openca/openca-ng

Next Generation Open Certification Authority Management

openca-ng's Issues

Online/Offline Backend Settings

Add the option for configuration of offline and online backends. Offline backends MUST use a queue for outbound/inbound communication and do not offer any CA management functionality (i.e., CA & Key creation, update, delete, etc.)

Create Offline Inbound/Outbound Queue Management for FEs

Create a queue management and API interface for allowing Global Admins (for off-line backends) and on-line backends to download items from the FE queue.

OCAfesync: Add Products Management Functionality

Add Products Management Functionality to manage (create/delete/update) products (or ordering profiles) across multiple FEs. In particular:

• Add functionality to POST (create) of new Products across FEs
• Add functionality to DELETE (remove) existing Products across FEs
• Add functionality to PUT (update) existing Products across FEs

OCAfesync: Add Users sync functionalities

Add the synchronization functionalities for users management. In particular, add:

• Posting of new users across the configured FEs and deletes it in case one FEs reports an error
• Deleting of new users across the configured FEs
• Updating of users information across configured FEs

Create the OCAbesync Helper Object

To provide support for multiple back-end communication interface, we need an object that will handle multiple queries (client-side) to all the participating online backends and implements the import/export functions for "FE-to-BE" communication. This client will provide an API for spreading queries across multiple BEs and queries through "proxy" FEs (i.e., querying the available CAs from FEs via the ('sync') interface.

Implement OnLine Backend Pull Mechanism

Instead of the FE to drive the behavior of On-Line Backends, Implement a Polling model where the FE queues requests for the BE and the BE fetches new requests as it process them. This allows to better align (for what is possible) the offline and the online models.

FE and Offline Backends: Read the list of CAs locally

For Offline Backends, add the functionality to load the list of available CAs from a locally stored set of configurations.

Possible Enhancement: This list can be updated via the backend/frontend import/export queue.

OCAfesync: Add Organization Management Functionalities

Add Organizations Management Functionalities that allows posting, deleting, and updating organizations across multiple FEs. In particular:

• Add Functionality to POST (create) new Organizations across different FEs
• Add Functionality to DELETE (remove) existing Organizations across different FEs
• Add Functionality to PUT (update) existing Organizations across different FEs

Add CA ownership and backend identifier

Add an owner for the CA objects (admins in the owner's organization and global admins can list/see them) and a backend identifier (to track where the CA is available)

Create the OCAfesync Helping Object

To provide support for multiple front-end synchronization interface, we need an object that will handle multiple queries (client-side) to all the participating frontends. This client will provide an API for spreading queries across multiple FEs and make sure that failures are properly handled (ACID property respected)

Add Organization's Basic Capabilities Config Options

Add the Capabilities for Organizations for basic operations. In particular, add support for:

• Manage CAs. If turned on, the admins in the organization can create/edit/delete CAs that are owned by the organization. If turned off, the organization's admins will not be able to manage the CAs withing the organization: Global Administrators will be required for this task.
• Manage Users. If turned on, the admins in the organization can create/edit/delete Users that can be registered for this organization. If turned off, the organization's admins will not be able to manage users: Global Administrators will be required for this task (i.e., create a user and assign one or more organizations to her)

FE and Online Backends: Pushing the list of available CAs

For Online Backends, add the FE interface for pushing the list of available CAs instead of polling the list of CAs.