Re: [Pki-devel] [PATCH] 0102 Lightweight CAs: allow specifying authority via ProfileSubmitServlet

2016-05-06 Thread Endi Sukma Dewata
On 5/6/2016 1:09 AM, Fraser Tweedale wrote: Attached patch does what it says on the tin ;) Cheers, and have a good weekend y'all. Fraser ACK. Same thing, could you chain the original exception to BadRequestDataException? -- Endi S. Dewata ___

Re: [Pki-devel] [PATCH] 0101 Lightweight CAs: accept "host-authority" as valid parent

2016-05-06 Thread Endi Sukma Dewata
On 5/5/2016 1:54 AM, Fraser Tweedale wrote: The attached patch allows "host-authority" to be used as valid reference to the host authority when creating a LWCA. It makes life easier for me one the FreeIPA side :) Cheers, Fraser ACK. Just one thing, could you chain the original exception to

[Pki-devel] [PATCH] 737-739 Added deployment parameters for number ranges.

2016-05-06 Thread Endi Sukma Dewata
Attached are patches to add deployment parameters for serial, request, and replica number ranges. https://fedorahosted.org/pki/ticket/2278 -- Endi S. Dewata >From 13b60b88ae13c84129dc0e8b6db9eda7388e880e Mon Sep 17 00:00:00 2001 From: "Endi S. Dewata" Date: Fri, 6 May 2016

Re: [Pki-devel] [PATCH] 736 Fixed token status search filter.

2016-05-06 Thread Endi Sukma Dewata
On 5/5/2016 12:59 PM, Endi Sukma Dewata wrote: The LDAP attribute for token status has been modified to store the same values displayed on the CLI. This way searching tokens with specific status can be done correctly with simple LDAP filter such as (tokenStatus=).

[Pki-devel] 0119-Ticket-2303-Key-recovery-fails-with-KRA-on-lunaSA.patch

2016-05-06 Thread Christina Fu
One patch for JSS one patch for KRA These patches should address the KRA unwrap issues when the keys are on lunaSA. the KRA patch will required the JSS patch to function. It is also required for the lunaSA to be of the following model: CKE – Key Export Models Christina diff -up

[Pki-devel] [PATCH] 0102 Lightweight CAs: allow specifying authority via ProfileSubmitServlet

2016-05-06 Thread Fraser Tweedale
Attached patch does what it says on the tin ;) Cheers, and have a good weekend y'all. Fraser From cabae0a050fb752b290ece28d5dac927f01b3c01 Mon Sep 17 00:00:00 2001 From: Fraser Tweedale Date: Fri, 6 May 2016 16:03:57 +1000 Subject: [PATCH] Lightweight CAs: allow specifying

[Pki-devel] [DESIGN] Lightweight CA renewal

2016-05-06 Thread Fraser Tweedale
Hullo all, FreeIPA Lightweight CAs implementation is progressing well. The remaining big unknown in the design is how to do renewal. I have put my ideas into the design page[1] and would appreciate any and all feedback! [1] http://www.freeipa.org/page/V4/Sub-CAs#Renewal Some brief commentary