Identity Cert Format

Devan Goodwin dgoodwin at rm-rf.ca
Sat Mar 20 21:14:05 UTC 2010


Ok I think/home we now have this all squared away:

We store PEM cert bytes in the db, we change it to a string when we
serialize it as requested. It's using a DTO now but won't for long,
Bowes is going to rig the annotations on ConsumerIdentityCertificate.

The end result is:

Consumer created: {'uuid': '2e66f9f5-0c9b-467c-b0f6-1a543c067aa8',
'facts': {'id': 11, 'metadata': ''}, 'idCert': {'cert': '-----BEGIN
CERTIFICATE-----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\nZ+L1X+xjDbSvLLfVyYTP41LrtIS7TQ==\n-----END
CERTIFICATE-----\n', 'serial': 613406, 'key': '-----BEGIN RSA PRIVATE
KEY-----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\nQeiRMt0gXSE6tGqmmYaW1xVKiSFQ+FiVnUSE5ujddwbE0DhxbMsL/g==\n-----END
RSA PRIVATE KEY-----\n'}, 'type': {'id': 1, 'label': 'system'}, 'id':
11, 'name': 'consumername'}

Also it turns out the XmlTransient being ignored was because we use
@XmlAccessorType(XmlAccessType.PROPERTY), which means the annotations
should be on the getters, not the field itself.

I'll  do the entitlement certs the exact same way.

Cheers,

Devan

-- 
Devan Goodwin <dgoodwin at rm-rf.ca>
http://rm-rf.ca



More information about the candlepin mailing list