Design Documents

Overview

• PKI 10.9 Design Documents

• PKI 10.8 Design Documents

• PKI 10.7 Design Documents

• PKI 10.6 Design Documents

• PKI 10.5 Design Documents

• PKI 10.4 Design Documents

• PKI 10.3 Design Documents

General

• Architecture

• Shared Subsystem Certificate

• Security Domain

• Standalone Subsystems

• REST Services

• Request ExtData Format

• SELinux

• Authentication Plugins

• GSS-API Authentication

• Dogtag replica range management

• Database Upgrade Use Cases

• Proposal to Separate Existing Single PKI Source Repository into Multiple PKI Source Repositories

• Proposal to Combine Multiple SRPMS into a Single SRPM

Packaging

• RPM Dependency

Tools

• PKICertImport

• PKI DS CLI

Certificate Authority

• Certificate Transparency Logging

• Lightweight CA

• KRA Connector

• Random Certificate Serial Numbers

  • Random Certificate Serial Numbers v1

  • Random Certificate Serial Numbers v2

  • Random Certificate Serial Numbers v3

• Publishing Queue

• LDAP Profile Storage

Key Recovery Authority

• Key Storage Mechanism

• KRA Authentication and Authorization

• KRA Fine Grained Authorization

• KRA Symmetric Key REST API Design

• KRA Transport Key Rotation

Token Processing System

• TPS Token Lifecycle

• TPS Profile Lifecycle

• TPS Database

• TPS External Registration

• TPS Revocation Routing

• TPS Rewrite

• TPS Smart Card Rewrite

• TPS UI Elements

• TPS UI Development

• Automated Generation of Shared Secret

• Automated Generation of Shared Secret v2

• Server Side Key Generation

See Also

• https://github.com/dogtagpki/pki/tree/master/docs/design

• PKI Design

• Dogtag Future Directions

• PKI Wishlist