Identifying CAs provided by backend plugins.
It is possible to have multiple CA plugins, each potentially talking to
multiple backend CA servers. A mechanism is therefore needed to allow
the client to select a backend CA server.
In addition, Dogtag plans to implement the ability to configure lightweight
sub CA's - subordinate CA's that can exist within the same CA instance. This
opens up the possibility of configuring a separate CA instance for each
project, so that the project could have certificates that are scoped to the
project only. Thus, a mechanism is also required to associate a project with
a preferred CA, so that if a client does not request a specific CA, the
preferred CA is selected.
Also, a mechanism should be added to allow clients to discover the CA servers
available for a particular Barbican instance.
Blueprint information
- Status:
- Complete
- Approver:
- Douglas Mendizábal
- Priority:
- Essential
- Drafter:
- Ade Lee
- Direction:
- Approved
- Assignee:
- Ade Lee
- Definition:
- Approved
- Series goal:
- Accepted for kilo
- Implementation:
- Implemented
- Milestone target:
- 2015.1.0
- Started by
- Douglas Mendizábal
- Completed by
- Douglas Mendizábal
Related branches
Related bugs
Sprints
Whiteboard
Gerrit topic: https:/
Addressed by: https:/
Added new model classes for CAs
Addressed by: https:/
Added new repository classes and controller classes for CAs
Addressed by: https:/
Add code to populate CA tables and select plugin based on ca_id
Addressed by: https:/
Added mixin class to allow soft deletes
Addressed by: https:/
Add Barbican order metadata table and repository
Addressed by: https:/
Modified plugin contract to include barbican-meta-dto
Addressed by: https:/
Add missing localisation markers
Addressed by: https:/
Add missing alembic migration script for CA tables
Gerrit topic: https:/
Addressed by: https:/
Fix some ca_id related bugs, add more functional test code
Addressed by: https:/
Fix error in setting and updating ca and preferred ca tables
Work Items
Dependency tree
* Blueprints in grey have been implemented.