All notable changes to this project will be documented in this file.
- add support for
SkKlass3
certificate profiles - (breaking) changed default profile to
Ejbca
instead ofFI
- (breaking) changed PyPi registry location
- X-Road-Security Server Toolkit release version 3.0
- add
xrdsst internal-tls
and sub-commandsdownload
,import
,generate-key
andgenerate-csr
- add support for other certificate profiles
- add
xrdsst csr
and sub-commandslist
anddelete
- add
xrdsst key
and sub-commandslist
anddelete
- add
xrdsst instance
and sub-commandlist
- add
xrdsst security-server
and sub-commandslist
andlist-version
- add
xrdsst client
and sub-commandsmake-owner
andlist
- add
xrdsst endpoint
and sub-commandsupdate
,delete
,list-access
anddelete-access
- add
xrdsst diagnostics
and sub-commandsglobal-configuration
,ocsp-responders
andtimestamping-services
- add
xrdsst client
and sub-commandmake-owner
- add
xrdsst endpoint
and sub-commandlist
- add
xrdsst backup
and sub-commandrestore
- add
xrdsst backup
and sub-commanddelete
- add
xrdsst backup
and sub-commandslist
,add
anddownload
- add
xrdsst local-group
and sub-commandsadd
,add-member
,list
anddelete
- add
xrdsst service
and sub-commandslist-access
anddelete-access
- add
xrdsst client
and sub-commandsunregister
anddelete
- add
xrdsst service
and sub-commandsupdate-descriptions
,refresh-descriptions
anddisable-descriptions
- add
xrdsst service
and sub-commanddelete-descriptions
- add certificate renewal support
- add
xrdsst service
and sub-commandlist-services
- Fix
xrdsst member
sub-commandlist-classes
to list classes for current instance when command-line parameter not provided - add
xrdsst service
and sub-commandlist-descriptions
- add
xrdsst token create-new-keys
command - refactor code to been able to register cert when multiple auth certificates
- add
xrdsst member
and sub-commandlist-classes
- add
xrdsst cert
and sub-commandsdelete
andunregister
- add
xrdsst member
and sub-commandfind
- add
xrdsst cert
and sub-commandslist
anddisable
- Add Jenkinsfile for running integration tests on pull requests
- Add Docker support
- Fix validation of optional parameters
- X-Road-Security Server Toolkit release version 2.0
- add
xrdsst client
and sub-commandimport-tls-certs
- fix spelling mistake in sub-command
download-internal-tls
- fix adding of service description to not require
rest_service_code
parameter andendpoints
section in the configuration - update the documentation to be more clear
- Refactorization of end to end and integration tests to support negative cases and multiple security servers
- add
xrdsst service
sub-commandapply
- add multi-tenancy support
- fixed sonar issues
- add
xrdsst cert
and sub-commanddownload-internal-tsl
- add
xrdsst client
and sub-commandupdate
- Added section into the User Guide about using the Toolkit to configure highly available services using the built-in security server internal load balancing
- Added section into the User Guide about Load Balancer setup description
- add sub-command
add-access
toxrdsst endpoint
and refactoadd-access
ofxrdsst service
to allow adding access to any member
- Dockerfile and respective Makefile target removed
- Fix auto-configuration to show configuration status in the end of run for multiple security servers
- API keys in configuration files kept as environment variables instead of plain text to reduce security risks
- add
xrdsst endpoint
and sub-commandadd-endpoints
- Secrets in configuration files kept as environment variables instead of plain text to reduce security risks
- Toolkit optimised to run against multiple clean installed security servers
- X-Road-Security Server Toolkit release version 1.0
- Documentation updates related to package verification
- add
xrdsst user
and sub-commandcreate-admin
- Mask API key representations in log files.
- Represent API key in configuration as UUID, without HTTP header prefix.
- init logging after config key-level validation, non-mutable ops undifferentiated.
- remove undocumented configuration element
api_key_roles
- Stop toolkits' attempts to further communicate with security server when API key unavailable or access denied.
- Make SSH user configurable for api key creation
- Add the external FQDN specification support for certificates and service providers.
- Update security server API client to current spec, 1.0.31 (was 1.0.30)
- default configuration file config/(base.yaml) -> (xrdsst.yml)
- replace security server 'name' use for SSH connection attempts with /host/
- remove all YAML loading not done via safe_load (SafeLoader)
- added failure handling / error interpretation and recovery section to user guide
- output tuning for 'token init-keys' reporting
- mention 'cert downloads-csrs' directly when 'cert import' execution is reached but missing 'certificates' element for security server
- Extended proxy error handling and feedback, ASCII diagrams included.
- add
xrdsst service
sub-commandupdate-parameters
- add
xrdsst service
sub-commandadd-access
- Auto-configuration to be sequential per-security server.
- Defined operation completion criteria.
- Operations made aware of operational context.
- Configuration file validated on global level (keys) and operation level (required keys, value sanity)
- Auto-configuration stops after operation that could not be completed
- Auto-configuration shows base operation statuses when ended / stopped.
- Add examination of configured server statuses with
xrdsst status
- move adding and enabling of service descriptions to ServiceController
so that adding is performed with
xrdsst service
sub-commandadd-description
and enabling withxrdsst service
sub-commandenable-description
- add
xrdsst client
sub-commandadd-service-description
- add
xrdsst apply
auto-configuration command, rework log error handling
- add
xrdsst client
sub-commandregister
- add
xrdsst client
and sub-commandadd
- add
xrdsst cert
commandsactivate
anddownload-csrs
- add
xrdsst cert
commandsimport
andregister
- add end to end tests for init, token login, token init-keys and timestamp init
- add automatic api key creation
- add integration tests for init, token login, token init-keys and timestamp init
- add
token
sub-commandinit-keys
- create Makefile tasks for testing
- add
timestamp
sub-command withinit
and some listing proto-bonuses
- add bump2version to handle automatic version updates
- add PyLint to the project so that the code will conform to formatting rules
- add script for automatic reset of security servers and creation of api-keys
- add support for tabulated / json output render
- token listing to use Cement rendering
- add token listing and login (for default software token) methods
- add methods for uploading configuration anchor and initializing security server
- create initial unit tests
- create initial documentation
- update changelog and build version
- update license
- delete unrelated folders and files
- add logging
- update license
- update configuration file
- create initial project files