[Pki-devel] [PATCH] 703 Fixed certificate chain import problem.

2016-03-28 Thread Endi Sukma Dewata
In the external CA case if the externally-signed CA certificate is included in the certificate chain the CA certificate may get imported with an incorrect nickname. The code has been modified such that the certificate chain is imported after the CA certificate is imported with the proper nickname

Re: [Pki-devel] [PATCH] pki-cfu-0116-Ticket-1006-Audit-logging-for-TPS-REST-operations.patch

2016-03-28 Thread Christina Fu
pushed to master commit 41a99a5938c6881a978199fe10b0c392eb27d569 thanks, Christina On 03/28/2016 02:44 PM, John Magne wrote: Looks fine: What was done: 1. Creating some convenience functions to do the actual auditing. 2. Making sure we have auditing for the calls where things are changed suc

Re: [Pki-devel] [PATCH] pki-cfu-0116-Ticket-1006-Audit-logging-for-TPS-REST-operations.patch

2016-03-28 Thread John Magne
Looks fine: What was done: 1. Creating some convenience functions to do the actual auditing. 2. Making sure we have auditing for the calls where things are changed such as configuration /profile changes, or changing a token's state. 3. Making sure there are audit messages for the various error co

Re: [Pki-devel] [PATCH] 701 Generating TEMP_LOST to UNINITIALIZED/ACTIVE transitions dynamically.

2016-03-28 Thread Endi Sukma Dewata
On 3/21/2016 9:59 PM, Endi Sukma Dewata wrote: The TPS subsystem has been modified to generate the token state transitions from TEMP_LOST to UNINITIALIZED or ACTIVE dynamically depending on whether the token has certificates. The TEMP_LOST to ACTIVE transition has been removed from the CS.cfg.