add linkcheck_ignore (jakarta)

Issue-ID: DOC-782

Signed-off-by: thmsdt <thomas.kulik@telekom.de>
Change-Id: Id240ba300b36b5eed4ab4322bf33d873582d15de

[DOC] Add bounds to sphinx requirement

As ONAP was created before Oct 20 2020 in RTD, we
must set bounds to enforce a compatible Sphinx version
(see manual).

Issue-ID: DOC-782

Signed-off-by: Cédric Ollivier <cedric.ollivier@orange.com>
Change-Id: Ie56dddc03ac49deb16499f5c84b81486eeb6580a
(cherry picked from commit dd003c40dfcad606e1417f019d1d7ffa9e8cb050)

Merge "[DOC] Leverage the right upper-constraints" into jakarta

[DOC] Leverage the right upper-constraints

Issue-ID: DOC-782

Signed-off-by: Cédric Ollivier <cedric.ollivier@orange.com>
Change-Id: I4a57a84ce13d262a2364e401667c23ba96841f3b

[DOCS] Update J release notes for cert-service

Update the expired certificates and recreate the docker files
Update the release notes and update some Sphinx  files
Fix some linting problems in the files

Issue-ID: OOM-2953

Signed-off-by: Andreas Geissler <andreas-geissler@telekom.de>
Change-Id: I1a26d7289890eee7fb38b11a45da3db5fc70ba8d
(cherry picked from commit 187d1435142c50e627890ddd5049a9f43ebbe1a2)

[OOM-CERT-SERVICE] Fix expired certificates in cert-service

Issue-ID: OOM-2953
Signed-off-by: Tomasz Wrobel <tomasz.wrobel@nokia.com>
Change-Id: I176a475ad1af5c18a667cd18ac23e95cfe5b0138

[COMMITTER] Add Jack Lucas as committer

Issue-ID: OOM-1
Signed-off-by: Sylvain Desbureaux <sylvain.desbureaux@orange.com>
Change-Id: Ifd6d94709b16280c45f86bb9d8eb8a0ad49c0075

Merge "[OOM-CERT-SERVICE] Add change-log"

[OOM-CERT-SERVICE] Add change-log

Issue-ID: OOM-2903
Signed-off-by: Tomasz Wrobel <tomasz.wrobel@nokia.com>
Change-Id: Ib7ec0923d6bcf8b2835111238b2e20a300d6fc64

[OOM-CERT-SERVICE] Release 2.5.0

Issue-ID: OOM-2903
Signed-off-by: Tomasz Wrobel <tomasz.wrobel@nokia.com>
Change-Id: Idd923c1a0b30a259e584ad407929e4e68f8006fd

Merge changes I816c59e3,I99e55519

* changes:
  [OOM-CERT-SERVICE]Fix Apache log4j2 vulnerability
  Top up project version to 2.5.0

[OOM-CERT-SERVICE]Fix Apache log4j2 vulnerability

- Top up spring-boot to 2.5.8
- Top up Apache log4j2 to 2.17.1
- Top up spring-boot-starter-log4j2 to 2.6.2
- Add miising validator bean

Issue-ID: OOM-2903
Signed-off-by: Tomasz Wrobel <tomasz.wrobel@nokia.com>
Change-Id: I816c59e39344bb1fcc2833bcbd58af7fc1c30d78

Top up project version to 2.5.0

Issue-ID: OOM-2903

Signed-off-by: Tomasz Wrobel <tomasz.wrobel@nokia.com>
Change-Id: I99e55519d8ffcebb797763bdef3d8a8c7ec5fd7a

[DOC] Correct requirements for doc chain building

Issue-ID: DOC-765

Signed-off-by: thmsdt <thomas.kulik@telekom.de>
Change-Id: I1bab49f825d76d45135d343706226dbfa8e41221

Describe manual actions for certificate update

Issue-ID: OOM-2752
Signed-off-by: Joanna Jeremicz <joanna.jeremicz@nokia.com>
Change-Id: I4898e2b36aed2954be54f9a85f77287894a0483f

Update RTD Offered APIs section to use OpenAPI.yaml file
Update Certificate update section in RTD

Issue-ID: OOM-2754
Signed-off-by: Remigiusz Janeczek <remigiusz.janeczek@nokia.com>
Change-Id: Ia673a8bf449fca3fba52fb88374b7b418c23c6eb
Signed-off-by: Joanna Jeremicz <joanna.jeremicz@nokia.com>

[OOM-CERT-SERVICE] Release 2.4.0

Issue-ID: OOM-2754
Signed-off-by: Piotr Marcinkiewicz <piotr.marcinkiewicz@nokia.com>
Change-Id: I4b2d64fff6de6ff7947145c312e019e5b93e7ceb

Merge "Update RTD with certificate update use case"

Update RTD with certificate update use case

- Update change log and release notes
- Update "How to use" page

Issue-ID: OOM-2754
Signed-off-by: Joanna Jeremicz <joanna.jeremicz@nokia.com>
Change-Id: I32b34bdf37142f5bc8b62fe96248c29b349e541a

[OOM-K8S-CERT-EXTERNAL-PROVIDER] Add handling request when updateEnpoint is missing

Issue-ID: OOM-2753
Signed-off-by: Tomasz Wrobel <tomasz.wrobel@nokia.com>
Change-Id: I06fc3043787631b83cc776b1e446700bd13f9863

[OOM-K8S-CERT-EXTERNAL-PROVIDER] Refactor provider code

- add csr and key params to SignCertificateModel
- correct handling error when signing csr fails
- create factory for SignCertificateModel

Issue-ID: OOM-2753
Signed-off-by: Piotr Marcinkiewicz <piotr.marcinkiewicz@nokia.com>
Change-Id: I9bc296dfc999de0390ec90a00cbaa9dd82c89265

Merge "[OOM-CERT-SERVICE] Add CertificateDecriptionException handler"

Merge "[OOM-CERT-SERVICE] Refactor CmpResponseValidationHelper"

[OOM-CERT-SERVICE] Update OpenAPI

- Update OpenAPI after introduction certificate update endpoint

Issue-ID: OOM-2753
Signed-off-by: Piotr Marcinkiewicz <piotr.marcinkiewicz@nokia.com>
Change-Id: I16117a9dc9f854ba04b39ca1133c19d052e8f7db

[OOM-CERT-SERVICE] Add CertificateDecriptionException handler

Issue-ID: OOM-2753
Signed-off-by: Piotr Marcinkiewicz <piotr.marcinkiewicz@nokia.com>
Change-Id: If4f705b11cdaf1c98f49875b40eb970563d4c3dd

Merge "[OOM-K8S-CERT-EXTERNAL-PROVIDER] Add send update request functionality"

[OOM-CERT-SERVICE] Refactor CmpResponseValidationHelper

- move to validation package
- adjust methods modifiers
- remove duplicated code (getProtectedBytes)

Issue-ID: OOM-2753
Signed-off-by: Piotr Marcinkiewicz <piotr.marcinkiewicz@nokia.com>
Change-Id: I2dd977ac136e2d1f99338f2c92b36b19651426df

[OOM-K8S-CERT-EXTERNAL-PROVIDER] Add send update request functionality

Issue-ID: OOM-2753
Signed-off-by: Tomasz Wrobel <tomasz.wrobel@nokia.com>
Change-Id: I0637ded5c870cc66c7dc27dff269dab0f7d9015b

[OOM-CERT-SERVICE] Improve logging

Issue-ID: OOM-2753
Signed-off-by: Joanna Jeremicz <joanna.jeremicz@nokia.com>
Change-Id: If61f56cf0a54cc0084481613ff984ae01655c942

Merge "[OOM-CERT-SERVICE] Refactor CertService API code"

Merge "[OOM-CERT-SERVICE] Fix sonar and checkstyle issues, code cleanup"

[OOM-CERT-SERVICE] Remove CaMode from Cmpv2Server configuration

Issue-ID: OOM-2753
Signed-off-by: Remigiusz Janeczek <remigiusz.janeczek@nokia.com>
Change-Id: I10662551a315a0b38b1213513d07ab2a4ccf5326

[OOM-CERT-SERVICE] Refactor CertService API code

- move conversion StringBase64 to PrivateKey to separate class
- move protection algorithm classes to separate package
- adjust modifiers and test to above changes

Issue-ID: OOM-2753
Signed-off-by: Piotr Marcinkiewicz <piotr.marcinkiewicz@nokia.com>
Change-Id: Ifafa38162acfcd59d5177dbc478a6209e97a18e3

[OOM-CERT-SERVICE] Fix sonar and checkstyle issues, code cleanup

Issue-ID: OOM-2753
Signed-off-by: Remigiusz Janeczek <remigiusz.janeczek@nokia.com>
Change-Id: Id88b6b2bceba7258745e4ce999dd375fb9ce438f

Merge "[OOM-K8S-CERT-EXTERNAL-PROVIDER] Add check if cert should be updated"

Merge "[OOM-CERT-SERVICE] Add Unit test for private key in pkcs1 format"

[OOM-CERT-SERVICE] Alignment of makefile

- Add more SANs to openssl request creation
- Add customization of CA destination

Issue-ID: OOM-2753
Signed-off-by: Tomasz Wrobel <tomasz.wrobel@nokia.com>
Change-Id: I409a874983bdc7cda61195086549abc30259fb3c

[OOM-CERT-SERVICE] Add Unit test for private key in pkcs1 format

Issue-ID: OOM-2753
Signed-off-by: Tomasz Wrobel <tomasz.wrobel@nokia.com>
Change-Id: I91000b223c30eae1cd9f4d48be9e8197e239e1d2

[OOM-CERT-SERVICE] Code refactor

- Rename methods names to more descriptive ones
- Group classes in packages
- Simplify certificate model usage in KUR (use BouncyCastle object)

Issue-ID: OOM-2753
Signed-off-by: Joanna Jeremicz <joanna.jeremicz@nokia.com>
Change-Id: I0507752b8d74a71ef27545648c2045f2033a330a

[OOM-K8S-CERT-EXTERNAL-PROVIDER] Add check if cert should be updated

Issue-ID: OOM-2753
Signed-off-by: Remigiusz Janeczek <remigiusz.janeczek@nokia.com>
Change-Id: If0d7154b39c9ca7f9a7942f61b93725405b8f4e8

Merge "[OOM-CERT-SERVICE] Add Certification Request functionality"

Merge "[OOM-K8S-CERT-EXTERNAL-PROVIDER] Format golang code"

[OOM-K8S-CERT-EXTERNAL-PROVIDER] Format golang code

Issue-ID: OOM-2753
Signed-off-by: Remigiusz Janeczek <remigiusz.janeczek@nokia.com>
Change-Id: I7b2f83dff5f7894b3064461b523bd94a77cac1f3

[OOM-CERT-SERVICE] Add Certification Request functionality

Issue-ID: OOM-2753
Signed-off-by: Joanna Jeremicz <joanna.jeremicz@nokia.com>
Change-Id: Id8702dd45254f0e82d9b71e5e69372569e523838

[OOM-CERT-SERVICE] Add Key Update Request functionality

Issue-ID: OOM-2753
Signed-off-by: Tomasz Wrobel <tomasz.wrobel@nokia.com>
Change-Id: Icecef30b830c38606e17fbc2c502208543d048d2

[OOM-CERT-SERVICE] Fix EJBCA "CA with name - does not exist" error

When sending KUR request to EJBCA it fails with error:
"CA with name - does not exist"

Issue-ID: OOM-2753
Signed-off-by: Remigiusz Janeczek <remigiusz.janeczek@nokia.com>
Change-Id: I19d41fd1c8718d5b7e82f361d398c1ebe2545401

Merge "[OOM-CERT-SERVICE] Add Certificate Update Admin role"

[OOM-CERT-SERVICE] Fix makefile requests

Issue-ID: OOM-2753
Signed-off-by: Remigiusz Janeczek <remigiusz.janeczek@nokia.com>
Change-Id: Ic295f805b8aea6f13b95e6c972037066471a5faa

Merge "[OOM-CERT-SERVICE] Add logic for KUR/CR detection"

Merge "[OOM-CERT-SERVICE] Modify EJBCA configuration"

Merge "[OOM-CERT-SERVICE] Add handling cmp response when PBM value is missing."

[OOM-CERT-SERVICE] Add logic for KUR/CR detection

Issue-ID: OOM-2753
Signed-off-by: Remigiusz Janeczek <remigiusz.janeczek@nokia.com>
Change-Id: I571ad3914a870dde83929cb6121c2c63a5df3ae4

[OOM-CERT-SERVICE] Modify EJBCA configuration

- Do not create default ManagementCA with generated UID
- Create ManagementCA with hardcoded UID to allow performing KUR

Issue-ID: OOM-2753
Signed-off-by: Joanna Jeremicz <joanna.jeremicz@nokia.com>
Change-Id: Ief51c27200300118ffa0206ba2657504ce4bc69c

[OOM-CERT-SERVICE] Add handling cmp response when PBM value is missing.

Issue-ID: OOM-2753
Signed-off-by: Tomasz Wrobel <tomasz.wrobel@nokia.com>
Change-Id: I38de28c994b5c83f936b3b5ea47d024a96f4733e

[OOM-CERT-SERVICE] Add curl requests to Makefile

Increase max header size (default was too low for update
requests)

Issue-ID: OOM-2753
Change-Id: I3614d8d34ed18ae52cec8fb4f9349e170c2ac3af
Signed-off-by: Remigiusz Janeczek <remigiusz.janeczek@nokia.com>

[OOM-CERT-SERVICE] Add Certificate Update Admin role

Add Certificate Update Admin role in order to allow performing
KUR/CR in EJBCA.

Issue-ID: OOM-2753
Signed-off-by: Piotr Marcinkiewicz <piotr.marcinkiewicz@nokia.com>
Change-Id: Ib07a694c6a88d5ad58059cd331d2eddbcaf8a97b

Merge "[OOM-CERT-SERVICE] Add update endpoint"

[OOM-CERT-SERVICE] Add update endpoint

- Add endpoint with old cert and old PK parameters
for KUR/CR requests

Issue-ID: OOM-2753
Signed-off-by: Piotr Marcinkiewicz <piotr.marcinkiewicz@nokia.com>
Change-Id: I094ce1a39a11bbb94f94e0b13ca7ff71eb99dd30

[OOM-CERT-SERVICE] Implement signature PKIMessage protection

- Add signature protection
- Refactor password-based protection code
- Add JUnit tests

Issue-ID: OOM-2753
Signed-off-by: Piotr Marcinkiewicz <piotr.marcinkiewicz@nokia.com>
Change-Id: I398568a35e52a816c32646c8915db5c287ede401

Merge "Fix sonar issues"

Merge "[OOM-CERT-SERVICE] Deprecate certServiceClient - update docs"

Merge "[OOM-CERT-SERVICE] Fix cmpv2 issuer error when CRD is removed"

[OOM-CERT-SERVICE] Fix cmpv2 issuer error when CRD is removed

Issue-ID: OOM-2771
Signed-off-by: Tomasz Wrobel <tomasz.wrobel@nokia.com>
Change-Id: I28f7a0d7fb3e7f6227b0a4ac64ca45c274956b8e

[OOM-CERT-SERVICE] Deprecate certServiceClient - update docs

- Remove certServiceClient description from docs
- Move descrption of CMPv2 provider to "How to use functionality"
- Update description of getting certs for CertService in OOM
- Update certService version to 2.4.0

Issue-ID: OOM-2744
Signed-off-by: Piotr Marcinkiewicz <piotr.marcinkiewicz@nokia.com>
Change-Id: I283755b8fbd579646f979c88ea3022266855c4dc

Fix sonar issues

Issue-ID: OOM-2764
Signed-off-by: Remigiusz Janeczek <remigiusz.janeczek@nokia.com>
Change-Id: Iab71cbcac1982207e6f29b4b046280ad27143e03

Merge "[OOM-CERT-SERVICE] Configure EJBCA to handle Key Update Request"

Deprecate certServiceClient

- disable certServiceClient submodule
- set fixed version for certServiceClient image usage

Issue-ID: OOM-2744
Signed-off-by: Remigiusz Janeczek <remigiusz.janeczek@nokia.com>
Change-Id: Ibfca21ffe4310e7a5d124853c4b33c1c481f10a8

[OOM-CERT-SERVICE] Configure EJBCA to handle Key Update Request

Change RA response protection from pbe to signature, set HMAC
and End entity certificate authentication in order to enable
Key Update Request in EJBCA. Set default CA, which will sign
Confirmation Response message.

Issue-ID: OOM-2753
Signed-off-by: Piotr Marcinkiewicz <piotr.marcinkiewicz@nokia.com>
Change-Id: I1ab13b0a55711291a8c2a1448ae3497747348d67

[OOM-CERT-SERVICE] Update EJBCA image tag to 7.4.3.2

Issue-ID: OOM-2649
Signed-off-by: Tomasz Wrobel <tomasz.wrobel@nokia.com>
Change-Id: I1c1d650b5bb85aa5a235f1e9476475e30a90987c

Create Honolulu release notes

Issue-ID: REQ-601
Signed-off-by: Piotr Marcinkiewicz <piotr.marcinkiewicz@nokia.com>
Change-Id: I4bbce41cb8e9dde9f90ad8eb8e3f1a85d0ea94fa

Release 2.3.3

Issue-ID: OOM-2658
Signed-off-by: Joanna Jeremicz <joanna.jeremicz@nokia.com>
Change-Id: I360bed0c0cd01da65d46d02abf73bddb9710329d

[OOM-CERT-SERVICE] Fix KeyUsage extention sent to CMPv2 server

- fix setting key usage to digitalSignature & keyEncipherment & nonRepudiation
- set extended key usage to clientAuth & serverAuth

Issue-ID: OOM-2658
Signed-off-by: Piotr Marcinkiewicz <piotr.marcinkiewicz@nokia.com>
Change-Id: I5c00f622c3d117a63e4f48a3d2a90fd48cce3d0e

[CMPV2] Fix NPE & enhance error messages

Fix NPE.
Include error messages returned by CMP server in API response.

Issue-ID: OOM-2657
Signed-off-by: Jan Malkiewicz <jan.malkiewicz@nokia.com>
Change-Id: I6ec46b14ba04b5be10de5994236efd8fc14c5d2e

Release CertService 2.3.2

Issue-ID: OOM-2656
Signed-off-by: Remigiusz Janeczek <remigiusz.janeczek@nokia.com>
Change-Id: I232c132b8dbcc657dce8de0d5bcc5e6af64a4491

Merge "[OOM-CERT-SERVICE] Align implementation with RFC4210"

[CMPV2] Add description of the flag CMPv2CertManagerIntegration

Issue-ID: OOM-2560
Signed-off-by: Jan Malkiewicz <jan.malkiewicz@nokia.com>
Change-Id: Ifb5f045d54ea5d2e1673bebf1af1e3113b71375c

[OOM-CERT-SERVICE] Align implementation with RFC4210

- change MAC algorithm
- limit iterations to random value from 1000-2000 range
- correct caName validation to allow URL safe characters

Issue-ID: OOM-2656
Signed-off-by: Piotr Marcinkiewicz <piotr.marcinkiewicz@nokia.com>
Change-Id: I2c320607e7a02996cd249f45ac224e3f3a8aa3c9

[CMPV2] Enhance documentation for CMPv2 cert provider

Issue-ID: OOM-2560
Signed-off-by: Jan Malkiewicz <jan.malkiewicz@nokia.com>
Change-Id: I0a8a1979ca815a76b2e3318cc357da848fe52a9e

[OOM-K8S-CERT-EXTERNAL-PROVIDER] Add information about SANs to external provider

Issue-ID: OOM-2559
Signed-off-by: Piotr Marcinkiewicz <piotr.marcinkiewicz@nokia.com>
Change-Id: Ib4cb6d07db38aff7cfe1bdb1710d3c2c193cfcdf

[OOM-CERT-SERVICE] Correct SANs documentation and logging

- correct properties logging format in external provider
- correct SANs documentation

Issue-ID: OOM-2559
Signed-off-by: Piotr Marcinkiewicz <piotr.marcinkiewicz@nokia.com>
Change-Id: If58e6ca53849e6d091bba652b1cc091f37d8eeeb

[OOM CERT-SERVICE] Release CertService 2.3.1

Issue-ID: OOM-2559
Signed-off-by: Remigiusz Janeczek <remigiusz.janeczek@nokia.com>
Change-Id: I44c2a5bd559ca89501e952f088e425dd1068fc6b

[OOM CERT-SERVICE-CLIENT] Fix null pointer when sans empty

Issue-ID: OOM-2632
Signed-off-by: Remigiusz Janeczek <remigiusz.janeczek@nokia.com>
Change-Id: I5e05eb2923b96313cb1d37eb844862289d6acae1

[OOM CERT-SERVICE] Release CertService 2.3.0

Issue-ID: OOM-2559
Signed-off-by: Piotr Marcinkiewicz <piotr.marcinkiewicz@nokia.com>
Change-Id: I19fdf5c00656e4a309da3ad3b696e38a3cfe1cf3

[OOM CERT-SERVICE DOCS] Add Honolulu in change-log

Issue-ID: OOM-2633
Signed-off-by: Tomasz Wrobel <tomasz.wrobel@nokia.com>
Change-Id: Ic2fecf421d8280e02195ebda2b0dc735d7274c81

Merge "[OOM-K8S-CERT-EXTERNAL-PROVIDER] Add documentation for k8s external provider"

Merge "[OOM-CERT-SERVICE] Update documentation with new Sans types"

[OOM-K8S-CERT-EXTERNAL-PROVIDER] Add documentation for k8s external provider

Issue-ID: OOM-2560
Signed-off-by: Jan Malkiewicz <jan.malkiewicz@nokia.com>
Change-Id: I76659e1369c2a6ec43f9d31326ff0c43d6a1ccdc

Merge "[OOM CERT-SERVICE DOCS] Align release notes to template"

[OOM CERT-SERVICE DOCS] Align release notes to template

Issue-ID: OOM-2633
Signed-off-by: Tomasz Wrobel <tomasz.wrobel@nokia.com>
Change-Id: I891a0817f5e2b08e7420c3f007e85d096d3e3a96

Merge "[OOM cert-service-client] Add validation of email, ip and domain name"

[OOM cert-service-client] Add validation of email, ip and domain name

Added SanMapper to distinguish types of SANS.
ExitableException changed to RuntimeException.
Introcudced intermediate object San.

Issue-ID: OOM-2559
Signed-off-by: kjaniak <kornel.janiak@nokia.com>
Change-Id: I060de9869ab9fd737a474f683a251abd8431d224

[OOM-CERT-SERVICE] Update documentation with new Sans types

- Update documentation
- Update "How to run" CertService client

Issue-ID: OOM-2559
Signed-off-by: Piotr Marcinkiewicz <piotr.marcinkiewicz@nokia.com>
Change-Id: I0ae26661bd695accb884ba9e56946197052bc535

[OOM-CertService] Missing release_notes: tag in rst docs:

docs/release-notes.rst updated to include ".. _release_notes:" after the license.
Now if can be referred properly in ONAP docs "project release notes"

Change-Id: Ie84243fbf67be5e70a6e1a02176a3991b63f70f5
Signed-off-by: Damian Nowak <damian.nowak@nokia.com>
Issue-ID: OOM-2637

Merge "[OOM CERT-SERVICE-API] Add support for URI, IP, E-mail in SANs"

[OOM CERT-SERVICE-CLIENT] Improve readability of URI regex

Issue-ID: OOM-2632
Signed-off-by: Tomasz Wrobel <tomasz.wrobel@nokia.com>
Change-Id: Ic016c788d4dfde95ecd5eca955508385cd144bb4

[OOM CERT-SERVICE-API] Add support for URI, IP, E-mail in SANs

Issue-ID: OOM-2632
Change-Id: I903c31ebe05521e281753cb847001ba99275f758
Signed-off-by: Tomasz Wrobel <tomasz.wrobel@nokia.com>

Merge "[OOM CERT-SERVICE-CLIENT] Add URI validator (RFC 3986)"

[OOM CERT-SERVICE-CLIENT] Add URI validator (RFC 3986)

Issue-ID: OOM-2632
Signed-off-by: Tomasz Wrobel <tomasz.wrobel@nokia.com>
Change-Id: Ia71d413a56f65b0a51ff5c2e7522035f41e06faf

Merge "Update ejbca config to allow emails, uris and ip addresses"

Update ejbca config to allow emails, uris and ip addresses

Issue-ID: OOM-2632
Signed-off-by: Remigiusz Janeczek <remigiusz.janeczek@nokia.com>
Change-Id: Iba089c85afb8b6cbb37c9257e9d57916970855b6