[Pki-devel] [PATCH] 976 Cleaned up CryptoUtil.setClientCiphers(String).

2017-03-17 Thread Endi Sukma Dewata
The CryptoUtil.setClientCiphers(String) has been reformatted to simplify future refactoring. Pushed to master under trivial rule. -- Endi S. Dewata >From 2b9f9b7ef9e936dc5dc7ecc7bcc4c2fd8236dd1f Mon Sep 17 00:00:00 2001 From: "Endi S. Dewata" Date: Sat, 18 Mar 2017 03:33:10

[Pki-devel] [PATCH] Issuance Protection Cert establishment and convenience crypto routines

2017-03-17 Thread Christina Fu
This patch provides routines that can be shared between https://pagure.io/dogtagpki/issue/2605 CMC feature: id-cmc-identityProofV2 per rfc5272 and https://pagure.io/dogtagpki/issue/2604 RFE: shared secret storage and retrieval mechanism Note: symkey algorithm remains at DES3 until cmc feature

[Pki-devel] [PATCH] Issuance Protection Cert establishment and convenience encrypt/decrypt/hash routines

2017-03-17 Thread Christina Fu
This patch provides code that can be shared between: https://pagure.io/dogtagpki/issue/2605 and https://pagure.io/dogtagpki/issue/2604 Note: default is DES3 for now; will switch over to AES when the cmc feature further materializes. thanks, Christina >From

Re: [Pki-devel] [Freeipa-devel] [TESTING] Please test and add karma to pki-core-10.4.0-1

2017-03-17 Thread Matthew Harmsen
On 03/17/2017 10:02 AM, Lukas Slebodnik wrote: On (17/03/17 12:14), Martin Babinsky wrote: A new update for Dogtag PKI (pki-core-10.4.0-1.fc25) landed it Fedora 25 updates-testing yesterday.[1] It was also pushed to fedora26 https://bodhi.fedoraproject.org/updates/FEDORA-2017-9cc27242c1 I

[Pki-devel] [PATCH] 974 Default NSS database for PKI CLI.

2017-03-17 Thread Endi Sukma Dewata
The PKI CLI has been modified to create a default NSS database without a password if there is no existing database at the expected location. Pushed to master under trivial rule. -- Endi S. Dewata >From 8b85ace2a2761c8451a11b4df8f142bd291cd6d4 Mon Sep 17 00:00:00 2001 From: "Endi S. Dewata"

[Pki-devel] [PATCH] 973 Added missing Eclipse dependency.

2017-03-17 Thread Endi Sukma Dewata
The Eclipse .classpath file has been modified to include tomcat-coyote.jar to avoid build problem. Pushed to master under trivial rule. -- Endi S. Dewata >From 686303c3b71f9c929face7c0f947cf7563e9da68 Mon Sep 17 00:00:00 2001 From: "Endi S. Dewata" Date: Fri, 17 Mar 2017

[Pki-devel] [PATCH] 971 Removed duplicate code to configure SSL version ranges.

2017-03-17 Thread Endi Sukma Dewata
The duplicate code for configuring default SSL version ranges has been merged into reusable methods in CryptoUtil. Pushed to master under trivial rule. -- Endi S. Dewata >From 4d6e6d05d5270a0e81ae12e2583cae9c49667c88 Mon Sep 17 00:00:00 2001 From: "Endi S. Dewata" Date: