Roadmap - dogtagpki

#3064 Key archival failing with ECC setup

1

Opened 5 years ago by mharmsen. Modified 2 years ago

10.6

#3054 Installation fails when HSM token label contains a space

5

Opened 5 years ago by cheimes. Modified 2 years ago

10.6

#3053 Mechanism to install with custom keys

1

Opened 5 years ago by edewata. Modified 2 years ago

10.6

#3042 Additional TPS token state transitions

1

Opened 5 years ago by edewata. Modified 2 years ago

10.6

#3017 Errors and warnings in Fedora Automated Tests

1

Opened 5 years ago by edewata. Modified 2 years ago

10.6

#3014 KRA and TPS audit messages missing during token key archival

2

Opened 5 years ago by mharmsen. Modified 2 years ago

10.6 major

#3013 Normalizing pki_token_name=Internal to internal for the pkispawn is not working

2

Opened 5 years ago by mharmsen. Modified 2 years ago

10.6 minor

#3012 [RFE] Substitutions of the certificate subject DN field only works for common name

2

Opened 5 years ago by mharmsen. Modified 2 years ago

10.6 major

#3011 pki cli cert-revoke command fails

3

Opened 5 years ago by mharmsen. Modified 2 years ago

10.6 major

#3010 Add integration tests for CA/KRA replication

1

Opened 5 years ago by cheimes. Modified 2 years ago

10.6

#3009 Add integration tests for external CA

1

Opened 5 years ago by cheimes. Modified 2 years ago

10.6

#3000 [RFE] Fedora Module Support

1

Opened 5 years ago by edewata. Modified 2 years ago

10.6 critical

#2993 Common format for certificate serial number

2

Opened 5 years ago by mharmsen. Modified 2 years ago

10.6 major

#2988 Key Changeover should work completely

1

Opened 5 years ago by mharmsen. Modified 2 years ago

10.6 major

#2978 Merging Fedora source packages

8

Opened 5 years ago by edewata. Modified 2 years ago

10.6 critical

#2958 Cleanup legacy values still contained in RSA profiles

1

Opened 5 years ago by mharmsen. Modified 2 years ago

10.6 major

#2943 TPS pkidestroy failure to delete TPS to TKS Connections with HSM and FIPS enabled

2

Opened 5 years ago by mharmsen. Modified 2 years ago

10.6 major

#2928 pki should not starts up for incorrect Audit event filter format.

2

Opened 5 years ago by mharmsen. Modified 2 years ago

10.6 major

#2927 AVCs during pkispawn of subsystems using non "pkiuser"

3

Opened 5 years ago by mharmsen. Modified 2 years ago

10.6 major

#2925 pkispawn shows confusing root certificate nicknames

3

Opened 5 years ago by mharmsen. Modified 2 years ago

10.6 major

#2917 Dogtag should support AES ciphers in SCEP

3

Opened 5 years ago by tvaughan. Modified 2 years ago

10.6 critical

#2899 Audit log messages unclear during enrollment of SCP03 v7 token using NISTSP800

2

Opened 5 years ago by mharmsen. Modified 2 years ago

10.6 critical

#2898 Audit log messages missing when userKey profile is disabled and token enrollment is attempted

1

Opened 5 years ago by mharmsen. Modified 2 years ago

10.6 critical

#2897 Audit log messages missing when token is enrolled using unsupported key sizes

1

Opened 5 years ago by mharmsen. Modified 2 years ago

10.6 critical

#2896 No audit log messages when re-enroll fails, RE_ENROLL=NO

1

Opened 5 years ago by mharmsen. Modified 2 years ago

10.6 critical

#2895 Audit log messages have applet version info that does not match that on the token when using tpsclient tokens

1

Opened 5 years ago by mharmsen. Modified 2 years ago

10.6 critical

#2894 Unauthorized and Invalid number format Exception during revoked certs usage

3

Opened 5 years ago by mharmsen. Modified 2 years ago

10.6 major

#2893 CMCRequest tool debug messages should only be displayed in verbose mode

2

Opened 5 years ago by mharmsen. Modified 2 years ago

10.6 major

#2892 HttpClient tool debug messages should only be displayed in verbose mode

2

Opened 5 years ago by mharmsen. Modified 2 years ago

10.6 major

#2891 PKCS10Client debug messages should only be displayed in verbose mode

3

Opened 5 years ago by mharmsen. Modified 2 years ago

10.6 major

#2885 FF57+ browser support

2

Opened 5 years ago by akostadi. Modified 2 years ago

10.6

#2868 pki kra-key-show or pki kra-key-find cli does not have options to search based on cert information

2

Opened 5 years ago by mharmsen. Modified 2 years ago

10.6 critical

#2866 ExternalCA : Failure with empty skid

1

Opened 5 years ago by mharmsen. Modified 2 years ago

10.6 major

#2860 Reconsider (drop) your "# special care for SELinux"

2

Opened 5 years ago by mharmsen. Modified 2 years ago

10.6

#2858 Migrating wiki-based product docs into git

2

Opened 5 years ago by edewata. Modified 2 years ago

10.6 major

#2854 Method to Include SKI in CA Signing Certificate Request

6

Opened 5 years ago by mharmsen. Modified 2 years ago

10.6 critical

#2851 Cache result of read_environment_files()

4

Opened 5 years ago by cheimes. Modified 2 years ago

10.6 major

#2847 [CI] Merge all CI related repos to single repo

5

Opened 5 years ago by dmoluguw. Modified 2 years ago

10.6 critical

#2833 Certificate Revoke API IO exception.

4

Opened 5 years ago by plopez. Modified 2 years ago

10.6 major

#2831 Use token for security domain authentication

6

Opened 5 years ago by ftweedal. Modified 2 years ago

10.6

#2814 Removing internal parameters from default.cfg.

1

Opened 6 years ago by edewata. Modified 2 years ago

10.6 major

#2813 Warnings for subsystem-specific parameters defined in [DEFAULT] section.

1

Opened 6 years ago by edewata. Modified 2 years ago

10.6 major

#2808 ca-KraConnector: ca-kraconnector show command should have read only access

2

Opened 6 years ago by gkapoor. Modified 2 years ago

10.6 minor

#2806 When nuxwdog is enabled pkidaemon status shows instances as stopped

3

Opened 6 years ago by mharmsen. Modified 2 years ago

10.6 major

#2804 ipaserver uninstall in verbose mode displays "pkidestroy: ERROR.. subprocess.CalledProcessError: returned non-zero exit status 6!"

2

Opened 6 years ago by mharmsen. Modified 2 years ago

10.6 major

#2803 CMCRequest: self-signed cmc request has ASN.1 Error: Object has zero length

3

Opened 6 years ago by mharmsen. Modified 2 years ago

10.6 major

#2783 Handling sslserver and subsystem cert nicknames properly for additional subsystems

1

Opened 6 years ago by dmoluguw. Modified 2 years ago

10.6 major

#2778 Check for minimum serial number range when using random serial numbers

2

Opened 6 years ago by mharmsen. Modified 2 years ago

10.6 minor

#2775 Need to add external reg attribute to indicate if operation is enroll or pin reset

2

Opened 6 years ago by mharmsen. Modified 2 years ago

10.6 major

#2770 cli: pki client should have some mechanism to set algorithm/AES encryption

4

Opened 6 years ago by mharmsen. Modified 2 years ago

10.6 major

#2768 KRATool does not support netkeyKeyRecovery attribute

2

Opened 6 years ago by mharmsen. Modified 2 years ago

10.6 major

#2767 KRATool does not support serialno field in CA/TPS KRA enrollment requests

2

Opened 6 years ago by mharmsen. Modified 2 years ago

10.6 major

#2765 Create a password validity check for pkispawn

3

Opened 6 years ago by mharmsen. Modified 2 years ago

10.6 major

#2763 No audit log messages for cert deletion from token using externalReg

2

Opened 6 years ago by mharmsen. Modified 2 years ago

10.6 major

#2762 ESC lists a recovered signing cert/key on a token as encryption key (TPS storing incorrect info?)

2

Opened 6 years ago by mharmsen. Modified 2 years ago

10.6 major

#2760 Pkiconsole is not accessible from HSM and FIPS environment

3

Opened 6 years ago by mharmsen. Modified 2 years ago

10.6 major

#2759 Automatic key recovery : GenerateNewKeyAndRecoverLast does not work with terminated token

2

Opened 6 years ago by mharmsen. Modified 2 years ago

10.6 major

#2758 loadFileSegmentInstallLoad operation error during format of a smartcard token

2

Opened 6 years ago by mharmsen. Modified 2 years ago

10.6 major

#2754 cert-request-find --size 1 --status pending returns all results instead of 1 entry.

2

Opened 6 years ago by mharmsen. Modified 2 years ago

10.6 major

#2753 Dogtag stuck on ssl handshake from client connection

3

Opened 6 years ago by mkubik. Modified 2 years ago

10.6 major

#2752 Removing the --renewal option while placing Cert renewal request from CLI

4

Opened 6 years ago by dmoluguw. Modified 2 years ago

10.6 major

#2751 pki Client cert import --ca-server is failing for HTTPS port and protocol

2

Opened 6 years ago by mharmsen. Modified 2 years ago

10.6 minor

#2749 Expired certificates are not moving to CRL

4

Opened 6 years ago by mharmsen. Modified 2 years ago

10.6 minor

#2748 CRL autoupdate from CS.cfg

3

Opened 6 years ago by mharmsen. Modified 2 years ago

10.6 major

#2747 Enabling CA with nuxwdog fails when CA is configured with HSM

4

Opened 6 years ago by mharmsen. Modified 2 years ago

10.6 major

#2709 [RFE] Need Ability to set the CRL This Update to be a Future Date when Generating a CRL.

5

Opened 6 years ago by mharmsen. Modified 2 years ago

10.6 critical

#2704 ipa kra install fails with "Error in setting certificate names and key sizes"

4

Opened 6 years ago by mharmsen. Modified 2 years ago

10.6 major

#2703 OCSP subsystem generates invalid response

6

Opened 6 years ago by edewata. Modified 2 years ago

10.6 major

#2702 Add additional methods to FIPS class in pkihelper.py

2

Opened 6 years ago by mharmsen. Modified 2 years ago

10.6 major

#2697 Certificate status mismatch on CA and TPS token db

2

Opened 6 years ago by mharmsen. Modified 2 years ago

10.6 major

#2691 Validating Tomcat port availability during installation

2

Opened 6 years ago by edewata. Modified 2 years ago

10.6 major

#2688 Adding CLI to obtain server/subsystem information

2

Opened 6 years ago by edewata. Modified 2 years ago

10.6 major

#2686 Upgrade script for audit event names

3

Opened 6 years ago by edewata. Modified 2 years ago

10.6 critical

#2681 Client Authentication request for SSL EE from Firefox Browser is confusing . . .

2

Opened 6 years ago by mharmsen. Modified 2 years ago

10.6 major

#2679 [MAN] No man pages for audit-file-find and audit-file-retrieve CLIs

2

Opened 6 years ago by sumedhs. Modified 2 years ago

10.6 major

#2668 [MAN] --ignore-banner missing in man page for pki command however help text contains it.

2

Opened 6 years ago by mharmsen. Modified 2 years ago

10.6 major

#2640 Ensuring TPS audit log correctness

5

Opened 6 years ago by edewata. Modified 2 years ago

10.6 critical

#2639 Ensuring TKS audit log correctness

4

Opened 6 years ago by edewata. Modified 2 years ago

10.6 critical

#2630 Removing obsolete TomcatJSS parameters

3

Opened 6 years ago by edewata. Modified 2 years ago

10.6 major

#2623 Add AES support for tkstool for SCP03

2

Opened 6 years ago by jmagne. Modified 2 years ago

10.6 major

#2607 TMS Auditable Events and fields

4

Opened 6 years ago by mharmsen. Modified 2 years ago

10.6 major

#2606 Dogtag's Python client does not validate certificate

5

Opened 6 years ago by mharmsen. Modified 2 years ago

10.6 major

#2596 Port to resteasy 3.1.0

11

Opened 6 years ago by tjaalton. Modified 2 years ago

10.6 major

#2562 Remove inactive KRA keys

7

Opened 6 years ago by cheimes. Modified 2 years ago

10.6 major

#2553 [MAN] PKI : Pki cli behavior when --ignore-cert-status is added

6

Opened 6 years ago by gkapoor. Modified 2 years ago

10.6 major

#2550 NPE in ProfileSubsystem.shutdown()

9

Opened 6 years ago by gkapoor. Modified 2 years ago

10.6 major

#2538 KRA key recovery cli kra-key-retrieve generates an invalid p12 file

4

Opened 6 years ago by aakkiang. Modified 2 years ago

10.6 critical

#2533 Changes to RESET_PIN_RESET_TO_NO policy are not giving expected results

4

Opened 6 years ago by rpattath. Modified 2 years ago

10.6 major

#2501 TPS audit log messages does not have information about the cert being recovered or deleted from a token

5

Opened 6 years ago by rpattath. Modified 2 years ago

10.6 major

#2480 Failure point while doing ExternalCA with HSM

5

Opened 7 years ago by gkapoor. Modified 2 years ago

10.6 critical

#2417 [MAN] TPS uninstall procedure

4

Opened 7 years ago by edewata. Modified 2 years ago

10.6 major

#2397 [MAN] Existing CA should be added as an example to the pkispawn man page

4

Opened 7 years ago by mharmsen. Modified 2 years ago

10.6 major

#2396 CLI :: pki pkcs12-import command throws Unrecognized option error when ran with --no-trust-flags option.

4

Opened 7 years ago by myusuf@redhat.com. Modified 2 years ago

10.6 major

#2395 pki-server kra-db-vlv-add throws exception

4

Opened 7 years ago by akahat@redhat.com. Modified 2 years ago

10.6 major

#2393 [MAN] Missing man pages for pki-server db, pki-server kra-db, pki-server tps-db

4

Opened 7 years ago by akahat@redhat.com. Modified 2 years ago

10.6 major

#2376 [MAN] pki-client manpage needs info about client-cert-validate command

9

Opened 7 years ago by nkinder. Modified 2 years ago

10.6 major

#2371 Misleading information after pkispawn installation & directory missing as mentioned in pki_client_database_dir

4

Opened 7 years ago by gkapoor. Modified 2 years ago

10.6 minor

#2361 [MAN] Add info regarding use of 'pki_client_dir' parameter (et. al.) in 'pkispawn' man page

7

Opened 7 years ago by mharmsen. Modified 2 years ago

10.6 major

#2356 [MAN] Updating TLS setup instruction in pkispawn man page

6

Opened 7 years ago by edewata. Modified 2 years ago

10.6 major

#2336 Improve error reporting when the imported certs are invalid

5

Opened 7 years ago by spoore. Modified 2 years ago

10.6 major

#2315 Error message while testing Cross-Site scripting nonce parameter.

2

Opened 7 years ago by akahat@redhat.com. Modified 2 years ago

10.6 minor

#2313 Deletion and again creation of client directory by subsystems.

9

Opened 7 years ago by akahat@redhat.com. Modified 2 years ago

10.6 major

#2309 Installation: sanity check externally-signed CA cert

7

Opened 7 years ago by gkapoor. Modified 2 years ago

10.6 major

#2251 [tracker] healthcheck tool

9

Opened 7 years ago by vakwetu. Modified 2 years ago

10.6 major

#1727 Validate input in pkispawn, add dry run option

6

Opened 7 years ago by jcholast. Modified 2 years ago

10.6 major

#1719 Coverity Issues: pki-core

8

Opened 7 years ago by mharmsen. Modified 2 years ago

10.6 minor

#1686 Setting up CA clone fails on non-ssl ports when Master CA has its internal ldap set with SSL

3

Opened 7 years ago by mrniranjan. Modified 2 years ago

10.6 minor

#1675 Publishing CRL to LDAP directory fails when the LdapCRLRule predicate has isDeltaCRL set

4

Opened 7 years ago by rpattath. Modified 2 years ago

10.6 minor

#1671 Automated jobs: Renewal Notification message body is incorrect.

4

Opened 7 years ago by aakkiang. Modified 2 years ago

10.6 minor

#1670 Automated Jobs: Renewal notification email sent even after the cert is renewed.

4

Opened 7 years ago by aakkiang. Modified 2 years ago

10.6 minor

#1660 Auto generate encryption key for group tokens

5

Opened 7 years ago by dsirrine. Modified 2 years ago

10.6 major

#1649 Enhancements for CLI-based renewals

8

Opened 7 years ago by dminnich. Modified 2 years ago

10.6 minor

#1596 Resolve pkidbuser/subsystem user co-ownership of subsystem certificate

3

Opened 8 years ago by mharmsen. Modified 2 years ago

10.6 major

#1547 Update 'tpsclient' license from LGPL v2.1 to GPL 3

4

Opened 8 years ago by mharmsen. Modified 2 years ago

10.6 major

#1513 Export a cert that has no priv key using PKCS12Export tool and importing to another nss db using pk12util shows NULL

5

Opened 8 years ago by aakkiang. Modified 2 years ago

10.6 major

#1314 PrettyPrintCert tool works only when header and footer is removed from the certificate base-64

5

Opened 8 years ago by mharmsen. Modified 2 years ago

10.6 major

#1302 [MAN] man page should have information that external CA is no more required to be a subCA

6

Opened 8 years ago by rpattath. Modified 2 years ago

10.6 major

#1300 SCEP enrollment not picking up the given signing algorithm

4

Opened 8 years ago by mharmsen. Modified 2 years ago

10.6 major

#1299 GetCACert can't return both an RA and a CA certificate

3

Opened 8 years ago by mharmsen. Modified 2 years ago

10.6 major

#1176 Use nss_init_context() instead of nss_init() in Python client library

5

Opened 8 years ago by edewata. Modified 2 years ago

10.6 major

#1099 Rename "DRM/Drm/drm/Data Recovery Manager" ==> "KRA/Kra/kra/Key Recovery Authority"

10

Opened 9 years ago by mharmsen. Modified 2 years ago

10.6 major

#974 Multiple database access via JSS

7

Opened 9 years ago by edewata. Modified 2 years ago

10.6 major

#934 pki user-mod authenticating using an expired cert should fail with a more descriptive error message

7

Opened 9 years ago by rpattath. Modified 2 years ago

10.6 minor

#710 Database upgrade framework

8

Opened 10 years ago by edewata. Modified 2 years ago

10.6 major

#704 --type option accepts any given value.

4

Opened 10 years ago by lsunkara. Modified 2 years ago

10.6 minor

#700 Disable all DES-based ciphers

9

Opened 10 years ago by mharmsen. Modified 2 years ago

10.6 major

#698 Remove cryptographic implementations from Dogtag code base

7

Opened 10 years ago by mharmsen. Modified 2 years ago

10.6 major

#692 [MAN] pki-ca man pages

8

Opened 10 years ago by mharmsen. Modified 2 years ago

10.6 major

#690 [MAN] pki-tools man pages

12

Opened 10 years ago by mharmsen. Modified 2 years ago

10.6 major

#627 Add SCEP support for GetCACaps

10

Opened 10 years ago by awnuk. Modified 2 years ago

10.6 major

#355 RFE: Add support for DSA2

4

Opened 10 years ago by nkinder. Modified 2 years ago

10.6 major

dogtagpki

Source Code

10.6