Thread: Re: [Ejbca-develop] patch to send approval requests to different email addresses

Brought to you by: anatom, hsunmark, karolinhem, mikekushner, and 2 others

ejbca-develop

Re: [Ejbca-develop] patch to send approval requests to different email addresses

From: Tomas G. <to...@pr...> - 2016-04-18 15:27:47

Thanks for the patch. Great solution for your use case.

In EJBCA we're nowadays requiring that configuration can be done in the
GUI, so users don't have to edit configuration files etc. So I would
like to add it as Admin GUI configuration somehow.

Would it be possible for you to outline how such a configuration would
ideally look if you could decide?

Regards,
Tomas
**********
PrimeKey Solutions AB
Lundagatan 16, 171 63 Solna, Sweden
Mob: +46 (0)707421096
Internet: www.primekey.se
Twitter: twitter.com/primekeyPKI
**********

On 2016-04-15 13:36, Andreas Paul wrote:
> Hi there,
> 
> we want to send certificate approval requests for different EEPs to
> different RA admin email addresses.
> Currently EJBCA only supports one email address for this under system
> configuration.
> 
> To configure the different RA admins mailing addresses we are using
> system properties in the JBoss configuration XML:
> 
> <system-properties>
>   <property name="end.entity.profile.1927555933.email"
> value="pki...@do..."/>
>   <property name="end.entity.profile.1338322978.email"
> value="pki...@do..."/>
>   <property name="end.entity.profile.1101666034.email"
> value="pki...@do..."/>
> </system-properties>
> 
> As you can see we use the unique ID of the end entity which should send
> the approval request to the specific email address.
> 
> You can lookup the unique ID of your end entity by querying your ejbca
> database:
> 
> select id, profilename from endentityprofiledata;
> 
> If there is no specific end entity email address configured if falls
> back to the original email address form the system configuration.
> 
> Github gist link:
> https://gist.github.com/xorpaul/822ecb5113137ac1c889e87c1ebc10ca
> 
> Kind regards,
> 
> Andreas Paul
> 
> 
> 
> 
> ------------------------------------------------------------------------------
> Find and fix application performance issues faster with Applications Manager
> Applications Manager provides deep performance insights into multiple tiers of
> your business applications. It resolves application problems quickly and
> reduces your MTTR. Get your free trial!
> https://ad.doubleclick.net/ddm/clk/302982198;130105516;z
> 
> 
> 
> _______________________________________________
> Ejbca-develop mailing list
> Ejb...@li...
> https://lists.sourceforge.net/lists/listinfo/ejbca-develop
>

Re: [Ejbca-develop] patch to send approval requests to different email addresses

From: Ralf H. <rh...@hc...> - 2016-04-18 18:09:08

Attachments: smime.p7s

How about an extra field in the end entity profile properties with the name
"Approval Email"

-----Ursprüngliche Nachricht-----
Von: Tomas Gustavsson [mailto:to...@pr...] 
Gesendet: Montag, 18. April 2016 17:28
An: ejb...@li...
Betreff: Re: [Ejbca-develop] patch to send approval requests to different
email addresses


Thanks for the patch. Great solution for your use case.

In EJBCA we're nowadays requiring that configuration can be done in the GUI,
so users don't have to edit configuration files etc. So I would like to add
it as Admin GUI configuration somehow.

Would it be possible for you to outline how such a configuration would
ideally look if you could decide?

Regards,
Tomas
**********
PrimeKey Solutions AB
Lundagatan 16, 171 63 Solna, Sweden
Mob: +46 (0)707421096
Internet: www.primekey.se
Twitter: twitter.com/primekeyPKI
**********

On 2016-04-15 13:36, Andreas Paul wrote:
> Hi there,
> 
> we want to send certificate approval requests for different EEPs to 
> different RA admin email addresses.
> Currently EJBCA only supports one email address for this under system 
> configuration.
> 
> To configure the different RA admins mailing addresses we are using 
> system properties in the JBoss configuration XML:
> 
> <system-properties>
>   <property name="end.entity.profile.1927555933.email"
> value="pki...@do..."/>
>   <property name="end.entity.profile.1338322978.email"
> value="pki...@do..."/>
>   <property name="end.entity.profile.1101666034.email"
> value="pki...@do..."/>
> </system-properties>
> 
> As you can see we use the unique ID of the end entity which should 
> send the approval request to the specific email address.
> 
> You can lookup the unique ID of your end entity by querying your ejbca
> database:
> 
> select id, profilename from endentityprofiledata;
> 
> If there is no specific end entity email address configured if falls 
> back to the original email address form the system configuration.
> 
> Github gist link:
> https://gist.github.com/xorpaul/822ecb5113137ac1c889e87c1ebc10ca
> 
> Kind regards,
> 
> Andreas Paul
> 
> 
> 
> 
> ----------------------------------------------------------------------
> -------- Find and fix application performance issues faster with 
> Applications Manager Applications Manager provides deep performance 
> insights into multiple tiers of your business applications. It 
> resolves application problems quickly and reduces your MTTR. Get your 
> free trial!
> https://ad.doubleclick.net/ddm/clk/302982198;130105516;z
> 
> 
> 
> _______________________________________________
> Ejbca-develop mailing list
> Ejb...@li...
> https://lists.sourceforge.net/lists/listinfo/ejbca-develop
> 

----------------------------------------------------------------------------
--
Find and fix application performance issues faster with Applications Manager
Applications Manager provides deep performance insights into multiple tiers
of your business applications. It resolves application problems quickly and
reduces your MTTR. Get your free trial!
https://ad.doubleclick.net/ddm/clk/302982198;130105516;z
_______________________________________________
Ejbca-develop mailing list
Ejb...@li...
https://lists.sourceforge.net/lists/listinfo/ejbca-develop

Re: [Ejbca-develop] patch to send approval requests to different email addresses

From: Michael S. <mi...@st...> - 2016-04-18 20:13:27

Attachments: smime.p7s

Ralf Hornik wrote:
> How about an extra field in the end entity profile properties with the name
> "Approval Email"

Yupp. An option in the end entity profile would be the most appropriate
solution. I guess Andreas would also appreciate that. ;-)

Ciao, Michael.

> -----Ursprüngliche Nachricht-----
> Von: Tomas Gustavsson [mailto:to...@pr...] 
> Gesendet: Montag, 18. April 2016 17:28
> An: ejb...@li...
> Betreff: Re: [Ejbca-develop] patch to send approval requests to different
> email addresses
> 
> 
> Thanks for the patch. Great solution for your use case.
> 
> In EJBCA we're nowadays requiring that configuration can be done in the GUI,
> so users don't have to edit configuration files etc. So I would like to add
> it as Admin GUI configuration somehow.
> 
> Would it be possible for you to outline how such a configuration would
> ideally look if you could decide?
> 
> Regards,
> Tomas
> **********
> PrimeKey Solutions AB
> Lundagatan 16, 171 63 Solna, Sweden
> Mob: +46 (0)707421096
> Internet: www.primekey.se
> Twitter: twitter.com/primekeyPKI
> **********
> 
> On 2016-04-15 13:36, Andreas Paul wrote:
>> Hi there,
>>
>> we want to send certificate approval requests for different EEPs to 
>> different RA admin email addresses.
>> Currently EJBCA only supports one email address for this under system 
>> configuration.
>>
>> To configure the different RA admins mailing addresses we are using 
>> system properties in the JBoss configuration XML:
>>
>> <system-properties>
>>   <property name="end.entity.profile.1927555933.email"
>> value="pki...@do..."/>
>>   <property name="end.entity.profile.1338322978.email"
>> value="pki...@do..."/>
>>   <property name="end.entity.profile.1101666034.email"
>> value="pki...@do..."/>
>> </system-properties>
>>
>> As you can see we use the unique ID of the end entity which should 
>> send the approval request to the specific email address.
>>
>> You can lookup the unique ID of your end entity by querying your ejbca
>> database:
>>
>> select id, profilename from endentityprofiledata;
>>
>> If there is no specific end entity email address configured if falls 
>> back to the original email address form the system configuration.
>>
>> Github gist link:
>> https://gist.github.com/xorpaul/822ecb5113137ac1c889e87c1ebc10ca
>>
>> Kind regards,
>>
>> Andreas Paul

Re: [Ejbca-develop] patch to send approval requests to different email addresses

From: Andreas K. <ku...@tr...> - 2016-04-18 21:03:47

Hi folks,

yes, a '+1' from me! The  end entity profile is a good starting point
for  RA officer wakeup call!

Greetings,

Andreas
> Ralf Hornik wrote:
>> How about an extra field in the end entity profile properties with the name
>> "Approval Email"
> Yupp. An option in the end entity profile would be the most appropriate
> solution. I guess Andreas would also appreciate that. ;-)
>
> Ciao, Michael.
>
>> -----Ursprüngliche Nachricht-----
>> Von: Tomas Gustavsson [mailto:to...@pr...] 
>> Gesendet: Montag, 18. April 2016 17:28
>> An: ejb...@li...
>> Betreff: Re: [Ejbca-develop] patch to send approval requests to different
>> email addresses
>>
>>
>> Thanks for the patch. Great solution for your use case.
>>
>> In EJBCA we're nowadays requiring that configuration can be done in the GUI,
>> so users don't have to edit configuration files etc. So I would like to add
>> it as Admin GUI configuration somehow.
>>
>> Would it be possible for you to outline how such a configuration would
>> ideally look if you could decide?
>>
>> Regards,
>> Tomas
>> **********
>> PrimeKey Solutions AB
>> Lundagatan 16, 171 63 Solna, Sweden
>> Mob: +46 (0)707421096
>> Internet: www.primekey.se
>> Twitter: twitter.com/primekeyPKI
>> **********
>>
>> On 2016-04-15 13:36, Andreas Paul wrote:
>>> Hi there,
>>>
>>> we want to send certificate approval requests for different EEPs to 
>>> different RA admin email addresses.
>>> Currently EJBCA only supports one email address for this under system 
>>> configuration.
>>>
>>> To configure the different RA admins mailing addresses we are using 
>>> system properties in the JBoss configuration XML:
>>>
>>> <system-properties>
>>>   <property name="end.entity.profile.1927555933.email"
>>> value="pki...@do..."/>
>>>   <property name="end.entity.profile.1338322978.email"
>>> value="pki...@do..."/>
>>>   <property name="end.entity.profile.1101666034.email"
>>> value="pki...@do..."/>
>>> </system-properties>
>>>
>>> As you can see we use the unique ID of the end entity which should 
>>> send the approval request to the specific email address.
>>>
>>> You can lookup the unique ID of your end entity by querying your ejbca
>>> database:
>>>
>>> select id, profilename from endentityprofiledata;
>>>
>>> If there is no specific end entity email address configured if falls 
>>> back to the original email address form the system configuration.
>>>
>>> Github gist link:
>>> https://gist.github.com/xorpaul/822ecb5113137ac1c889e87c1ebc10ca
>>>
>>> Kind regards,
>>>
>>> Andreas Paul
>
>
> ------------------------------------------------------------------------------
> Find and fix application performance issues faster with Applications Manager
> Applications Manager provides deep performance insights into multiple tiers of
> your business applications. It resolves application problems quickly and
> reduces your MTTR. Get your free trial!
> https://ad.doubleclick.net/ddm/clk/302982198;130105516;z
>
>
> _______________________________________________
> Ejbca-develop mailing list
> Ejb...@li...
> https://lists.sourceforge.net/lists/listinfo/ejbca-develop


-- 
Andreas Kühne 
phone: +49 177 293 24 97 
mailto: ku...@tr...

Trustable Ltd. Niederlassung Deutschland Gartenheimstr. 39C - 30659 Hannover Amtsgericht Hannover HRB 212612

Director Andreas Kühne

Company UK Company No: 5218868 Registered in England and Wales

Re: [Ejbca-develop] patch to send approval requests to different email addresses

From: Andreas P. <xo...@gm...> - 2016-04-19 16:54:04

Yes, I agree. A simple text field in the EEP to override the general system
configuration RA admin email address.
On Apr 18, 2016 23:04, "Andreas Kuehne" <ku...@tr...> wrote:

> Hi folks,
>
> yes, a '+1' from me! The  end entity profile is a good starting point for
> RA officer wakeup call!
>
> Greetings,
>
> Andreas
>
> Ralf Hornik wrote:
>
> How about an extra field in the end entity profile properties with the name
> "Approval Email"
>
>
> Yupp. An option in the end entity profile would be the most appropriate
> solution. I guess Andreas would also appreciate that. ;-)
>
> Ciao, Michael.
>
>
> -----Ursprüngliche Nachricht-----
> Von: Tomas Gustavsson [mailto:to...@pr... <to...@pr...>]
> Gesendet: Montag, 18. April 2016 17:28
> An: ejb...@li...
> Betreff: Re: [Ejbca-develop] patch to send approval requests to different
> email addresses
>
>
> Thanks for the patch. Great solution for your use case.
>
> In EJBCA we're nowadays requiring that configuration can be done in the GUI,
> so users don't have to edit configuration files etc. So I would like to add
> it as Admin GUI configuration somehow.
>
> Would it be possible for you to outline how such a configuration would
> ideally look if you could decide?
>
> Regards,
> Tomas
> **********
> PrimeKey Solutions AB
> Lundagatan 16, 171 63 Solna, Sweden
> Mob: +46 (0)707421096
> Internet: www.primekey.se
> Twitter: twitter.com/primekeyPKI
> **********
>
> On 2016-04-15 13:36, Andreas Paul wrote:
>
> Hi there,
>
> we want to send certificate approval requests for different EEPs to
> different RA admin email addresses.
> Currently EJBCA only supports one email address for this under system
> configuration.
>
> To configure the different RA admins mailing addresses we are using
> system properties in the JBoss configuration XML:
>
> <system-properties>
>   <property name="end.entity.profile.1927555933.email"
> value="pki...@do..." <pki...@do...>/>
>   <property name="end.entity.profile.1338322978.email"
> value="pki...@do..." <pki...@do...>/>
>   <property name="end.entity.profile.1101666034.email"
> value="pki...@do..." <pki...@do...>/>
> </system-properties>
>
> As you can see we use the unique ID of the end entity which should
> send the approval request to the specific email address.
>
> You can lookup the unique ID of your end entity by querying your ejbca
> database:
>
> select id, profilename from endentityprofiledata;
>
> If there is no specific end entity email address configured if falls
> back to the original email address form the system configuration.
>
> Github gist link:https://gist.github.com/xorpaul/822ecb5113137ac1c889e87c1ebc10ca
>
> Kind regards,
>
> Andreas Paul
>
>
>
> ------------------------------------------------------------------------------
> Find and fix application performance issues faster with Applications Manager
> Applications Manager provides deep performance insights into multiple tiers of
> your business applications. It resolves application problems quickly and
> reduces your MTTR. Get your free trial!https://ad.doubleclick.net/ddm/clk/302982198;130105516;z
>
>
>
> _______________________________________________
> Ejbca-develop mailing lis...@li...://lists.sourceforge.net/lists/listinfo/ejbca-develop
>
>
>
> --
> Andreas Kühne
> phone: +49 177 293 24 97
> mailto: ku...@tr...
>
> Trustable Ltd. Niederlassung Deutschland Gartenheimstr. 39C - 30659 Hannover Amtsgericht Hannover HRB 212612
>
> Director Andreas Kühne
>
> Company UK Company No: 5218868 Registered in England and Wales
>
>
>
> ------------------------------------------------------------------------------
> Find and fix application performance issues faster with Applications
> Manager
> Applications Manager provides deep performance insights into multiple
> tiers of
> your business applications. It resolves application problems quickly and
> reduces your MTTR. Get your free trial!
> https://ad.doubleclick.net/ddm/clk/302982198;130105516;z
> _______________________________________________
> Ejbca-develop mailing list
> Ejb...@li...
> https://lists.sourceforge.net/lists/listinfo/ejbca-develop
>
>

Re: [Ejbca-develop] patch to send approval requests to different email addresses

From: Tomas G. <to...@pr...> - 2016-04-22 08:57:23

Hi,

I created a Jira issue for this.

https://jira.primekey.se/browse/ECA-5017

(Dev-pipeline is really full at the moment, you will see new exciting
things in the fall)

Regards,
Tomas

On 2016-04-18 19:52, Ralf Hornik wrote:
> How about an extra field in the end entity profile properties with the name
> "Approval Email"
> 
> -----Ursprüngliche Nachricht-----
> Von: Tomas Gustavsson [mailto:to...@pr...] 
> Gesendet: Montag, 18. April 2016 17:28
> An: ejb...@li...
> Betreff: Re: [Ejbca-develop] patch to send approval requests to different
> email addresses
> 
> 
> Thanks for the patch. Great solution for your use case.
> 
> In EJBCA we're nowadays requiring that configuration can be done in the GUI,
> so users don't have to edit configuration files etc. So I would like to add
> it as Admin GUI configuration somehow.
> 
> Would it be possible for you to outline how such a configuration would
> ideally look if you could decide?
> 
> Regards,
> Tomas
> **********
> PrimeKey Solutions AB
> Lundagatan 16, 171 63 Solna, Sweden
> Mob: +46 (0)707421096
> Internet: www.primekey.se
> Twitter: twitter.com/primekeyPKI
> **********
> 
> On 2016-04-15 13:36, Andreas Paul wrote:
>> Hi there,
>>
>> we want to send certificate approval requests for different EEPs to 
>> different RA admin email addresses.
>> Currently EJBCA only supports one email address for this under system 
>> configuration.
>>
>> To configure the different RA admins mailing addresses we are using 
>> system properties in the JBoss configuration XML:
>>
>> <system-properties>
>>   <property name="end.entity.profile.1927555933.email"
>> value="pki...@do..."/>
>>   <property name="end.entity.profile.1338322978.email"
>> value="pki...@do..."/>
>>   <property name="end.entity.profile.1101666034.email"
>> value="pki...@do..."/>
>> </system-properties>
>>
>> As you can see we use the unique ID of the end entity which should 
>> send the approval request to the specific email address.
>>
>> You can lookup the unique ID of your end entity by querying your ejbca
>> database:
>>
>> select id, profilename from endentityprofiledata;
>>
>> If there is no specific end entity email address configured if falls 
>> back to the original email address form the system configuration.
>>
>> Github gist link:
>> https://gist.github.com/xorpaul/822ecb5113137ac1c889e87c1ebc10ca
>>
>> Kind regards,
>>
>> Andreas Paul
>>
>>
>>
>>
>> ----------------------------------------------------------------------
>> -------- Find and fix application performance issues faster with 
>> Applications Manager Applications Manager provides deep performance 
>> insights into multiple tiers of your business applications. It 
>> resolves application problems quickly and reduces your MTTR. Get your 
>> free trial!
>> https://ad.doubleclick.net/ddm/clk/302982198;130105516;z
>>
>>
>>
>> _______________________________________________
>> Ejbca-develop mailing list
>> Ejb...@li...
>> https://lists.sourceforge.net/lists/listinfo/ejbca-develop
>>
> 
> ----------------------------------------------------------------------------
> --
> Find and fix application performance issues faster with Applications Manager
> Applications Manager provides deep performance insights into multiple tiers
> of your business applications. It resolves application problems quickly and
> reduces your MTTR. Get your free trial!
> https://ad.doubleclick.net/ddm/clk/302982198;130105516;z
> _______________________________________________
> Ejbca-develop mailing list
> Ejb...@li...
> https://lists.sourceforge.net/lists/listinfo/ejbca-develop
> 
> 
> 
> ------------------------------------------------------------------------------
> Find and fix application performance issues faster with Applications Manager
> Applications Manager provides deep performance insights into multiple tiers of
> your business applications. It resolves application problems quickly and
> reduces your MTTR. Get your free trial!
> https://ad.doubleclick.net/ddm/clk/302982198;130105516;z
> 
> 
> 
> _______________________________________________
> Ejbca-develop mailing list
> Ejb...@li...
> https://lists.sourceforge.net/lists/listinfo/ejbca-develop
>

Re: [Ejbca-develop] patch to send approval requests to different email addresses

From: Andreas K. <ku...@tr...> - 2016-04-22 09:08:27

Hi Tomas,
> (Dev-pipeline is really full at the moment, you will see new exciting
> things in the fall)
can you give us a small hint? Don't want to spend the summer building
stuff that will be included in ejbca better & smarter in fall!

Greetings,

Andreas

Re: [Ejbca-develop] patch to send approval requests to different email addresses

From: Tomas G. <to...@pr...> - 2016-04-22 12:00:08

Hi Andreas,

Hints are:
- A new RA function
- Much improved Approvals (connected with the new RA functionality)

The email issue discussed here will probably be solved very nicely with
Approval Profiles.
https://jira.primekey.se/browse/ECA-4907

Regards,
Tomas

On 2016-04-22 11:06, Andreas Kuehne wrote:
> Hi Tomas,
>> (Dev-pipeline is really full at the moment, you will see new exciting
>> things in the fall)
> can you give us a small hint? Don't want to spend the summer building
> stuff that will be included in ejbca better & smarter in fall!
> 
> Greetings,
> 
> Andreas
> 
> ------------------------------------------------------------------------------
> Find and fix application performance issues faster with Applications Manager
> Applications Manager provides deep performance insights into multiple tiers of
> your business applications. It resolves application problems quickly and
> reduces your MTTR. Get your free trial!
> https://ad.doubleclick.net/ddm/clk/302982198;130105516;z
> _______________________________________________
> Ejbca-develop mailing list
> Ejb...@li...
> https://lists.sourceforge.net/lists/listinfo/ejbca-develop
>

Re: [Ejbca-develop] patch to send approval requests to different email addresses

From: Andreas K. <ku...@tr...> - 2016-04-22 12:14:36

Hi Tomas,
> Hints are:
> - A new RA function
> - Much improved Approvals (connected with the new RA functionality)
>
> The email issue discussed here will probably be solved very nicely with
> Approval Profiles.
> https://jira.primekey.se/browse/ECA-4907
thanks very much! This indeed may affect my planning!

Greetings,

Andreas

> On 2016-04-22 11:06, Andreas Kuehne wrote:
>> Hi Tomas,
>>> (Dev-pipeline is really full at the moment, you will see new exciting
>>> things in the fall)
>> can you give us a small hint? Don't want to spend the summer building
>> stuff that will be included in ejbca better & smarter in fall!
>>
>> Greetings,
>>
>> Andreas
>>
>> ------------------------------------------------------------------------------
>> Find and fix application performance issues faster with Applications Manager
>> Applications Manager provides deep performance insights into multiple tiers of
>> your business applications. It resolves application problems quickly and
>> reduces your MTTR. Get your free trial!
>> https://ad.doubleclick.net/ddm/clk/302982198;130105516;z
>> _______________________________________________
>> Ejbca-develop mailing list
>> Ejb...@li...
>> https://lists.sourceforge.net/lists/listinfo/ejbca-develop
>>
> ------------------------------------------------------------------------------
> Find and fix application performance issues faster with Applications Manager
> Applications Manager provides deep performance insights into multiple tiers of
> your business applications. It resolves application problems quickly and
> reduces your MTTR. Get your free trial!
> https://ad.doubleclick.net/ddm/clk/302982198;130105516;z
> _______________________________________________
> Ejbca-develop mailing list
> Ejb...@li...
> https://lists.sourceforge.net/lists/listinfo/ejbca-develop
>


-- 
Andreas Kühne 
phone: +49 177 293 24 97 
mailto: ku...@tr...

Trustable Ltd. Niederlassung Deutschland Gartenheimstr. 39C - 30659 Hannover Amtsgericht Hannover HRB 212612

Director Andreas Kühne

Company UK Company No: 5218868 Registered in England and Wales