   TPSUI pem format with/without header works while pkcs7 with header
   is not allowed 
 * PKI TRAC Ticket #2440 - Optional CA signing CSR for migration
   

*Please provide Karma for the following builds:
*

 * *Fedora 24*
 o *https://bodhi.fedoraproject.org/updates/FEDORA-2016-4d226a5f7e
   pki-core-10.3.5-1.fc24 + resteasy-3.0.17-3.fc24
   *
 + *IMPORTANT:  This combination build MUST be pushed first
   since pki-core-10.3.5-3.fc24 DEPENDS upon resteasy-3.0.17!!!
   *
 o *https://bodhi.fedoraproject.org/updates/pki-core-10.3.5-3.fc24
   pki-core-10.3.5-3.fc24
   
   *
 * *Fedora 25*
 o *https://bodhi.fedoraproject.org/updates/FEDORA-2016-456eb9f4b7
   pki-core-10.3.5-3.fc25
   *


*
*

-- 
Manage your subscription for the Freeipa-devel mailing list:
https://www.redhat.com/mailman/listinfo/freeipa-devel
Contribute to FreeIPA: http://www.freeipa.org/page/Contribute/Code

[Freeipa-devel] Updated External EPEL CentOS 7 COPR builds are now available . . .

2016-08-12 Thread Matthew Harmsen 
An updated external EPEL CentOS 7 COPR repo is now available which 
contains the latest Dogtag 10.3.3-5, tomcatjss, and jss builds:


 * 
https://copr.fedorainfracloud.org/coprs/g/pki/10.3.3/repo/epel-7/group_pki-10.3.3-epel-7.repo

   [group_pki-10.3.3]
   name=Copr repo for 10.3.3 owned by @pki
   
baseurl=https://copr-be.cloud.fedoraproject.org/results/@pki/10.3.3/epel-7-$basearch/
   skip_if_unavailable=True
   gpgcheck=1
   gpgkey=https://copr-be.cloud.fedoraproject.org/results/@pki/10.3.3/pubkey.gpg
   enabled=1
   enabled_metadata=1

-- Matt

-- 
Manage your subscription for the Freeipa-devel mailing list:
https://www.redhat.com/mailman/listinfo/freeipa-devel
Contribute to FreeIPA: http://www.freeipa.org/page/Contribute/Code

Re: [Freeipa-devel] Karma Requests for Dogtag 10.3.5-1 and ldapjdk

2016-08-10 Thread Matthew Harmsen 

On 08/10/2016 10:59 AM, Ben Lipton wrote:

On 08/10/2016 12:21 PM, Matthew Harmsen wrote:


*The following candidate builds of Dogtag 10.3.5 and ldapjdk on 
Fedora 24, 25, and 26 (rawhide) consist of the following:*


  * *Fedora 24:*
  o *dogtag-pki-10.3.5-1.fc24
<http://koji.fedoraproject.org/koji/buildinfo?buildID=789787>*
  o *dogtag-pki-theme-10.3.5-1.fc24
<http://koji.fedoraproject.org/koji/buildinfo?buildID=789738>*
  o *pki-core-10.3.5-1.fc24
<http://koji.fedoraproject.org/koji/buildinfo?buildID=789739>*
  o *pki-console-10.3.5-1.fc24
<http://koji.fedoraproject.org/koji/buildinfo?buildID=789777>*
  o *ldapjdk-4.18-19.fc24
<http://koji.fedoraproject.org/koji/buildinfo?buildID=790485>*
  * *Fedora 25:*
  o *dogtag-pki-10.3.5-1.fc25
<http://koji.fedoraproject.org/koji/buildinfo?buildID=790490>*
  o *dogtag-pki-theme-10.3.5-1.fc25
<http://koji.fedoraproject.org/koji/buildinfo?buildID=790486>*
  o *pki-core-10.3.5-1.fc25
<http://koji.fedoraproject.org/koji/buildinfo?buildID=790492>*
  o *pki-console-10.3.5-1.fc25
<http://koji.fedoraproject.org/koji/buildinfo?buildID=790497>*
  o *ldapjdk-4.18-19.fc25
<http://koji.fedoraproject.org/koji/buildinfo?buildID=790487>*
  * *Fedora 26 (rawhide):*
  o *dogtag-pki-10.3.5-1.fc26
<http://koji.fedoraproject.org/koji/buildinfo?buildID=790491>*
  o *dogtag-pki-theme-10.3.5-1.fc26
<http://koji.fedoraproject.org/koji/buildinfo?buildID=790488>*
  o *pki-core-10.3.5-1.fc26
<http://koji.fedoraproject.org/koji/buildinfo?buildID=790496>*
  o *pki-console-10.3.5-1.fc26
<http://koji.fedoraproject.org/koji/buildinfo?buildID=790520>*
  o *ldapjdk-4.18-19.fc26
<http://koji.fedoraproject.org/koji/buildinfo?buildID=790489>*

*Please provide Karma for the following builds:*

  * *Fedora 24:*
  o *https://bodhi.fedoraproject.org/updates/FEDORA-2016-059eb8aaee
dogtag-pki-10.3.5-1.fc24
<https://bodhi.fedoraproject.org/updates/FEDORA-2016-059eb8aaee>*
  o *https://bodhi.fedoraproject.org/updates/FEDORA-2016-9f1baf574f
dogtag-pki-theme-10.3.5-1.fc24
<https://bodhi.fedoraproject.org/updates/FEDORA-2016-9f1baf574f>*
  o *https://bodhi.fedoraproject.org/updates/FEDORA-2016-4d226a5f7e
pki-core-10.3.5-1.fc24
<https://bodhi.fedoraproject.org/updates/FEDORA-2016-4d226a5f7e>*
  o *https://bodhi.fedoraproject.org/updates/FEDORA-2016-dd16599bc7
pki-console-10.3.5-1.fc24
<https://bodhi.fedoraproject.org/updates/FEDORA-2016-dd16599bc7>*
  o *https://bodhi.fedoraproject.org/updates/FEDORA-2016-1835df9b39
ldapjdk-4.18-19.fc24
<https://bodhi.fedoraproject.org/updates/FEDORA-2016-1835df9b39>
*
  * *Fedora 25:*
  o *https://bodhi.fedoraproject.org/updates/FEDORA-2016-85261e13c5
   dogtag-pki-10.3.5-1.fc25*
  o *https://bodhi.fedoraproject.org/updates/FEDORA-2016-3f0224b152
   dogtag-pki-theme-10.3.5-1.fc25*
  o *https://bodhi.fedoraproject.org/updates/FEDORA-2016-0a384ead60
pki-core-10.3.5-1.fc25
<https://bodhi.fedoraproject.org/updates/FEDORA-2016-0a384ead60>*
  o *https://bodhi.fedoraproject.org/updates/FEDORA-2016-849cbeecb1
pki-console-10.3.5-1.fc25
<https://bodhi.fedoraproject.org/updates/FEDORA-2016-849cbeecb1>*
  o *https://bodhi.fedoraproject.org/updates/FEDORA-2016-3f6bc9b601
ldapjdk-4.18-19.fc25
<https://bodhi.fedoraproject.org/updates/FEDORA-2016-3f6bc9b601>
*



On Fedora 24 I am unable to upgrade to these packages without manual 
intervention:

[root@vm freeipa]# dnf update --allowerasing --best
Last metadata expiration check: 2:08:29 ago on Wed Aug 10 16:38:24 2016.
Error: nothing provides resteasy-atom-provider >= 3.0.17-1 needed by 
pki-base-java-10.3.5-1.fc24.noarch.
package pki-tools-10.3.5-1.fc24.x86_64 requires pki-base-java = 
10.3.5-1.fc24, but none of the providers can be installed.
nothing provides resteasy-atom-provider >= 3.0.17-1 needed by 
pki-base-java-10.3.5-1.fc24.noarch.
nothing provides resteasy-atom-provider >= 3.0.17-1 needed by 
pki-base-java-10.3.5-1.fc24.noarch.
nothing provides resteasy-atom-provider >= 3.0.17-1 needed by 
pki-base-java-10.3.5-1.fc24.noarch.
nothing provides resteasy-atom-provider >= 3.0.17-1 needed by 
pki-base-java-10.3.5-1.fc24.noarch

[root@vm freeipa]# rpm -q resteasy-atom-provider
resteasy-atom-provider-3.0.6-11.fc24.noarch

Am I doing something wrong, or does the new resteasy need to be added 
back to testing? 
(https://bodhi.fedoraproject.org/updates/FEDORA-2016-d80872c309)


Ben


Ben,

No, the resteasy 3.0.17 builds received bad karma because they were 
utilized with an incompatible pki-core 10.3.3 as used

[Freeipa-devel] Karma Requests for Dogtag 10.3.5-1 and ldapjdk

2016-08-10 Thread Matthew Harmsen 
*The following candidate builds of Dogtag 10.3.5 and ldapjdk on Fedora 
24, 25, and 26 (rawhide) consist of the following:*


 * *Fedora 24:*
 o *dogtag-pki-10.3.5-1.fc24
   *
 o *dogtag-pki-theme-10.3.5-1.fc24
   *
 o *pki-core-10.3.5-1.fc24
   *
 o *pki-console-10.3.5-1.fc24
   *
 o *ldapjdk-4.18-19.fc24
   *
 * *Fedora 25:*
 o *dogtag-pki-10.3.5-1.fc25
   *
 o *dogtag-pki-theme-10.3.5-1.fc25
   *
 o *pki-core-10.3.5-1.fc25
   *
 o *pki-console-10.3.5-1.fc25
   *
 o *ldapjdk-4.18-19.fc25
   *
 * *Fedora 26 (rawhide):*
 o *dogtag-pki-10.3.5-1.fc26
   *
 o *dogtag-pki-theme-10.3.5-1.fc26
   *
 o *pki-core-10.3.5-1.fc26
   *
 o *pki-console-10.3.5-1.fc26
   *
 o *ldapjdk-4.18-19.fc26
   *

*Please provide Karma for the following builds:*

 * *Fedora 24:*
 o *https://bodhi.fedoraproject.org/updates/FEDORA-2016-059eb8aaee
   dogtag-pki-10.3.5-1.fc24
   *
 o *https://bodhi.fedoraproject.org/updates/FEDORA-2016-9f1baf574f
   dogtag-pki-theme-10.3.5-1.fc24
   *
 o *https://bodhi.fedoraproject.org/updates/FEDORA-2016-4d226a5f7e
   pki-core-10.3.5-1.fc24
   *
 o *https://bodhi.fedoraproject.org/updates/FEDORA-2016-dd16599bc7
   pki-console-10.3.5-1.fc24
   *
 o *https://bodhi.fedoraproject.org/updates/FEDORA-2016-1835df9b39
   ldapjdk-4.18-19.fc24
   
   *
 * *Fedora 25:*
 o *https://bodhi.fedoraproject.org/updates/FEDORA-2016-85261e13c5
   dogtag-pki-10.3.5-1.fc25*
 o *https://bodhi.fedoraproject.org/updates/FEDORA-2016-3f0224b152
   dogtag-pki-theme-10.3.5-1.fc25*
 o *https://bodhi.fedoraproject.org/updates/FEDORA-2016-0a384ead60
   pki-core-10.3.5-1.fc25
   *
 o *https://bodhi.fedoraproject.org/updates/FEDORA-2016-849cbeecb1
   pki-console-10.3.5-1.fc25
   *
 o *https://bodhi.fedoraproject.org/updates/FEDORA-2016-3f6bc9b601
   ldapjdk-4.18-19.fc25
   
   *

-- 
Manage your subscription for the Freeipa-devel mailing list:
https://www.redhat.com/mailman/listinfo/freeipa-devel
Contribute to FreeIPA: http://www.freeipa.org/page/Contribute/Code

[Freeipa-devel] Karma Request for Dogtag 10.3.3-3 on Fedora 24

2016-07-05 Thread Matthew Harmsen 
The following candidate build of Dogtag 10.3.3-3 for Fedora 24 consists 
of the following:


 * pki-core-10.3.3-3.fc24
   

Please provide Karma for this build in Bodhi located at:

 * https://bodhi.fedoraproject.org/updates/FEDORA-2016-af639eaba8
   pki-core-10.3.3-3.fc24

Additionally, the following build has been provided for Fedora 25 (rawhide):

 * pki-core-10.3.3-3.fc25
   

Thanks,
-- Matt

-- 
Manage your subscription for the Freeipa-devel mailing list:
https://www.redhat.com/mailman/listinfo/freeipa-devel
Contribute to FreeIPA: http://www.freeipa.org/page/Contribute/Code

[Freeipa-devel] Karma Request for Dogtag 10.2.6 on Fedora 23

2016-07-01 Thread Matthew Harmsen 

The following bug has been addressed in Fedora 23:

 * Bugzilla Bug #1323400 - freeipa fails to start correctly after
   pki-core update on upgraded system
   

Please provide Karma for the following Fedora 23 build located in Bodhi at:

 * https://bodhi.fedoraproject.org/updates/FEDORA-2016-188c172b10
   pki-core-10.2.6-20.fc23

Thanks,
-- Matt

-- 
Manage your subscription for the Freeipa-devel mailing list:
https://www.redhat.com/mailman/listinfo/freeipa-devel
Contribute to FreeIPA: http://www.freeipa.org/page/Contribute/Code

[Freeipa-devel] Updated External EPEL CentOS 7 COPR builds are now available . . .

2016-06-22 Thread Matthew Harmsen 

An updated external EPEL CentOS 7 COPR repo is now available which contains 
Dogtag 10.3.3 builds:

 *

   
https://copr.fedorainfracloud.org/coprs/g/pki/10.3.3/repo/epel-7/group_pki-10.3.3-epel-7.repo

   [group_pki-10.3.3]
   name=Copr repo for 10.3.3 owned by @pki
   
baseurl=https://copr-be.cloud.fedoraproject.org/results/@pki/10.3.3/epel-7-$basearch/
   skip_if_unavailable=True
   gpgcheck=1
   gpgkey=https://copr-be.cloud.fedoraproject.org/results/@pki/10.3.3/pubkey.gpg
   enabled=1
   enabled_metadata=1

-- Matt


-- 
Manage your subscription for the Freeipa-devel mailing list:
https://www.redhat.com/mailman/listinfo/freeipa-devel
Contribute to FreeIPA: http://www.freeipa.org/page/Contribute/Code

[Freeipa-devel] Updated External EPEL CentOS 7 COPR builds are now available . . .

2016-06-13 Thread Matthew Harmsen 

An updated external EPEL CentOS 7 COPR repo is available now available which 
contains Dogtag 10.3.2 builds:

 *

   
https://copr.fedorainfracloud.org/coprs/g/pki/10.3.2/repo/epel-7/group_pki-10.3.2-epel-7.repo

   [group_pki-10.3.2]
   name=Copr repo for 10.3.2 owned by @pki
   
baseurl=https://copr-be.cloud.fedoraproject.org/results/@pki/10.3.2/epel-7-$basearch/
   skip_if_unavailable=True
   gpgcheck=1
   gpgkey=https://copr-be.cloud.fedoraproject.org/results/@pki/10.3.2/pubkey.gpg
   enabled=1
   enabled_metadata=1

-- Matt

-- 
Manage your subscription for the Freeipa-devel mailing list:
https://www.redhat.com/mailman/listinfo/freeipa-devel
Contribute to FreeIPA: http://www.freeipa.org/page/Contribute/Code

[Freeipa-devel] Updated External EPEL CentOS 7 COPR builds are now available . . .

2016-05-17 Thread Matthew Harmsen 

An updated external EPEL CentOS 7 COPR repo is available now available which 
contains Dogtag 10.3.1 builds:

 *

   
https://copr.fedorainfracloud.org/coprs/g/pki/10.3.1/repo/epel-7/group_pki-10.3.1-epel-7.repo

   [group_pki-10.3.1]
   name=Copr repo for 10.3.1 owned by @pki
   
baseurl=https://copr-be.cloud.fedoraproject.org/results/@pki/10.3.1/epel-7-$basearch/
   skip_if_unavailable=True
   gpgcheck=1
   gpgkey=https://copr-be.cloud.fedoraproject.org/results/@pki/10.3.1/pubkey.gpg
   enabled=1
   enabled_metadata=1

-- Matt

-- 
Manage your subscription for the Freeipa-devel mailing list:
https://www.redhat.com/mailman/listinfo/freeipa-devel
Contribute to FreeIPA: http://www.freeipa.org/page/Contribute/Code

[Freeipa-devel] Fwd: Re: FreeIPA 3.3.5

2014-03-27 Thread Matthew Harmsen 

Re-sending since I am now subscribed to this list.


 Original Message 
Subject:Re: FreeIPA 3.3.5
Date:   Thu, 27 Mar 2014 14:27:32 -0700
From:   Matthew Harmsen mharm...@redhat.com
To: Martin Kosek mko...@redhat.com, freeipa-devel@redhat.com



On 03/27/14 04:45, Martin Kosek wrote:

Hello all!

I think we are close to releasing next bugfixing version on FreeIPA 3.3.5. We
have a lot of bug fixes to offer, especially in the AD Trust area. I wrote the
changelog to our wiki, fixes or suggestions welcome:

http://www.freeipa.org/page/Releases/3.3.5

I have just one last concern though, the remaining PKI clone installation issue
I found:

https://fedorahosted.org/pki/ticket/933

Do we want to release before this ticket is closed or wait? Question is if
fixing Dogtag 10 based clone installation is enough to allow us to release or
not. Matthew (CCed), do we have any ETA when the fix would be available?


Ticket #933 is next on my list, but I must replicate the issue first,
and then come
up with a patch.

My best guess is that I would not have anything before sometime next week.

This issue only involves replicating a FreeIPA system which is using
Dogtag 9 (e. g. - RHEL 6, Fedora 17) to a Free IPA system using Dogtag 10.1
(e. g. - Fedora 20 - the change was made in pki-core-10.1.1.fc20).

Regardless of your decision, this issue will be the next bug fixed, and
it is planned
to be included in the next build (e. g. - pki-core-10.1.2.fc20).

-- Matt



___
Freeipa-devel mailing list
Freeipa-devel@redhat.com
https://www.redhat.com/mailman/listinfo/freeipa-devel