Roadmap - dogtagpki

#3072 Replacing getopt with argparse

1

Opened 7 years ago by edewata. Modified 5 years ago

FUTURE

#2998 Official Support of REST API

2

Opened 7 years ago by mharmsen. Modified 5 years ago

FUTURE major

#2991 RFE: CMC : Pkispawn should be able to request for certificate issuance using CMC during subsystem installation

1

Opened 7 years ago by mharmsen. Modified 5 years ago

FUTURE major

#2985 pki pkcs12-cert-mod gives a success message when a non-existing nickname is provided

2

Opened 7 years ago by mharmsen. Modified 5 years ago

FUTURE

#2876 [CI] Running test on patch set instead of individual patches

4

Opened 8 years ago by edewata. Modified 5 years ago

FUTURE

#2869 pkidestroy shows warning message for the deprecated algorithms

2

Opened 8 years ago by mharmsen. Modified 5 years ago

FUTURE major

#2867 PKCS#7 certificates order

3

Opened 8 years ago by mharmsen. Modified 5 years ago

FUTURE critical

#2849 Incorrect sequence of SECURITY_DATA_ARCHIVAL events.

3

Opened 8 years ago by edewata. Modified 5 years ago

FUTURE critical

#2843 [RFE] TPS UI: Allow to select users from a list of existing users to add to a group

1

Opened 8 years ago by mharmsen. Modified 5 years ago

FUTURE

#2842 pki-server instance-externalcert-add command prompt for password when invalid token is provided.

3

Opened 8 years ago by mharmsen. Modified 5 years ago

FUTURE

#2839 Missing authority ID in LWCA signing audit events.

2

Opened 8 years ago by edewata. Modified 5 years ago

FUTURE

#2832 [RFE] Deprecating system and transaction logs.

2

Opened 8 years ago by edewata. Modified 5 years ago

FUTURE

#2812 [CI] Set up CI for JSS

2

Opened 8 years ago by edewata. Modified 5 years ago

FUTURE major

#2807 RFE: CMC : Pkispawn should be able to request for certificate issuance using CMC during subsystem installation

1

Opened 8 years ago by mharmsen. Modified 5 years ago

FUTURE major

#2801 non-CA subsystems to automatically get the CA information when kra-user-cert-add is used with serial number

2

Opened 8 years ago by mharmsen. Modified 5 years ago

FUTURE major

#2800 Update nuxwdog man page with current information

1

Opened 8 years ago by mharmsen. Modified 5 years ago

FUTURE major

#2797 pki pkcs12 CLI compatibility testing

1

Opened 8 years ago by edewata. Modified 5 years ago

FUTURE major

#2781 pki-server ca-cert-request-find cli --cert and --cert-file does not accept .pem file

2

Opened 8 years ago by mharmsen. Modified 5 years ago

FUTURE major

#2777 Fix ca-authority-key-export server side code to support both AES and 3DES

4

Opened 8 years ago by mharmsen. Modified 5 years ago

FUTURE major

#2766 Bad request exception output for pki kra-group-show when group id is a long string

2

Opened 8 years ago by mharmsen. Modified 5 years ago

FUTURE minor

#2755 pki client-init initializing the directory after the providing wrong host and port

3

Opened 8 years ago by mharmsen. Modified 5 years ago

FUTURE minor

#2733 pki pkcs12-cert-add fails with HSM

5

Opened 8 years ago by mharmsen. Modified 5 years ago

FUTURE major

#2732 Selftest ID: SystemCertsVerification for KRA is missing while running kra-selftest-run

3

Opened 8 years ago by mharmsen. Modified 5 years ago

FUTURE minor

#2731 Cli:Self test failure exception handling improvement

3

Opened 8 years ago by mharmsen. Modified 5 years ago

FUTURE minor

#2730 CLI: ca-kraconnector cli is not working as expected.

2

Opened 8 years ago by mharmsen. Modified 5 years ago

FUTURE major

#2724 [RFE] pkispawn for KRA fails if pki_ds_base_dn and pki_ds_database are specified in KRA installation file and they match that of CA

2

Opened 8 years ago by mharmsen. Modified 5 years ago

FUTURE minor

#2718 Selecting algorithms in ECC

4

Opened 8 years ago by mharmsen. Modified 5 years ago

FUTURE critical

#2716 Converting HTML error message to text

1

Opened 8 years ago by edewata. Modified 5 years ago

FUTURE minor

#2708 pki user-membership-add command add non-existing user in to the group.

3

Opened 8 years ago by mharmsen. Modified 5 years ago

FUTURE minor

#2706 pkispawn accepts a non-existing ldap instance name during installation

2

Opened 8 years ago by mharmsen. Modified 5 years ago

FUTURE minor

#2700 Investigating ConnectorServlet usage.

1

Opened 8 years ago by edewata. Modified 5 years ago

FUTURE minor

#2698 Investigating PK11SecureRandom seeding

2

Opened 8 years ago by edewata. Modified 5 years ago

FUTURE

#2678 rolekit rolectl cmd RC=256 on ppc64

3

Opened 8 years ago by mharmsen. Modified 5 years ago

FUTURE major

#2666 Use AES encryption for ca-authority-key-export command

4

Opened 8 years ago by ftweedal. Modified 5 years ago

FUTURE major

#2658 Event classes cleanup

2

Opened 8 years ago by edewata. Modified 5 years ago

FUTURE minor

#2645 Offline option for pki client-cert-request

1

Opened 8 years ago by edewata. Modified 5 years ago

FUTURE major

#2629 CLI for searching audit logs remotely

2

Opened 8 years ago by edewata. Modified 5 years ago

FUTURE ---

#2628 Add option to bind Tomcat on localhost only

6

Opened 8 years ago by cheimes. Modified 5 years ago

FUTURE major

#2620 User with userid length 10000 char is not get deleted .

4

Opened 8 years ago by mharmsen. Modified 5 years ago

FUTURE minor

#2611 pkispawn should complain if a different subsystem cert nicknames are specified in the config file for shared tomcat instance

3

Opened 9 years ago by mharmsen. Modified 5 years ago

FUTURE minor

#2609 Automatic key recovery when the token is terminated

2

Opened 9 years ago by mharmsen. Modified 5 years ago

FUTURE major

#2603 Unindexed LDAP searches

4

Opened 9 years ago by cheimes. Modified 5 years ago

FUTURE major

#2600 in CA UI certificate details for serial # display ';' in between date and time

3

Opened 9 years ago by aakkiang. Modified 5 years ago

FUTURE minor

#2599 Last request ID returned when search with requestID that doesn't exist

3

Opened 9 years ago by gkapoor. Modified 5 years ago

FUTURE minor

#2598 Timestamps incorrectly stored in local time zone

2

Opened 9 years ago by edewata. Modified 5 years ago

FUTURE major

#2597 KRA subsystem fails to report invalid KRA transport cert

4

Opened 9 years ago by cheimes. Modified 5 years ago

FUTURE major

#2595 Upgrading to later packages of pki-ca cause 500 error for web interface

3

Opened 9 years ago by dsirrine. Modified 5 years ago

FUTURE major

#2594 RFE: enable gssapi support for PKI cli

6

Opened 9 years ago by mgrigull@redhat.com. Modified 5 years ago

FUTURE major

#2593 Enrollment of a formatted token is not allowed when RE_ENROLL=NO

2

Opened 9 years ago by rpattath. Modified 5 years ago

FUTURE major

#2592 Encryption cert recovered on a temporary token has different status under temporary token and lost token

2

Opened 9 years ago by rpattath. Modified 5 years ago

FUTURE major

#2586 LDAP-based configuration

2

Opened 9 years ago by edewata. Modified 5 years ago

FUTURE critical

#2583 Improvement for handling untrusted CA in PKI CLI

3

Opened 9 years ago by edewata. Modified 5 years ago

FUTURE major

#2581 PKI CLI shell

2

Opened 9 years ago by edewata. Modified 5 years ago

FUTURE major

#2578 Recovered valid cert on a userKey token has a status "revoked" after recovering a revoked cert on the token

2

Opened 9 years ago by rpattath. Modified 5 years ago

FUTURE major

#2574 KRA ECC installation failed with shared tomcat

2

Opened 9 years ago by gkapoor. Modified 5 years ago

FUTURE major

#2567 Process gets hanged and memory leak after setting enableOCSP

3

Opened 9 years ago by gkapoor. Modified 5 years ago

FUTURE major

#2566 Return nicknames and token of system certs during installation of a clone

3

Opened 9 years ago by gkapoor. Modified 5 years ago

FUTURE major

#2563 Console : Unable to change the grace period from CA console

2

Opened 9 years ago by gkapoor. Modified 5 years ago

FUTURE minor

#2559 Generate more obfuscated noise files during installation

3

Opened 9 years ago by stlaz. Modified 5 years ago

FUTURE minor

#2558 [RFE] - Certificate renewal improvement

5

Opened 9 years ago by edewata. Modified 5 years ago

FUTURE major

#2554 Displaying profile auth in CLI

2

Opened 9 years ago by edewata. Modified 5 years ago

FUTURE minor

#2551 CA: Logging Improvement

5

Opened 9 years ago by gkapoor. Modified 5 years ago

FUTURE minor

#2549 CA CLI: cert-request-submit throws UnmarshalException

3

Opened 9 years ago by gkapoor. Modified 5 years ago

FUTURE minor

#2548 ESC shows error messages that does not match with the failure messages in TPS debug log

3

Opened 9 years ago by rpattath. Modified 5 years ago

FUTURE minor

#2546 TPS UI: Changes to profile are applied even before Admin submits the changes and agent approves it

8

Opened 9 years ago by rpattath. Modified 5 years ago

FUTURE critical

#2539 pkispawn ocsp misleading error messages

4

Opened 9 years ago by aakkiang. Modified 5 years ago

FUTURE minor

#2537 Renaming pki --output parameter

4

Opened 9 years ago by edewata. Modified 5 years ago

FUTURE minor

#2535 Deprecated PosixParser

3

Opened 9 years ago by edewata. Modified 5 years ago

FUTURE minor

#2527 Listing archived keys by owner, certificate, archiver

5

Opened 9 years ago by edewata. Modified 5 years ago

FUTURE major

#2526 Listing token activities by token ID

5

Opened 9 years ago by edewata. Modified 5 years ago

FUTURE major

#2511 auth.instance.0.SSLOn parameter is missing in TPS CS.cfg

3

Opened 9 years ago by rpattath. Modified 5 years ago

FUTURE major

#2509 Token re-enroll fails when cert overwrite parameters are set to false

3

Opened 9 years ago by rpattath. Modified 5 years ago

FUTURE major

#2507 TPS Logging Issues

3

Opened 9 years ago by gkapoor. Modified 5 years ago

FUTURE major

#2506 Remove the auth related params from the externalReg profiles

4

Opened 9 years ago by rpattath. Modified 5 years ago

FUTURE major

#2504 Recovered certs on a smartcard token have the same nickname

3

Opened 9 years ago by rpattath. Modified 5 years ago

FUTURE major

#2495 Adding a new profile mapper fails does not add the param mappingResolver.<mapper-name>.class_id=filterMappingResolverImpl in CS .cfg

3

Opened 9 years ago by rpattath. Modified 5 years ago

FUTURE major

#2493 keySetMappingResolver is not listed under the profile mapping list on UI and cli

3

Opened 9 years ago by rpattath. Modified 5 years ago

FUTURE major

#2492 General config page in TPS Web UI is empty after making changes to general config pattern in CS.cfg

3

Opened 9 years ago by rpattath. Modified 5 years ago

FUTURE major

#2491 [RFE] Merging subordinate CA and external CA installation

3

Opened 9 years ago by edewata. Modified 5 years ago

FUTURE major

#2485 Token has different applet IDs when enrolling using tpsclient

2

Opened 9 years ago by rpattath. Modified 5 years ago

FUTURE minor

#2484 shared secret key is not imported under TPS instance using HSM when the config file has pki_import_shared_secret=True

2

Opened 9 years ago by rpattath. Modified 5 years ago

FUTURE major

#2482 RFE::Failures while adding extra extensions in ExternalCA

3

Opened 9 years ago by gkapoor. Modified 5 years ago

FUTURE critical

#2479 Proper message when "Manual server certificate enrollment" is used without cert request field

2

Opened 9 years ago by gkapoor. Modified 5 years ago

FUTURE minor

#2477 pkispawn of kra, ocsp and tks in a shared tomcat should check for the subsystem cert nickname validity

2

Opened 9 years ago by aakkiang. Modified 5 years ago

FUTURE minor

#2464 Improvements for authentication during installation.

2

Opened 9 years ago by edewata. Modified 5 years ago

FUTURE critical

#2458 [RFE] - Information other than UID missing from the Search results of Recovery request

2

Opened 9 years ago by ssidhaye@redhat.com. Modified 5 years ago

FUTURE major

#2456 Not able to access pki console after setting IPV6 address in pki console

2

Opened 9 years ago by ssidhaye@redhat.com. Modified 5 years ago

FUTURE major

#2442 Automating migration

2

Opened 9 years ago by edewata. Modified 5 years ago

FUTURE critical

#2422 TPSUI : Add/remove buttons only needed in tokens page when login as admin

3

Opened 9 years ago by gkapoor. Modified 5 years ago

FUTURE major

#2415 Expired certs logging is not handled and generic message for expired and revoked certs

4

Opened 9 years ago by gkapoor. Modified 5 years ago

FUTURE major

#2413 pkispawn failure due to certiifcate nickname mismatch should show proper error message

4

Opened 9 years ago by rpattath. Modified 5 years ago

FUTURE minor

#2310 Misleading logs for pkcs12-cert-find and when pkcs12 certificates are improper and used for clone install

2

Opened 9 years ago by gkapoor. Modified 5 years ago

FUTURE minor

#2307 Token State doesn't get change from Active to Temporary lost.

3

Opened 9 years ago by myusuf@redhat.com. Modified 5 years ago

FUTURE major

#2306 Chrome Can Not Submit EC Client Cert Requests

7

Opened 9 years ago by dminnich. Modified 5 years ago

FUTURE major

#2297 TPS: tps-authenticator cli is not able to add authenticator source

3

Opened 9 years ago by gkapoor. Modified 5 years ago

FUTURE major

#2244 Fine-grained installation steps

4

Opened 9 years ago by edewata. Modified 5 years ago

FUTURE critical

#2243 [RFE]: Add functionality to perform post enroll/format operations to update reporting service.

2

Opened 9 years ago by dsirrine. Modified 5 years ago

FUTURE major

#1752 Renewing already expired CA certificate

9

Opened 10 years ago by edewata. Modified 5 years ago

FUTURE critical

#1751 Certificate request throttling

4

Opened 10 years ago by edewata. Modified 5 years ago

FUTURE major

#1737 Generating CSR from existing key

4

Opened 10 years ago by edewata. Modified 5 years ago

FUTURE critical

#1725 Renewing the CA signing certificate does not extend its validity period end

3

Opened 10 years ago by jcholast. Modified 5 years ago

FUTURE major

#1708 Random serial number on clone CA is not enabled after required configuration changes are made to master CA CS.cfg

5

Opened 10 years ago by rpattath. Modified 5 years ago

FUTURE major

#1705 Removing subject DN requirement when submitting a CSR via CLI

8

Opened 10 years ago by edewata. Modified 5 years ago

FUTURE minor

#1694 Removing obsolete URL

2

Opened 10 years ago by edewata. Modified 5 years ago

FUTURE minor

#1676 CoolKey Javacard applet integer overflow error

5

Opened 10 years ago by jmagne. Modified 5 years ago

FUTURE major

#1662 RFE: Website is showing no submit button under Internet Explorer 11

5

Opened 10 years ago by atolani. Modified 5 years ago

FUTURE major

#1659 [RFE] Add granularity to TPS for granular certificate management on token

4

Opened 10 years ago by dsirrine. Modified 5 years ago

FUTURE major

#1651 Unable to publish cacert to LDAP server

8

Opened 10 years ago by mrniranjan. Modified 5 years ago

FUTURE minor

#1635 RFE: Improvements to RenewalNotificationJob

9

Opened 10 years ago by bja. Modified 5 years ago

FUTURE major

#1634 add Features feature to ldap

6

Opened 10 years ago by vakwetu. Modified 5 years ago

FUTURE major

#1633 CLI to manage security domain sessions

8

Opened 10 years ago by edewata. Modified 5 years ago

FUTURE minor

#1627 Lightweight CAs: add ability to configure CRLs for lightweight CAs

3

Opened 10 years ago by ftweedal. Modified 5 years ago

FUTURE major

#1621 CLI should respond with user friendly error message when user-membership-del request is missing value for the user

4

Opened 10 years ago by aakkiang. Modified 5 years ago

FUTURE minor

#1615 Misleading error message during installation

10

Opened 10 years ago by edewata. Modified 5 years ago

FUTURE minor

#1606 http://<hostname>:<unsecure-port>/tps/tps page gives an error page

5

Opened 10 years ago by rpattath. Modified 5 years ago

FUTURE major

#1585 LDAPI support

10

Opened 10 years ago by edewata. Modified 5 years ago

FUTURE major

#1581 When ldap server is not reachable the Directory Authenticated profile requests from CA EE page hangs.

4

Opened 10 years ago by aakkiang. Modified 5 years ago

FUTURE minor

#1575 Internet Explorer 11: caUserCert request submission fails using the EE page

5

Opened 10 years ago by rpattath. Modified 5 years ago

FUTURE major

#1573 publishing fails when rule has a predicate specified

4

Opened 10 years ago by rpattath. Modified 5 years ago

FUTURE major

#1570 CRL cache with cache recovery enabled is not working as expected

4

Opened 10 years ago by rpattath. Modified 5 years ago

FUTURE major

#1569 Update CRL when a certificate is revoked is not working

2

Opened 10 years ago by rpattath. Modified 5 years ago

FUTURE major

#1560 pkispawn of TPS is successful when CA's secure http port is assigned as TPS' unsecure http port

4

Opened 10 years ago by rpattath. Modified 5 years ago

FUTURE major

#1555 EE page: invalid email id in the email field of caUserCert request is accepted

4

Opened 10 years ago by rpattath. Modified 5 years ago

FUTURE minor

#1554 SCP02 token re-enrollment fails

6

Opened 10 years ago by rpattath. Modified 5 years ago

FUTURE critical

#1545 Clone CA: pkispawn does not throw an error when master CA has serialCloneTransferNumber=0 set

6

Opened 10 years ago by mharmsen. Modified 5 years ago

FUTURE minor

#1544 CA cloning when serial number range is less than serialCloneTransferNumber throws an exception

5

Opened 10 years ago by rpattath. Modified 5 years ago

FUTURE minor

#1505 PKI console does not display CA signing certificate in case of shared tomcat

5

Opened 10 years ago by aakkiang. Modified 5 years ago

FUTURE major

#1501 TPS UI improvements for signed audit log

7

Opened 10 years ago by rpattath. Modified 5 years ago

FUTURE minor

#1500 TPS UI: List activities using count criteria

4

Opened 10 years ago by rpattath. Modified 5 years ago

FUTURE major

#1499 TPS UI: Search user with maxcount criteria is not available

4

Opened 10 years ago by rpattath. Modified 5 years ago

FUTURE major

#1497 ca_signing_subject_dn will pick the same value as that of rootca if they share the security domain

8

Opened 10 years ago by rpattath. Modified 5 years ago

FUTURE minor

#1479 TPS UI: Authorization should fail when trying to login as a user not associated with any TPS role

5

Opened 10 years ago by rpattath. Modified 5 years ago

FUTURE minor

#1467 Fully Support OCSP Cloning

5

Opened 10 years ago by jmagne. Modified 5 years ago

FUTURE major

#1453 pkispawn of Clone CA is successful when pki_clone_replication_master_port has a wrong port number

5

Opened 10 years ago by rpattath. Modified 5 years ago

FUTURE major

#1420 pki user-membership-add should add only existing users to the group

4

Opened 10 years ago by mharmsen. Modified 5 years ago

FUTURE minor

#1418 pki group-member-find Administrators --start=-1 throws an exception

5

Opened 10 years ago by mharmsen. Modified 5 years ago

FUTURE minor

#1416 Problem with CRMF request via CLI

7

Opened 10 years ago by edewata. Modified 5 years ago

FUTURE minor

#1390 pki cert-find returns results when junk value is passed with --maxSerialNumber

4

Opened 10 years ago by mrniranjan. Modified 5 years ago

FUTURE minor

#1389 pki cert-find returned cert entries when invalid date is passed to --issuedOnTo

4

Opened 10 years ago by mrniranjan. Modified 5 years ago

FUTURE minor

#1279 Clone TPS installation fails

4

Opened 11 years ago by mharmsen. Modified 5 years ago

FUTURE major

#1268 Parameter pki_admin_email: Install succeeds with invalid email

4

Opened 11 years ago by mharmsen. Modified 5 years ago

FUTURE trivial

#1240 Investigate PKCS12Export

5

Opened 11 years ago by edewata. Modified 5 years ago

FUTURE major

#1238 Unable to submit request using profile caAgentFileSigning

3

Opened 11 years ago by mharmsen. Modified 5 years ago

FUTURE major

#1202 Revocation Checking issue with client certs and shared PKI instances

17

Opened 11 years ago by jmagne. Modified 5 years ago

FUTURE major

#1129 Upgrade framework improvements

5

Opened 11 years ago by edewata. Modified 5 years ago

FUTURE critical

#1123 unable to find requests with client ID using pki key-request-find

8

Opened 11 years ago by mrniranjan. Modified 5 years ago

FUTURE major

#1121 Negative values passed to key-find is being accepted as valid output.

6

Opened 11 years ago by mrniranjan. Modified 5 years ago

FUTURE minor

#1108 Better UI for TPS token policies

4

Opened 11 years ago by edewata. Modified 5 years ago

FUTURE minor

#1072 pki cert-find return results when invalid date is passed to --revokedonTo and --revokedOnFrom

7

Opened 11 years ago by mrniranjan. Modified 5 years ago

FUTURE minor

#1070 pki cert-request-find fails to provide proper results when Negative or very huge number is passed to start and size options

5

Opened 11 years ago by mrniranjan. Modified 5 years ago

FUTURE minor

#1047 Issues with finding certs with Netscape Extensions using pki cer-find

10

Opened 11 years ago by mrniranjan. Modified 5 years ago

FUTURE major

#1009 Relocating pkidbuser

2

Opened 11 years ago by edewata. Modified 5 years ago

FUTURE critical

#969 pki user-cert-del gives an exception when the required options are switched positions

7

Opened 11 years ago by rpattath. Modified 5 years ago

FUTURE minor

#944 RFE Request to query or manage CRL using pki command

5

Opened 11 years ago by mrniranjan. Modified 5 years ago

FUTURE major

#929 pki user-cert-find <userid> --start=-1 should give an error message

6

Opened 11 years ago by rpattath. Modified 5 years ago

FUTURE minor

#900 sslget -V does not provide version info

5

Opened 12 years ago by mharmsen. Modified 5 years ago

FUTURE minor

#861 pki user-cert-find <userid> --size=-1 should give an error message

5

Opened 12 years ago by rpattath. Modified 5 years ago

FUTURE minor

#860 user-add --email with i18n characters throws LDAP error

7

Opened 12 years ago by aakkiang. Modified 5 years ago

FUTURE major

#845 User account page for TPS UI

2

Opened 12 years ago by edewata. Modified 5 years ago

FUTURE minor

#841 add support for SUITE B (Encryption)

4

Opened 12 years ago by cfu. Modified 5 years ago

FUTURE blocker

#791 Recovering Encryption Certs with Keysize 3072 and above fails.

3

Opened 12 years ago by nkinder. Modified 5 years ago

FUTURE major

#766 Split configure() into smaller methods

2

Opened 12 years ago by edewata. Modified 5 years ago

FUTURE critical

#531 Review and consolidate command-line utilities

1

Opened 13 years ago by nkinder. Modified 5 years ago

FUTURE critical

#529 Convert UI to use REST interfaces

2

Opened 13 years ago by nkinder. Modified 5 years ago

FUTURE critical

#522 PKI Theme Framework

3

Opened 13 years ago by mharmsen. Modified 5 years ago

FUTURE critical

#512 Installer scripts generate too many log files

2

Opened 13 years ago by edewata. Modified 5 years ago

FUTURE critical

#128 RFE: TKS should support multiple DRM transport keys

2

Opened 13 years ago by nkinder. Modified 5 years ago

FUTURE critical

dogtagpki

Source Code

FUTURE