Identity Cert Format

Bryan Kearney bkearney at redhat.com
Sun Mar 21 00:23:08 UTC 2010


On 03/20/2010 05:14 PM, Devan Goodwin wrote:
> Ok I think/home we now have this all squared away:
>
> We store PEM cert bytes in the db, we change it to a string when we
> serialize it as requested. It's using a DTO now but won't for long,
> Bowes is going to rig the annotations on ConsumerIdentityCertificate.
>
> The end result is:
>
> Consumer created: {'uuid': '2e66f9f5-0c9b-467c-b0f6-1a543c067aa8',
> 'facts': {'id': 11, 'metadata': ''}, 'idCert': {'cert': '-----BEGIN
> CERTIFICATE-----\nMIIC4jCCAkugAwIBAgIDCVweMA0GCSqGSIb3DQEBBQUAMGgxCzAJBgNVBAYTAlhY\nMQowCAYDVQQIDAFuMQowCAYDVQQHDAFuMQ8wDQYDVQQKDAZGZWRvcmExCjAIBgNV\nBAsMAW4xEjAQBgNVBAMMCWNhbmRsZXBpbjEQMA4GCSqGSIb3DQEJARYBbjAeFw0x\nMDAzMjAyMTA5MjFaFw0xMTAzMjAyMTA5MjFaMFwxFTATBgNVBAMMDGNvbnN1bWVy\nbmFtZTE0MDIGCgmSJomT8ixkAQEMJDJlNjZmOWY1LTBjOWItNDY3Yy1iMGY2LTFh\nNTQzYzA2N2FhODENMAsGA1UECwwEbnVsbDCCASIwDQYJKoZIhvcNAQEBBQADggEP\nADCCAQoCggEBAK6UPeYKDQDBSBGvDN2kbCTC1xdbn8ekrRRZ44Yf3Vlk/0T6HUGW\n5GNwzUCI9aB4gDxwfgNhJN67X6dVVaRmvKCcEZLKwxFFt27/xaiPzHjG6V0tTMW3\nu3abhM1823FUPKEp5KZvs/v/d6Q4WIVPsAGUxtJk5wX7qWDaHFQ1ZaU4rznUbB8y\nTtYkMUcvnkCoFntGYATtX5AYn07iLhdnvtlSLMHdxFdMGNx5uXZbVZQmI4sIrJx8\nuILu0eU5FlF1wzqu40fJSujoLB6O2itCYEX42331p/7HuEhPev2xmMZnDTLLmfQ4\n12HPhjj7vuUTWfKdguHMZ/s3IXedoQL1Gq0CAwEAAaMiMCAwEQYJYIZIAYb4QgEB\nBAQDAgVgMAsGA1UdDwQEAwIEsDANBgkqhkiG9w0BAQUFAAOBgQB/Jy4zji/xUKd6\n+Wn3v1GjAhlYRJ3K5kZHyxpr6sPJVyjCVtuaXnkaq0GI5zo+CWy9EJC6O5idti0v\nvMubn0yKTnvK9VO8EFILw/Y0nLNtKu0WWZCd8zk2ngfK4+
Cl
>   lsb1emGS/EkrhBdt\nZ+L1X+xjDbSvLLfVyYTP41LrtIS7TQ==\n-----END
> CERTIFICATE-----\n', 'serial': 613406, 'key': '-----BEGIN RSA PRIVATE
> KEY-----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\n2rslYLnP9/mdBb0i0FCx7V/NiI0H8+LTTWH1xjM6oNIAb7Jzy1/ee6
Wb
>   SMp/UrRq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\nQeiRMt0gXSE6tGqmmYaW1xVKiSFQ+FiVnUSE5ujddwbE0DhxbMsL/g==\n-----END
> RSA PRIVATE KEY-----\n'}, 'type': {'id': 1, 'label': 'system'}, 'id':
> 11, 'name': 'consumername'}
>
> Also it turns out the XmlTransient being ignored was because we use
> @XmlAccessorType(XmlAccessType.PROPERTY), which means the annotations
> should be on the getters, not the field itself.


Thanks Devan. Not having transient now is fine methinks. We can come 
back around later and decide how to make this HATEOAS if we need to.

-- bk



More information about the candlepin mailing list