Re: [Pki-devel] [PATCH] 750 Fixed cert enrollment problem with empty rangeUnit in profile.

2016-05-24 Thread Endi Sukma Dewata
On 5/19/2016 10:27 AM, Endi Sukma Dewata wrote: Previously cert enrollment might fail after editing the profile using the console. This is because the console added an empty rangeUnit parameter, but the server rejected the empty value. The convertRangeUnit() methods in several classes have been

Re: [Pki-devel] [PATCH] 749 Fixed support for generic CSR extensions.

2016-05-24 Thread Endi Sukma Dewata
On 5/18/2016 10:44 AM, Endi Sukma Dewata wrote: The deployment tool has been modified to support adding Subordinate CA extension into the CSR for Microsoft CA, and also adding generic extensions to any system certificate. https://fedorahosted.org/pki/ticket/2312 ACKed by alee (thanks!).

Re: [Pki-devel] [PATCH] 303-306 Various issues

2016-05-24 Thread Ade Lee
Patches 303, 305 and 306 have been modified as discussed and checked in. Patch 304 has been revised as discussed on IRC. Please review. Ade On Fri, 2016-05-20 at 17:00 -0500, Endi Sukma Dewata wrote: > On 5/20/2016 2:20 PM, Ade Lee wrote: > > Please review: > > > > Patches listed in reverse

[Pki-devel] [PATCH] pki-cfu-0123-Ticket-1665-Cert-Revocation-Reasons-not-being-update.patch

2016-05-24 Thread Christina Fu
https://fedorahosted.org/pki/ticket/1665 Certificate Revocation Reasons not being updated in some cases Ticket 1665 - Cert Revocation Reasons not being updated when on-hold This patch fixes the following areas: * In the CA, when revokeCert is called, make it possible to move from

[Pki-devel] [PATCH] 754-755 Fixed problem submitting renewal request.

2016-05-24 Thread Endi Sukma Dewata
Attached are patches to fix a problem with submitting renewal request. https://fedorahosted.org/pki/ticket/999 -- Endi S. Dewata >From baea3b89ad5c3866ee8e40059b1ca5774984e355 Mon Sep 17 00:00:00 2001 From: "Endi S. Dewata" Date: Tue, 24 May 2016 16:47:31 +0200 Subject:

[Pki-devel] [PATCH] 756 Updated system certificate selftests.

2016-05-24 Thread Endi Sukma Dewata
The CertUtils.verifySystemCertByNickname() has been modified to call CryptoManager.verifyCertificate() to validate the system certificates which will provide better information (i.e. NSS error message and stack trace) to troubleshoot validation issues. https://fedorahosted.org/pki/ticket/850 --