search

pki-bot / pki-issues-final

0 stars 0 forks source link

Errors in EXAMPLES section of pkispawn man page #821

Closed pki-bot closed 3 years ago

pki-bot commented 3 years ago

This issue was migrated from Pagure Issue #827. Originally filed by mharmsen (@mharmsen) on 2014-01-14 21:28:25:

For a CA, the EXAMPLES section contains a 'myconfig.txt' file with the following contents:

[DEFAULT]
pki_admin_password=password123
pki_client_pkcs12_password=password123
pki_ds_password=password123

which appears to be missing the required parameter:

pki_security_domain_password=password123

Similarly, for a KRA, OCSP, or TKS, the EXAMPLES section contains a 'myconfig.txt' file with the following contents:

[DEFAULT]
pki_admin_password=password123
pki_client_pkcs12_password=password123
pki_ds_password=password123
pki_security_domain_password=password123

which appears to be missing the required parameter:

pki_client_database_password=password123

Additionally, for a TPS, the EXAMPLES section should contain a 'myconfig.txt' file with the following contents:

[DEFAULT]
pki_admin_password=password123
pki_client_database_password=password123
pki_client_pkcs12_password=password123
pki_ds_password=password123
pki_security_domain_password=password123
[TPS]
pki_enable_server_side_keygen=True
pki_authdb_basedn=dc=example,dc=com

although the 'pki_enable_server_side_keygen=True' is an optional parameter unless the user wants to utilize a KRA for server-side keygen.

This entire section should be reviewed and fixed to make certain that it provides correct EXAMPLES to end users of 'pkispawn'.

pki-bot commented 3 years ago

Comment from mharmsen (@mharmsen) at 2014-06-04 20:40:08

[06/04/2014] - Moving to Milestone 10.2.1 due to schedule restrictions.

pki-bot commented 3 years ago

Comment from mharmsen (@mharmsen) at 2014-09-18 03:10:00

Proposed Milestone: 10.2.3 (per CS Meeting of 09/17/2014)

man page (complete earlier if possible)

pki-bot commented 3 years ago

Comment from mharmsen (@mharmsen) at 2015-01-15 01:24:00

Per Dogtag 10.2.X meeting of 01/14/2015: Milestone 10.2 Backlog

pki-bot commented 3 years ago

Comment from edewata (@edewata) at 2015-06-24 18:29:18

Based on testing, the pki_security_domain_password is not required for CA. For clarity, the [DEFAULT] should be replaced with the actual subsystem to be installed (e.g. [CA]).

pki-bot commented 3 years ago

Comment from edewata (@edewata) at 2015-07-16 18:49:03

The missing pki_client_database_password was already fixed in a44ccf872262b1289cd2577a6ba55071066a5209.

TPS-related information will be added in ticket 1277.

pki-bot commented 3 years ago

Comment from mharmsen (@mharmsen) at 2017-02-27 14:04:34

Metadata Update from @mharmsen: