Commit
This commit does not belong to any branch on this repository, and may belong to a fork outside of the repository.
FAB-5531 Create 1.0.1 fabric-ca release
Single commit which squashes commits from master for 1.0.1 release based on FAB-5470 Change-Id: I1d2e555398eebfe22b0d00c8c149fbdbe1f0d7ef Signed-off-by: Gari Singh <[email protected]> [FAB-5334] Intermediate CA does not copy BCCSP config Intermediate CA, when creating CSR with client, should pass BCCSP FactoryOpts to the client. Change-Id: I8ac47707aca33fac00ecbc49943a1a0717d11990 Signed-off-by: Volodymyr Paprotski <[email protected]> (cherry picked from commit b9e8a8e) Signed-off-by: Gari Singh <[email protected]> [FAB-4126] Convert fatal message to error log.Fatal exits the process with 1 , which is not we want to do in util function, we will let caller to decide to exit or not. Change-Id: I403a3c621e77eb40b871ab1c0afa1dc2130535e8 Signed-off-by: Anil Ambati <[email protected]> (cherry picked from commit 086cc2f) Signed-off-by: Gari Singh <[email protected]> [FAB-5434] Fix mysql config in fvt image Ubuntu 16.04.1 recently updated the default mysql-server package to version 5.7.19. This is causing fvt tests in CI to fail on x86_64 (s390x uses Debian Jessie which uses mysql 5.5.55 so is not affected). This change is based on work in the mysql images available on Dockerhub. The change basically dismisses the postInstall config and initializes the database and sets the password when the image starts up. Change-Id: Ia8cb6a7faa77a5712a8ebf4d061215186c491e5e Signed-off-by: Gari Singh <[email protected]> (cherry picked from commit bc2b642) Signed-off-by: Gari Singh <[email protected]> [FAB-4915] Fix timing bug in server stop This fixes a timing bug in server stop which could only be reproduced in CI. See [FAB-4915] for more information. Change-Id: I3fd36024ed7968b49d6f4e85a7a960f694cf1c7c Signed-off-by: Keith Smith <[email protected]> (cherry picked from commit 4e5c55f) Signed-off-by: Gari Singh <[email protected]> [FAB-3051] Input validation on CSR fields RFC 3280 specifies upper bounds for fields in the CSR. This change set enforces those bounds by doing input validation on the CSR fields. These checks will also prevents authentication issues when the DN gets too long and token authenication errors out. For more information, see [FAB-3051] Change-Id: I170b372f2732b147b3ae0811b071ad4328533d0e Signed-off-by: Saad Karim <[email protected]> (cherry picked from commit e03673c) Signed-off-by: Gari Singh <[email protected]> [FAB-5239] LDAP reconnect for idle timeout The fabric-ca-server connects to the LDAP server and caches the connection. If the LDAP server closes the connection because of inactivity, the fabric-ca-server should reconnect. That is what this change set does. The openldap server is reconfigured to close connections after 1 second of inactivity and the ldap test case to sleep for 3 seconds to hit this condition. The test case fails without the code change and passes with the code change. Change-Id: I38b06eb987fe939066acf8ebdc4f2d5b81a9b76f Signed-off-by: Keith Smith <[email protected]> (cherry picked from commit d31c0d7) Signed-off-by: Gari Singh <[email protected]> [FAB-3662] Document DB version support Fabric CA documentation updated to state supported database versions. Change-Id: Ib03a8fbea01cd4354d47f3ffcb08e37b2c772c54 Signed-off-by: Saad Karim <[email protected]> (cherry picked from commit dd60a58) Signed-off-by: Gari Singh <[email protected]> [FAB-4409] update vendored package cfssl Updated cfssl package to the latest revision cfssl to pull the changes required by fab-3026 Change-Id: I8b95769c254cacd2d58cd8442d1d601db143d475 Signed-off-by: Anil Ambati <[email protected]> (cherry picked from commit 2abc451) Signed-off-by: Gari Singh <[email protected]> [FAB-4844] Store MSP intermediatecerts The "fabric-ca-client enroll" command was not storing the intermediatecerts as expected by MSP. It was storing the entire chain in the cacerts directory. This change set splits the CA chain and stores only the 1st one in the cacerts directory and stores the rest in the intermediatecerts directory. Unit tests and FVT tests cases fail w/o this fix and pass with it. Change-Id: Iede943bad9601db08c6c18f79add5608e8dfeaae Signed-off-by: Keith Smith <[email protected]> Signed-off-by: Saad Karim <[email protected]> (cherry picked from commit 3ba0088) Signed-off-by: Gari Singh <[email protected]> [FAB-3026] OOM for very large CRLs A certificate containing a CRL URI that points to an extremely large file causes the server to crash with an out of memory exception. A config option (CRLSizeLimit) has been added to check and make sure that the requested CRL does not exceed the size specified by CRLSizeLimit. The default size limit is 512KB. This will prevent a malicious intent to crash server by pointing to a CRL that is very large. See [FAB-3026] for more information Change-Id: Ibbb0506faecf29b9a9c0a361c2ff701c9945a973 Signed-off-by: Saad Karim <[email protected]> (cherry picked from commit f54aaf2) Signed-off-by: Gari Singh <[email protected]> [ FAB-5434 ] Fix mysql internal_DB permissions Fixes the initialization error of mysql server in fvt tests. This is a problem that is exclusive to the x86 CI build machines. Change-Id: I054911218d1906e7a6ecf221e89bc9bee129ac3c Signed-off-by: rennman <[email protected]> (cherry picked from commit d24c05c) Signed-off-by: Gari Singh <[email protected]> [ FAB-5009 ] Update intermediate CA test The current intermediate test does not test using TLS, nor does it test multiple backend DBs. This adds that support, as well and add enroll/reenroll testing. Since the addition of multiple server starts, the utility files have been updated to speep up start detection. This should improve the runtime of the tests. Change-Id: I84c49878e2e17bd5ac98753b0c10c1a4d479d394 Signed-off-by: rennman <[email protected]> (cherry picked from commit 72e010e) Signed-off-by: Gari Singh <[email protected]> FAB-5530 Vendor latest version of bccsp See FAB-5407 for changes Change-Id: I7ffa1aca4e729a79290342fc4f19ae871e78da8a Signed-off-by: Gari Singh <[email protected]> (cherry picked from commit fa60287) Signed-off-by: Gari Singh <[email protected]> [FAB-5510] Mask the identity password in the log Identity password is printed in clear when CA config is printed to the log. For example in the "Init CA with home" debug statement. This change set fixes that problem. Change-Id: I1d5d73465559a468ae2be369daf41848c7c1ff5f Signed-off-by: Anil Ambati <[email protected]> Signed-off-by: Gari Singh <[email protected]> (cherry picked from commit 748467f) Signed-off-by: Gari Singh <[email protected]>
- Loading branch information