dogtagpki / pki

The Dogtag Certificate System is an enterprise-class Certificate Authority (CA) which supports all aspects of certificate lifecycle management, including key archival, OCSP and smartcard management.
https://www.dogtagpki.org
GNU General Public License v2.0
366 stars 135 forks source link

Simplifying REST URL for key services #1664

Open pki-bot opened 4 years ago

pki-bot commented 4 years ago

This issue was migrated from Pagure Issue #1101. Originally filed by edewata (@edewata) on 2014-08-14 19:06:03:


Currently the key services are located under /kra/rest/agent/keys URL and only accessible to agents. The URL can be simplified into /kra/rest/keys to be consistent with other REST services. Access to REST services are controlled by ACL and there is no change required now. However, in the future we may want to let users manage their own keys in order to limit the damage in case of compromised agent's identity, so having an "agent" in the URL would be inappropriate.

Proposed milestone: 10.3

pki-bot commented 4 years ago

Comment from mharmsen (@mharmsen) at 2014-08-18 20:37:45

Per CS/DS meeting of 08/18/2014, moving ticket to 10.3.

Question was raised at the meeting:

pki-bot commented 4 years ago

Comment from edewata (@edewata) at 2017-02-27 14:08:31

Metadata Update from @edewata: