BSD Ports

security/dogtag-pki 11.10.1_2 FreeBSD

Dogtag PKI certificate system and server components

System
FreeBSD
Repository
FreeBSD ports
Maintainer
[email protected]
Port added
Last update
Commit
2c0f1733ef
License
GPLv2
Categories
security, java, python
Package size
6241.4 KiB, 16535.2 KiB installed

Description

Dogtag PKI is an enterprise-class open source Certificate Authority (CA). It supports all aspects of certificate lifecycle management, including key archival, OCSP, and smartcard management.

This port provides the Certificate Authority (CA) subsystem running on Apache Tomcat, the pki command line interface, the pkispawn/pkidestroy deployment tools, and the Python client and server modules for administering Dogtag PKI certificate services.

In the other systems

SystemPortVersion
FreeBSDsecurity/dogtag-pki11.10.1_2
HardenedBSDsecurity/dogtag-pki11.10.1_2
GhostBSDsecurity/dogtag-pki11.10.1_2

Install

Binary package:

pkg install dogtag-pki

From the ports tree:

cd /usr/ports/security/dogtag-pki/ && make install clean

To depend on this port in another port's Makefile:

RUN_DEPENDS=	dogtag-pki>0:security/dogtag-pki
LIB_DEPENDS=	libpki-tps.so:security/dogtag-pki

Packages

The version each package repository carries. “-” means the repository builds no package of it, “n/a” that there is no such repository.

Repositoryaarch64amd64armv6armv7i386
FreeBSD:14:latest11.10.1_211.10.1_2--11.10.1_2
FreeBSD:14:quarterly11.10.1_211.10.1_2n/a-11.10.1_2
FreeBSD:15:latest11.10.1_211.10.1_2n/a--
FreeBSD:15:quarterly11.10.1_211.10.1_2n/an/an/a
FreeBSD:16:latest11.10.1_211.10.1_2n/an/an/a
FreeBSD:16:quarterlyn/an/an/an/an/a

Dependencies

As this port's Makefile names them.

Build 3

Library 3

Runtime 8

The full lists below include those, and their dependencies in turn.

Build dependencies 102

The first 100 are listed.

Run dependencies 110

The first 100 are listed.

Required by 1

Configuration

No options to configure.

USES
cmake:indirect cpe java:build,run ldap pkgconfig python shebangfix
Service scripts
none

Files

pkg-plist 16
  • bin/pki
  • bin/pkidaemon
  • sbin/pki-server
  • sbin/pki-upgrade
  • sbin/pkidestroy
  • sbin/pkispawn
  • %%JAVAJARDIR%%/pki/pki-acme.jar
  • %%JAVAJARDIR%%/pki/pki-ca.jar
  • %%JAVAJARDIR%%/pki/pki-common.jar
  • %%JAVAJARDIR%%/pki/pki-server-webapp.jar
  • %%JAVAJARDIR%%/pki/pki-server.jar
  • %%JAVAJARDIR%%/pki/pki-tomcat-9.0.jar
  • %%JAVAJARDIR%%/pki/pki-tomcat.jar
  • %%JAVAJARDIR%%/pki/pki-tools.jar
  • @dir /var/log/pki
  • lib/libpki-tps.so
distinfo 1
FileSizeSHA256
dogtagpki-pki-v11.10.1_GH0.tar.gz1.0417315e+07dfd7bbabda5313b13f6c38cbdfce650ccbb053b5b1b03e1f5bda7d23ed01986c

Commit history 12

DateCommitCreditsLog message
2c0f1733ef Jochen Neumeister security/dogtag-pki: Add CPE information
Sponsored by: Netzkommune GmbH
26394c900f Jochen Neumeister security/dogtag-pki: Set the boot flag with sysrc
create_rc_service() wrote <instance>_enable="YES" into rc.conf.d, which is read after rc.conf and therefore overrode sysrc. The instance started at boot whatever the administrator had set, and under FreeIPA it came up before the Directory Server it needs. The flag now goes to rc.conf through sysrc. Sponsored by: Netzkommune GmbH
086564f40c Xin LI security/dogtag-pki: convert OpenLDAP dependency to USES=ldap
Replace hardcoded libldap.so:net/openldap26-client in LIB_DEPENDS with USES=ldap, letting the framework handle version selection. PR: ports/297779 Approved by: maintainer (joneum)
668d78489e Jochen Neumeister security/dogtag-pki: Fix incomplete javac classpath
base/tomcat-9.0 compiles against pki-common, whose classes carry @JsonInclude, but does not list jackson-annotations, so javac cannot resolve the annotation. Every other subproject already lists the jar. Sponsored by: Netzkommune GmbH
46d65614f6 Jochen Neumeister security/dogtag-pki: Update to 11.10.1
Switch to Java 21. Adapt the FreeBSD parts to the reworked upstream tree: guard the SELinux import and its call sites, replace the remaining runuser call with subprocess privilege switching, and pass APP_SERVER_CM through the environment, which 11.10 reads instead of the CMake define. Give pki-tomcatd a bounded stop. jsvc records the pid of its child in the pidfile while the parent handles SIGTERM, and Tomcat can deadlock in JSS while closing LDAP connections, so rc(8) would wait forever and stall the system shutdown. Changes: https://github.com/dogtagpki/pki/releases Sponsored by: Netzkommune GmbH

The latest 5 of 12 in the history this site was built from.