Re: [Pki-devel] [Freeipa-devel] [DESIGN] Lightweight CA renewal

2016-06-23 Thread Jan Cholasta
On 18.6.2016 02:38, Fraser Tweedale wrote: On Fri, Jun 17, 2016 at 03:21:07PM +0200, Jan Cholasta wrote: On 17.6.2016 09:34, Fraser Tweedale wrote: On Mon, May 09, 2016 at 09:35:06AM +0200, Jan Cholasta wrote: Hi, On 6.5.2016 08:01, Fraser Tweedale wrote: Hullo all, FreeIPA Lightweight CAs

Re: [Pki-devel] [Freeipa-devel] [DESIGN] Lightweight CA renewal

2016-06-23 Thread Jan Cholasta
On 9.5.2016 18:27, Petr Vobornik wrote: On 05/09/2016 09:35 AM, Jan Cholasta wrote: Hi, On 6.5.2016 08:01, Fraser Tweedale wrote: Hullo all, FreeIPA Lightweight CAs implementation is progressing well. The remaining big unknown in the design is how to do renewal. I have put my ideas into

[Pki-devel] rpm version issues in ogtag-pki-theme

2016-06-23 Thread Peter Robinson
Hi Matt Note you'll have problems here, a beta should have a version like 10.3.0-0.b1 not 10.3.0.b1-1 because it won't upgrade properly because 10.3.0.b1 > 10.3.0 in versions. Details can be found in the packaging guidelines:

[Pki-devel] [pki-devel][PATCH] 0073-Separated-TPS-does-not-automatically-receive-shared-.patch

2016-06-23 Thread John Magne
[PATCH] Separated TPS does not automatically receive shared secret from remote TKS. Support to allow the TPS to do the following: 1. Request that the TKS creates a shared secret with the proper ID, pointing to the TPS. 2. Have the TKS securely return the shared secret back to the TPS during