- Update to 1.2.0

- Switch to options helper

PR:		204987
Submitted by:	maintainer
Approved by:	mat (mentor)
Differential Revision:	D4575

4 files changed, 328 insertions, 257 deletions

diff --git a/security/p5-openxpki/Makefile b/security/p5-openxpki/Makefile
index 02b8cda52e68..3bb2dd4f699b 100644
--- a/security/p5-openxpki/Makefile
+++ b/security/p5-openxpki/Makefile
@@ -2,7 +2,7 @@
 # $FreeBSD$
 
 PORTNAME=	openxpki
-PORTVERSION=	0.28.0
+PORTVERSION=	1.2.0
 DISTVERSIONPREFIX=	v
 CATEGORIES=	security perl5
 PKGNAMEPREFIX=	p5-
@@ -13,56 +13,58 @@ COMMENT=	Perl based trustcenter for PKI: universal server building block
 LICENSE=	APACHE20
 
 BUILD_DEPENDS=	\
-	p5-Net-DNS>0.83:${PORTSDIR}/dns/p5-Net-DNS \
-	p5-Math-BigInt>=1.9993:${PORTSDIR}/math/p5-Math-BigInt \
-	p5-Test-Prereq>=0:${PORTSDIR}/devel/p5-Test-Prereq \
-	p5-Config-GitLike>=0:${PORTSDIR}/devel/p5-Config-GitLike \
-	p5-openxpki-i18n>=0.20.0.1:${PORTSDIR}/security/p5-openxpki-i18n \
+	bash:${PORTSDIR}/shells/bash \
 	openca-tools-forked>=1.4.0:${PORTSDIR}/security/openca-tools-forked \
+	p5-CGI-Fast>=2.10:${PORTSDIR}/www/p5-CGI-Fast \
+	p5-CGI-Session>=0:${PORTSDIR}/www/p5-CGI-Session \
+	p5-CGI>=4.21:${PORTSDIR}/www/p5-CGI \
 	p5-Class-Accessor-Chained>=0:${PORTSDIR}/devel/p5-Class-Accessor-Chained \
+	p5-Class-Std>=0:${PORTSDIR}/devel/p5-Class-Std \
+	p5-Config-GitLike>=0:${PORTSDIR}/devel/p5-Config-GitLike \
 	p5-Config-Merge>=0:${PORTSDIR}/devel/p5-Config-Merge \
+	p5-Config-Std>=0:${PORTSDIR}/devel/p5-Config-Std \
 	p5-Connector>=0:${PORTSDIR}/devel/p5-Connector \
-	p5-JSON>=0:${PORTSDIR}/converters/p5-JSON \
+	p5-Crypt-CBC>=0:${PORTSDIR}/security/p5-Crypt-CBC \
 	p5-Crypt-OpenSSL-AES>=0:${PORTSDIR}/security/p5-Crypt-OpenSSL-AES \
+	p5-Crypt-PKCS10>=1.3:${PORTSDIR}/security/p5-Crypt-PKCS10 \
+	p5-Crypt-SSLeay>=0:${PORTSDIR}/security/p5-Crypt-SSLeay \
+	p5-DBD-Mock>=0:${PORTSDIR}/databases/p5-DBD-Mock \
+	p5-Data-Password>=0:${PORTSDIR}/security/p5-Data-Password \
+	p5-Data-Serializer>=0:${PORTSDIR}/devel/p5-Data-Serializer \
+	p5-DateTime-Format-DateParse>=0:${PORTSDIR}/devel/p5-DateTime-Format-DateParse \
+	p5-IO-Prompt>=0:${PORTSDIR}/devel/p5-IO-Prompt \
+	p5-IPC-ShareLite>=0:${PORTSDIR}/devel/p5-IPC-ShareLite \
 	p5-JSON>=0:${PORTSDIR}/converters/p5-JSON \
 	p5-LWP-Protocol-connect>=0:${PORTSDIR}/www/p5-LWP-Protocol-connect \
 	p5-LWP-Protocol-https>=0:${PORTSDIR}/www/p5-LWP-Protocol-https \
+	p5-Locale-libintl>=0:${PORTSDIR}/devel/p5-Locale-libintl \
+	p5-Mail-RFC822-Address>=0:${PORTSDIR}/mail/p5-Mail-RFC822-Address \
+	p5-Math-BigInt>=1.9993:${PORTSDIR}/math/p5-Math-BigInt \
 	p5-Moose>=0:${PORTSDIR}/devel/p5-Moose \
-	p5-Crypt-SSLeay>=0:${PORTSDIR}/security/p5-Crypt-SSLeay \
+	p5-Net-DNS>0.83:${PORTSDIR}/dns/p5-Net-DNS \
+	p5-Net-IP>=0:${PORTSDIR}/net-mgmt/p5-Net-IP \
+	p5-Net-Server>=0:${PORTSDIR}/net/p5-Net-Server \
+	p5-NetAddr-IP>=0:${PORTSDIR}/net-mgmt/p5-NetAddr-IP \
 	p5-Path-Class>=0:${PORTSDIR}/devel/p5-Path-Class \
+	p5-Proc-ProcessTable>=0:${PORTSDIR}/devel/p5-Proc-ProcessTable \
 	p5-Proc-SafeExec>=0:${PORTSDIR}/devel/p5-Proc-SafeExec \
+	p5-RT-Client-REST>=0:${PORTSDIR}/www/p5-RT-Client-REST \
+	p5-Regexp-Common>=0:${PORTSDIR}/textproc/p5-Regexp-Common \
 	p5-SOAP-Lite>=0:${PORTSDIR}/net/p5-SOAP-Lite \
 	p5-Switch>=0:${PORTSDIR}/lang/p5-Switch \
-	p5-Workflow>=0.31:${PORTSDIR}/devel/p5-Workflow \
-	p5-CGI-Session>=0:${PORTSDIR}/www/p5-CGI-Session \
-	p5-TimeDate>=0:${PORTSDIR}/devel/p5-TimeDate \
-	p5-Locale-libintl>=0:${PORTSDIR}/devel/p5-Locale-libintl \
-	p5-perl-ldap>=0:${PORTSDIR}/net/p5-perl-ldap \
-	p5-Regexp-Common>=0:${PORTSDIR}/textproc/p5-Regexp-Common \
+	p5-Sys-SigAction>=0:${PORTSDIR}/devel/p5-Sys-SigAction \
+	p5-Template-Toolkit>=0:${PORTSDIR}/www/p5-Template-Toolkit \
+	p5-Test-Pod-Coverage>=0:${PORTSDIR}/devel/p5-Test-Pod-Coverage \
+	p5-Test-Pod>=0:${PORTSDIR}/devel/p5-Test-Pod \
+	p5-Test-Prereq>=0:${PORTSDIR}/devel/p5-Test-Prereq \
 	p5-Text-CSV_XS>=0:${PORTSDIR}/textproc/p5-Text-CSV_XS \
+	p5-TimeDate>=0:${PORTSDIR}/devel/p5-TimeDate \
+	p5-Workflow>=0.31:${PORTSDIR}/devel/p5-Workflow \
 	p5-XML-Filter-XInclude>=0:${PORTSDIR}/textproc/p5-XML-Filter-XInclude \
 	p5-XML-SAX-Writer>=0:${PORTSDIR}/textproc/p5-XML-SAX-Writer \
 	p5-XML-Validator-Schema>=0:${PORTSDIR}/textproc/p5-XML-Validator-Schema \
-	p5-Net-Server>=0:${PORTSDIR}/net/p5-Net-Server \
-	p5-Test-Pod>=0:${PORTSDIR}/devel/p5-Test-Pod \
-	p5-Test-Pod-Coverage>=0:${PORTSDIR}/devel/p5-Test-Pod-Coverage \
-	p5-Net-IP>=0:${PORTSDIR}/net-mgmt/p5-Net-IP \
-	p5-Class-Std>=0:${PORTSDIR}/devel/p5-Class-Std \
-	p5-Mail-RFC822-Address>=0:${PORTSDIR}/mail/p5-Mail-RFC822-Address \
-	p5-Proc-ProcessTable>=0:${PORTSDIR}/devel/p5-Proc-ProcessTable \
-	p5-Sys-SigAction>=0:${PORTSDIR}/devel/p5-Sys-SigAction \
-	p5-Data-Password>=0:${PORTSDIR}/security/p5-Data-Password \
-	p5-RT-Client-REST>=0:${PORTSDIR}/www/p5-RT-Client-REST \
-	p5-Data-Serializer>=0:${PORTSDIR}/devel/p5-Data-Serializer \
-	p5-IPC-ShareLite>=0:${PORTSDIR}/devel/p5-IPC-ShareLite \
-	p5-DateTime-Format-DateParse>=0:${PORTSDIR}/devel/p5-DateTime-Format-DateParse \
-	p5-IO-Prompt>=0:${PORTSDIR}/devel/p5-IO-Prompt \
-	p5-Config-Std>=0:${PORTSDIR}/devel/p5-Config-Std \
-	p5-Template-Toolkit>=0:${PORTSDIR}/www/p5-Template-Toolkit \
-	p5-NetAddr-IP>=0:${PORTSDIR}/net-mgmt/p5-NetAddr-IP \
-	p5-DBD-Mock>=0:${PORTSDIR}/databases/p5-DBD-Mock \
-	p5-Crypt-CBC>=0:${PORTSDIR}/security/p5-Crypt-CBC \
-	bash:${PORTSDIR}/shells/bash \
+	p5-openxpki-i18n>=0.20.0.1:${PORTSDIR}/security/p5-openxpki-i18n \
+	p5-perl-ldap>=0:${PORTSDIR}/net/p5-perl-ldap \
 
 RUN_DEPENDS:=	${BUILD_DEPENDS}
 
@@ -85,15 +87,15 @@ WRKSRC_SUBDIR=	core/server
 USERS=	openxpki
 GROUPS=	openxpki
 
-OPTIONS_DEFINE=	GRAPHVIZ DOCS
+OPTIONS_DEFINE=	GRAPHVIZ DOCS EXAMPLES
 
 GRAPHVIZ_DESC=	With graphical visualization of workflows?
-GRAPHVIZ_RUN_DEPENDS=	${LOCALBASE}/bin/dot:${PORTSDIR}/graphics/graphviz \
-			${LOCALBASE}/bin/imgsize:${PORTSDIR}/graphics/p5-Image-Size
+GRAPHVIZ_RUN_DEPENDS=	dot:${PORTSDIR}/graphics/graphviz \
+			imgsize:${PORTSDIR}/graphics/p5-Image-Size
 
 post-patch:
+	@${REINPLACE_CMD} -e 's|..ENV{PERL} .vergen --format version.|"${PORTVERSION}"|g' ${WRKSRC}/Makefile.PL
 	@${REINPLACE_CMD} -e 's|..vergen --format version.|"${PORTVERSION}"|g' ${WRKSRC}/Makefile.PL
-	@${RM} -f ${WRKSRC}/Makefile.PL.bak
 	@( \
 	cd ${WRKSRC}/../..; \
 	${FIND} config core/server doc qatest tools -type f -print0 >filelist; \
@@ -122,10 +124,11 @@ post-install:
 	${CHMOD} u+w ${OXLIB}
 	${STRIP_CMD} ${OXLIB}
 	${CHMOD} u-w ${OXLIB}
+post-install-EXAMPLES-on:
 	@${MKDIR} ${STAGEDIR}${EXAMPLESDIR}
-	@(cd ${WRKSRC}/../../config && ${COPYTREE_SHARE} . ${STAGEDIR}${EXAMPLESDIR})
-.	if ${PORT_OPTIONS:MDOCS}
+	@(cd ${WRKSRC}/../.. && ${COPYTREE_SHARE} config ${STAGEDIR}${EXAMPLESDIR})
+	@(cd ${WRKSRC} && ${COPYTREE_SHARE} "htdocs cgi-bin" ${STAGEDIR}${EXAMPLESDIR})
+post-install-DOCS-on:
 		@${MKDIR} ${STAGEDIR}${DOCSDIR}
 		@(cd ${WRKSRC}/../../doc && ${COPYTREE_SHARE} . ${STAGEDIR}${DOCSDIR})
-.	endif
 .include <bsd.port.post.mk>
diff --git a/security/p5-openxpki/distinfo b/security/p5-openxpki/distinfo
index 28d958e3153d..a05af6eaf972 100644
--- a/security/p5-openxpki/distinfo
+++ b/security/p5-openxpki/distinfo
@@ -1,2 +1,2 @@
-SHA256 (openxpki-openxpki-v0.28.0_GH0.tar.gz) = d2204ba3c3abb30e5ba2eb5c78ba8c9da651d9616774a796c4c52b02e03ec989
-SIZE (openxpki-openxpki-v0.28.0_GH0.tar.gz) = 2077300
+SHA256 (openxpki-openxpki-v1.2.0_GH0.tar.gz) = 07c936b4d32e365681f717e957a052c5175be466bfa6531debc62c2936d9da7e
+SIZE (openxpki-openxpki-v1.2.0_GH0.tar.gz) = 2259538
diff --git a/security/p5-openxpki/files/pkg-message.in b/security/p5-openxpki/files/pkg-message.in
index cc29164164aa..87c22767acfd 100644
--- a/security/p5-openxpki/files/pkg-message.in
+++ b/security/p5-openxpki/files/pkg-message.in
@@ -1,4 +1,4 @@
-==================================================================
+=================================================================
 - Universal server building block (OpenXPKI) for arbitrary PKI: installed. 
 - SCEP prerequisite binary and i18n tools for UI: installed.
 - Enable utf8 locale (e.g. en_US.utf8) for the translation staff to operate
@@ -8,18 +8,35 @@
 - Install perl interface for your favorite database, 
   e.g. databases/p5-DBD-mysql
 - Install your favorite web server.
-  This port has created user:group as openxpki:openxpki
-  Add a line: "User openxpki" to configuration of your OpenXPKI-related 
-  web server. Choose from two versions of the handler: based on CGI or FastCGI
+  Choose from two versions of the handler: based on CGI or FastCGI
   perl core modules.
-- Perform deployment procedure (define a role of the server inside the PKI
-  infrastructure) for OpenXPKI server in a regular way, 
-  without this procedure OpenXPKI server would not start.
-  E.g. if you want your server to act as the simplest CA, 
-  then copy sample configuration for this case with 
-    cp -R %%EXAMPLESDIR%%/openxpki/* %%PREFIX%%/etc/openxpki/
+  Copy CGI or FastCGI scripts from %%EXAMPLESDIR%%/cgi-bin to the location
+  where your web server can use them. Set executable permissions for them. 
+  Copy htdocs files from %%EXAMPLESDIR%%/htdocs to the location 
+  where your web server can use them.
+  You can see some samples in %%EXAMPLESDIR%%/config/apache.
+- If you want your server to act just as the simplest CA, 
+  then the basic deployment procedure is all you need:
+  copy sample configuration for this case with 
+    cp -R %%EXAMPLESDIR%%/config/openxpki/* %%PREFIX%%/etc/openxpki/
   and follow advice at:
   https://openxpki.readthedocs.org/en/latest/quickstart.html
+  Without this deployment procedure OpenXPKI server would not start.
+- If you want more complex role for your server inside the PKI infrastructure,
+  then you need to perform further deployment procedure for your server atop 
+  the basic deployment. 
+- This port has created user:group as openxpki:openxpki, which owns 
+  the OpenXPKI server.
+- After first fresh installation, create empty log files as follows
+  (assuming your web server is owned by user www):
+
+install -m 660 -o openxpki -g openxpki /dev/null /var/log/openxpki/openxpki.log
+install -m 660 -o www -g www /dev/null /var/log/openxpki/webui.log
+install -m 660 -o www -g www /dev/null /var/log/openxpki/scep.log
+install -m 660 -o www -g www /dev/null /var/log/openxpki/soap.log
+
+- It is essential that www and openpki are two different users in your system.
+
 - Start daemons in this order:
     database server,
     OpenXPKI server (%%PREFIX%%/etc/rc.d/openxpki start),
diff --git a/security/p5-openxpki/pkg-plist b/security/p5-openxpki/pkg-plist
index 0fb7d5c0b14c..b82350f69e3d 100644
--- a/security/p5-openxpki/pkg-plist
+++ b/security/p5-openxpki/pkg-plist
@@ -6,6 +6,14 @@ bin/openxpkictl
 %%SITE_ARCH%%/OpenXPKI/Assert.pm
 %%SITE_ARCH%%/OpenXPKI/Client.pm
 %%SITE_ARCH%%/OpenXPKI/Client/API.pm
+%%SITE_ARCH%%/OpenXPKI/Client/Config.pm
+%%SITE_ARCH%%/OpenXPKI/Client/SC.pm
+%%SITE_ARCH%%/OpenXPKI/Client/SC/Changecardpolicy.pm
+%%SITE_ARCH%%/OpenXPKI/Client/SC/Getauthcode.pm
+%%SITE_ARCH%%/OpenXPKI/Client/SC/Personalization.pm
+%%SITE_ARCH%%/OpenXPKI/Client/SC/Pinreset.pm
+%%SITE_ARCH%%/OpenXPKI/Client/SC/Result.pm
+%%SITE_ARCH%%/OpenXPKI/Client/SC/Utilities.pm
 %%SITE_ARCH%%/OpenXPKI/Client/SCEP.pm
 %%SITE_ARCH%%/OpenXPKI/Client/Simple.pm
 %%SITE_ARCH%%/OpenXPKI/Client/UI.pm
@@ -14,6 +22,7 @@ bin/openxpkictl
 %%SITE_ARCH%%/OpenXPKI/Client/UI/Certificate.pm
 %%SITE_ARCH%%/OpenXPKI/Client/UI/Crl.pm
 %%SITE_ARCH%%/OpenXPKI/Client/UI/Handle/Profile.pm
+%%SITE_ARCH%%/OpenXPKI/Client/UI/Handle/Status.pm
 %%SITE_ARCH%%/OpenXPKI/Client/UI/Home.pm
 %%SITE_ARCH%%/OpenXPKI/Client/UI/Information.pm
 %%SITE_ARCH%%/OpenXPKI/Client/UI/Login.pm
@@ -29,6 +38,7 @@ bin/openxpkictl
 %%SITE_ARCH%%/OpenXPKI/Config/Test.pm
 %%SITE_ARCH%%/OpenXPKI/Connector/DataPool.pm
 %%SITE_ARCH%%/OpenXPKI/Connector/FakeValidity.pm
+%%SITE_ARCH%%/OpenXPKI/Connector/Secret.pm
 %%SITE_ARCH%%/OpenXPKI/Control.pm
 %%SITE_ARCH%%/OpenXPKI/Crypto/API.pm
 %%SITE_ARCH%%/OpenXPKI/Crypto/Backend/API.pm
@@ -36,18 +46,12 @@ bin/openxpkictl
 %%SITE_ARCH%%/OpenXPKI/Crypto/Backend/OpenSSL.xs
 %%SITE_ARCH%%/OpenXPKI/Crypto/Backend/OpenSSL/CLI.pm
 %%SITE_ARCH%%/OpenXPKI/Crypto/Backend/OpenSSL/Command.pm
+%%SITE_ARCH%%/OpenXPKI/Crypto/Backend/OpenSSL/Command/asn1_genconf.pm
 %%SITE_ARCH%%/OpenXPKI/Crypto/Backend/OpenSSL/Command/convert_cert.pm
 %%SITE_ARCH%%/OpenXPKI/Crypto/Backend/OpenSSL/Command/convert_crl.pm
-%%SITE_ARCH%%/OpenXPKI/Crypto/Backend/OpenSSL/Command/convert_key.pm
 %%SITE_ARCH%%/OpenXPKI/Crypto/Backend/OpenSSL/Command/convert_pkcs10.pm
-%%SITE_ARCH%%/OpenXPKI/Crypto/Backend/OpenSSL/Command/create_key.pm
-%%SITE_ARCH%%/OpenXPKI/Crypto/Backend/OpenSSL/Command/create_key/DSA.pm
-%%SITE_ARCH%%/OpenXPKI/Crypto/Backend/OpenSSL/Command/create_key/EC.pm
-%%SITE_ARCH%%/OpenXPKI/Crypto/Backend/OpenSSL/Command/create_key/GOST2001.pm
-%%SITE_ARCH%%/OpenXPKI/Crypto/Backend/OpenSSL/Command/create_key/GOST2001CP.pm
-%%SITE_ARCH%%/OpenXPKI/Crypto/Backend/OpenSSL/Command/create_key/GOST94.pm
-%%SITE_ARCH%%/OpenXPKI/Crypto/Backend/OpenSSL/Command/create_key/GOST94CP.pm
-%%SITE_ARCH%%/OpenXPKI/Crypto/Backend/OpenSSL/Command/create_key/RSA.pm
+%%SITE_ARCH%%/OpenXPKI/Crypto/Backend/OpenSSL/Command/convert_pkcs8.pm
+%%SITE_ARCH%%/OpenXPKI/Crypto/Backend/OpenSSL/Command/convert_pkey.pm
 %%SITE_ARCH%%/OpenXPKI/Crypto/Backend/OpenSSL/Command/create_params.pm
 %%SITE_ARCH%%/OpenXPKI/Crypto/Backend/OpenSSL/Command/create_pkcs10.pm
 %%SITE_ARCH%%/OpenXPKI/Crypto/Backend/OpenSSL/Command/create_pkcs12.pm
@@ -66,6 +70,7 @@ bin/openxpkictl
 %%SITE_ARCH%%/OpenXPKI/Crypto/Backend/OpenSSL/Command/pkcs7_verify.pm
 %%SITE_ARCH%%/OpenXPKI/Crypto/Backend/OpenSSL/Command/verify_cert.pm
 %%SITE_ARCH%%/OpenXPKI/Crypto/Backend/OpenSSL/Config.pm
+%%SITE_ARCH%%/OpenXPKI/Crypto/Backend/OpenSSL/ECDH.pm
 %%SITE_ARCH%%/OpenXPKI/Crypto/Backend/OpenSSL/Engine.pm
 %%SITE_ARCH%%/OpenXPKI/Crypto/Backend/OpenSSL/Engine/GOST.pm
 %%SITE_ARCH%%/OpenXPKI/Crypto/Backend/OpenSSL/Engine/OpenSSL.pm
@@ -74,6 +79,7 @@ bin/openxpkictl
 %%SITE_ARCH%%/OpenXPKI/Crypto/Backend/OpenSSL/Engine/nCipher.pm
 %%SITE_ARCH%%/OpenXPKI/Crypto/Backend/OpenSSL/XS.pm
 %%SITE_ARCH%%/OpenXPKI/Crypto/Backend/OpenSSL/XS/CRL.xs
+%%SITE_ARCH%%/OpenXPKI/Crypto/Backend/OpenSSL/XS/ECDH.xs
 %%SITE_ARCH%%/OpenXPKI/Crypto/Backend/OpenSSL/XS/PKCS10.xs
 %%SITE_ARCH%%/OpenXPKI/Crypto/Backend/OpenSSL/XS/SPKAC.xs
 %%SITE_ARCH%%/OpenXPKI/Crypto/Backend/OpenSSL/XS/X509.xs
@@ -99,10 +105,12 @@ bin/openxpkictl
 %%SITE_ARCH%%/OpenXPKI/Crypto/Tool/SCEP/API.pm
 %%SITE_ARCH%%/OpenXPKI/Crypto/Tool/SCEP/CLI.pm
 %%SITE_ARCH%%/OpenXPKI/Crypto/Tool/SCEP/Command/create_certificate_reply.pm
+%%SITE_ARCH%%/OpenXPKI/Crypto/Tool/SCEP/Command/create_crl_reply.pm
 %%SITE_ARCH%%/OpenXPKI/Crypto/Tool/SCEP/Command/create_error_reply.pm
 %%SITE_ARCH%%/OpenXPKI/Crypto/Tool/SCEP/Command/create_nextca_reply.pm
 %%SITE_ARCH%%/OpenXPKI/Crypto/Tool/SCEP/Command/create_pending_reply.pm
 %%SITE_ARCH%%/OpenXPKI/Crypto/Tool/SCEP/Command/get_getcert_serial.pm
+%%SITE_ARCH%%/OpenXPKI/Crypto/Tool/SCEP/Command/get_getcrl_issuer_serial.pm
 %%SITE_ARCH%%/OpenXPKI/Crypto/Tool/SCEP/Command/get_message_type.pm
 %%SITE_ARCH%%/OpenXPKI/Crypto/Tool/SCEP/Command/get_pkcs10.pm
 %%SITE_ARCH%%/OpenXPKI/Crypto/Tool/SCEP/Command/get_signer_cert.pm
@@ -118,6 +126,7 @@ bin/openxpkictl
 %%SITE_ARCH%%/OpenXPKI/FileUtils.pm
 %%SITE_ARCH%%/OpenXPKI/SOAP.pm
 %%SITE_ARCH%%/OpenXPKI/SOAP/Revoke.pm
+%%SITE_ARCH%%/OpenXPKI/SOAP/Smartcard.pm
 %%SITE_ARCH%%/OpenXPKI/Serialization/Fast.pm
 %%SITE_ARCH%%/OpenXPKI/Serialization/JSON.pm
 %%SITE_ARCH%%/OpenXPKI/Serialization/Simple.pm
@@ -173,6 +182,8 @@ bin/openxpkictl
 %%SITE_ARCH%%/OpenXPKI/Server/Workflow/Activity/CRLIssuance/CreateQueue.pm
 %%SITE_ARCH%%/OpenXPKI/Server/Workflow/Activity/CRR/MarkRevoked.pm
 %%SITE_ARCH%%/OpenXPKI/Server/Workflow/Activity/CRR/PersistRequest.pm
+%%SITE_ARCH%%/OpenXPKI/Server/Workflow/Activity/CSR/CheckPolicyDNS.pm
+%%SITE_ARCH%%/OpenXPKI/Server/Workflow/Activity/CSR/CheckPolicySubjectDuplicate.pm
 %%SITE_ARCH%%/OpenXPKI/Server/Workflow/Activity/CSR/GenerateKey.pm
 %%SITE_ARCH%%/OpenXPKI/Server/Workflow/Activity/CSR/GeneratePKCS10.pm
 %%SITE_ARCH%%/OpenXPKI/Server/Workflow/Activity/CSR/PersistRequest.pm
@@ -189,10 +200,11 @@ bin/openxpkictl
 %%SITE_ARCH%%/OpenXPKI/Server/Workflow/Activity/Reports/CertExport/GenerateExportFile.pm
 %%SITE_ARCH%%/OpenXPKI/Server/Workflow/Activity/Reports/CertExport/GetConfig.pm
 %%SITE_ARCH%%/OpenXPKI/Server/Workflow/Activity/Reports/CertExport/TagAsExported.pm
+%%SITE_ARCH%%/OpenXPKI/Server/Workflow/Activity/Reports/Detail.pm
+%%SITE_ARCH%%/OpenXPKI/Server/Workflow/Activity/Reports/Summary.pm
 %%SITE_ARCH%%/OpenXPKI/Server/Workflow/Activity/SCEPv2/CalcApprovals.pm
 %%SITE_ARCH%%/OpenXPKI/Server/Workflow/Activity/SCEPv2/EvaluateChallenge.pm
 %%SITE_ARCH%%/OpenXPKI/Server/Workflow/Activity/SCEPv2/EvaluateEligibility.pm
-%%SITE_ARCH%%/OpenXPKI/Server/Workflow/Activity/SCEPv2/EvaluateSignerTrust.pm
 %%SITE_ARCH%%/OpenXPKI/Server/Workflow/Activity/SCEPv2/ExtractCSR.pm
 %%SITE_ARCH%%/OpenXPKI/Server/Workflow/Activity/SCEPv2/FetchGroupPolicy.pm
 %%SITE_ARCH%%/OpenXPKI/Server/Workflow/Activity/SCEPv2/LoadRecentCertificate.pm
@@ -201,6 +213,7 @@ bin/openxpkictl
 %%SITE_ARCH%%/OpenXPKI/Server/Workflow/Activity/Skip.pm
 %%SITE_ARCH%%/OpenXPKI/Server/Workflow/Activity/SmartCard/ApplyCSRPolicy.pm
 %%SITE_ARCH%%/OpenXPKI/Server/Workflow/Activity/SmartCard/CheckPrereqs.pm
+%%SITE_ARCH%%/OpenXPKI/Server/Workflow/Activity/SmartCard/CheckServerStatus.pm
 %%SITE_ARCH%%/OpenXPKI/Server/Workflow/Activity/SmartCard/ComputePUK.pm
 %%SITE_ARCH%%/OpenXPKI/Server/Workflow/Activity/SmartCard/CreateEscrowedKey.pm
 %%SITE_ARCH%%/OpenXPKI/Server/Workflow/Activity/SmartCard/CreatePKCS12.pm
@@ -221,6 +234,7 @@ bin/openxpkictl
 %%SITE_ARCH%%/OpenXPKI/Server/Workflow/Activity/Tools/Datapool/ModifyEntry.pm
 %%SITE_ARCH%%/OpenXPKI/Server/Workflow/Activity/Tools/Datapool/SetEntry.pm
 %%SITE_ARCH%%/OpenXPKI/Server/Workflow/Activity/Tools/Disconnect.pm
+%%SITE_ARCH%%/OpenXPKI/Server/Workflow/Activity/Tools/EvaluateSignerTrust.pm
 %%SITE_ARCH%%/OpenXPKI/Server/Workflow/Activity/Tools/Export.pm
 %%SITE_ARCH%%/OpenXPKI/Server/Workflow/Activity/Tools/GenerateKey.pm
 %%SITE_ARCH%%/OpenXPKI/Server/Workflow/Activity/Tools/GeneratePassword.pm
@@ -293,7 +307,6 @@ bin/openxpkictl
 %%SITE_ARCH%%/OpenXPKI/Server/Workflow/Validator/Bulk.pm
 %%SITE_ARCH%%/OpenXPKI/Server/Workflow/Validator/CertIdentifierExists.pm
 %%SITE_ARCH%%/OpenXPKI/Server/Workflow/Validator/CertProfile.pm
-%%SITE_ARCH%%/OpenXPKI/Server/Workflow/Validator/CertRole.pm
 %%SITE_ARCH%%/OpenXPKI/Server/Workflow/Validator/CertSubject.pm
 %%SITE_ARCH%%/OpenXPKI/Server/Workflow/Validator/CertSubjectAltNameParts.pm
 %%SITE_ARCH%%/OpenXPKI/Server/Workflow/Validator/CertSubjectFields.pm
@@ -328,20 +341,32 @@ bin/openxpkictl
 %%SITE_ARCH%%/OpenXPKI/Template.pm
 %%SITE_ARCH%%/OpenXPKI/Template/Plugin/Certificate.pm
 %%SITE_ARCH%%/OpenXPKI/Template/Plugin/CheckDNS.pm
+%%SITE_ARCH%%/OpenXPKI/Template/Plugin/Profile.pm
 %%SITE_ARCH%%/OpenXPKI/Template/Plugin/RandomPassword.pm
 %%SITE_ARCH%%/OpenXPKI/Test/More.pm
 %%SITE_ARCH%%/OpenXPKI/Tests.pm
 %%SITE_ARCH%%/OpenXPKI/Transport/Simple.pm
 %%SITE_ARCH%%/OpenXPKI/VERSION.pm
 %%SITE_ARCH%%/OpenXPKI/Workflow/Config.pm
+%%SITE_ARCH%%/OpenXPKI/Workflow/Context.pm
 %%SITE_ARCH%%/OpenXPKI/Workflow/Factory.pm
 %%SITE_ARCH%%/OpenXPKI/Workflow/Handler.pm
-%%SITE_ARCH%%/OpenXPKI/XML/Cache.pm
 %%SITE_ARCH%%/OpenXPKI/i18n.pm
 %%SITE_ARCH%%/auto/OpenXPKI/OpenXPKI.so
+%%PERL5_MAN1%%/openxpkiadm.1.gz
+%%PERL5_MAN1%%/openxpkicli.1.gz
+%%PERL5_MAN1%%/openxpkicmd.1.gz
+%%PERL5_MAN1%%/openxpkictl.1.gz
 %%PERL5_MAN3%%/OpenXPKI.3.gz
 %%PERL5_MAN3%%/OpenXPKI::Client.3.gz
 %%PERL5_MAN3%%/OpenXPKI::Client::API.3.gz
+%%PERL5_MAN3%%/OpenXPKI::Client::Config.3.gz
+%%PERL5_MAN3%%/OpenXPKI::Client::SC::Changecardpolicy.3.gz
+%%PERL5_MAN3%%/OpenXPKI::Client::SC::Getauthcode.3.gz
+%%PERL5_MAN3%%/OpenXPKI::Client::SC::Personalization.3.gz
+%%PERL5_MAN3%%/OpenXPKI::Client::SC::Pinreset.3.gz
+%%PERL5_MAN3%%/OpenXPKI::Client::SC::Result.3.gz
+%%PERL5_MAN3%%/OpenXPKI::Client::SC::Utilities.3.gz
 %%PERL5_MAN3%%/OpenXPKI::Client::SCEP.3.gz
 %%PERL5_MAN3%%/OpenXPKI::Client::Simple.3.gz
 %%PERL5_MAN3%%/OpenXPKI::Client::UI.3.gz
@@ -359,6 +384,7 @@ bin/openxpkictl
 %%PERL5_MAN3%%/OpenXPKI::Config::Test.3.gz
 %%PERL5_MAN3%%/OpenXPKI::Connector::DataPool.3.gz
 %%PERL5_MAN3%%/OpenXPKI::Connector::FakeValidity.3.gz
+%%PERL5_MAN3%%/OpenXPKI::Connector::Secret.3.gz
 %%PERL5_MAN3%%/OpenXPKI::Control.3.gz
 %%PERL5_MAN3%%/OpenXPKI::Crypto::API.3.gz
 %%PERL5_MAN3%%/OpenXPKI::Crypto::Backend::API.3.gz
@@ -367,16 +393,9 @@ bin/openxpkictl
 %%PERL5_MAN3%%/OpenXPKI::Crypto::Backend::OpenSSL::Command.3.gz
 %%PERL5_MAN3%%/OpenXPKI::Crypto::Backend::OpenSSL::Command::convert_cert.3.gz
 %%PERL5_MAN3%%/OpenXPKI::Crypto::Backend::OpenSSL::Command::convert_crl.3.gz
-%%PERL5_MAN3%%/OpenXPKI::Crypto::Backend::OpenSSL::Command::convert_key.3.gz
 %%PERL5_MAN3%%/OpenXPKI::Crypto::Backend::OpenSSL::Command::convert_pkcs10.3.gz
-%%PERL5_MAN3%%/OpenXPKI::Crypto::Backend::OpenSSL::Command::create_key.3.gz
-%%PERL5_MAN3%%/OpenXPKI::Crypto::Backend::OpenSSL::Command::create_key::DSA.3.gz
-%%PERL5_MAN3%%/OpenXPKI::Crypto::Backend::OpenSSL::Command::create_key::EC.3.gz
-%%PERL5_MAN3%%/OpenXPKI::Crypto::Backend::OpenSSL::Command::create_key::GOST2001.3.gz
-%%PERL5_MAN3%%/OpenXPKI::Crypto::Backend::OpenSSL::Command::create_key::GOST2001CP.3.gz
-%%PERL5_MAN3%%/OpenXPKI::Crypto::Backend::OpenSSL::Command::create_key::GOST94.3.gz
-%%PERL5_MAN3%%/OpenXPKI::Crypto::Backend::OpenSSL::Command::create_key::GOST94CP.3.gz
-%%PERL5_MAN3%%/OpenXPKI::Crypto::Backend::OpenSSL::Command::create_key::RSA.3.gz
+%%PERL5_MAN3%%/OpenXPKI::Crypto::Backend::OpenSSL::Command::convert_pkcs8.3.gz
+%%PERL5_MAN3%%/OpenXPKI::Crypto::Backend::OpenSSL::Command::convert_pkey.3.gz
 %%PERL5_MAN3%%/OpenXPKI::Crypto::Backend::OpenSSL::Command::create_params.3.gz
 %%PERL5_MAN3%%/OpenXPKI::Crypto::Backend::OpenSSL::Command::create_pkcs10.3.gz
 %%PERL5_MAN3%%/OpenXPKI::Crypto::Backend::OpenSSL::Command::create_pkcs12.3.gz
@@ -423,10 +442,12 @@ bin/openxpkictl
 %%PERL5_MAN3%%/OpenXPKI::Crypto::Tool::SCEP::API.3.gz
 %%PERL5_MAN3%%/OpenXPKI::Crypto::Tool::SCEP::CLI.3.gz
 %%PERL5_MAN3%%/OpenXPKI::Crypto::Tool::SCEP::Command::create_certificate_reply.3.gz
+%%PERL5_MAN3%%/OpenXPKI::Crypto::Tool::SCEP::Command::create_crl_reply.3.gz
 %%PERL5_MAN3%%/OpenXPKI::Crypto::Tool::SCEP::Command::create_error_reply.3.gz
 %%PERL5_MAN3%%/OpenXPKI::Crypto::Tool::SCEP::Command::create_nextca_reply.3.gz
 %%PERL5_MAN3%%/OpenXPKI::Crypto::Tool::SCEP::Command::create_pending_reply.3.gz
 %%PERL5_MAN3%%/OpenXPKI::Crypto::Tool::SCEP::Command::get_getcert_serial.3.gz
+%%PERL5_MAN3%%/OpenXPKI::Crypto::Tool::SCEP::Command::get_getcrl_issuer_serial.3.gz
 %%PERL5_MAN3%%/OpenXPKI::Crypto::Tool::SCEP::Command::get_message_type.3.gz
 %%PERL5_MAN3%%/OpenXPKI::Crypto::Tool::SCEP::Command::get_pkcs10.3.gz
 %%PERL5_MAN3%%/OpenXPKI::Crypto::Tool::SCEP::Command::get_signer_cert.3.gz
@@ -495,6 +516,8 @@ bin/openxpkictl
 %%PERL5_MAN3%%/OpenXPKI::Server::Workflow::Activity::CRLIssuance::CreateQueue.3.gz
 %%PERL5_MAN3%%/OpenXPKI::Server::Workflow::Activity::CRR::MarkRevoked.3.gz
 %%PERL5_MAN3%%/OpenXPKI::Server::Workflow::Activity::CRR::PersistRequest.3.gz
+%%PERL5_MAN3%%/OpenXPKI::Server::Workflow::Activity::CSR::CheckPolicyDNS.3.gz
+%%PERL5_MAN3%%/OpenXPKI::Server::Workflow::Activity::CSR::CheckPolicySubjectDuplicate.3.gz
 %%PERL5_MAN3%%/OpenXPKI::Server::Workflow::Activity::CSR::GenerateKey.3.gz
 %%PERL5_MAN3%%/OpenXPKI::Server::Workflow::Activity::CSR::GeneratePKCS10.3.gz
 %%PERL5_MAN3%%/OpenXPKI::Server::Workflow::Activity::CSR::PersistRequest.3.gz
@@ -511,10 +534,11 @@ bin/openxpkictl
 %%PERL5_MAN3%%/OpenXPKI::Server::Workflow::Activity::Reports::CertExport::GenerateExportFile.3.gz
 %%PERL5_MAN3%%/OpenXPKI::Server::Workflow::Activity::Reports::CertExport::GetConfig.3.gz
 %%PERL5_MAN3%%/OpenXPKI::Server::Workflow::Activity::Reports::CertExport::TagAsExported.3.gz
+%%PERL5_MAN3%%/OpenXPKI::Server::Workflow::Activity::Reports::Detail.3.gz
+%%PERL5_MAN3%%/OpenXPKI::Server::Workflow::Activity::Reports::Summary.3.gz
 %%PERL5_MAN3%%/OpenXPKI::Server::Workflow::Activity::SCEPv2::CalcApprovals.3.gz
 %%PERL5_MAN3%%/OpenXPKI::Server::Workflow::Activity::SCEPv2::EvaluateChallenge.3.gz
 %%PERL5_MAN3%%/OpenXPKI::Server::Workflow::Activity::SCEPv2::EvaluateEligibility.3.gz
-%%PERL5_MAN3%%/OpenXPKI::Server::Workflow::Activity::SCEPv2::EvaluateSignerTrust.3.gz
 %%PERL5_MAN3%%/OpenXPKI::Server::Workflow::Activity::SCEPv2::ExtractCSR.3.gz
 %%PERL5_MAN3%%/OpenXPKI::Server::Workflow::Activity::SCEPv2::FetchGroupPolicy.3.gz
 %%PERL5_MAN3%%/OpenXPKI::Server::Workflow::Activity::SCEPv2::LoadRecentCertificate.3.gz
@@ -523,6 +547,7 @@ bin/openxpkictl
 %%PERL5_MAN3%%/OpenXPKI::Server::Workflow::Activity::Skip.3.gz
 %%PERL5_MAN3%%/OpenXPKI::Server::Workflow::Activity::SmartCard::ApplyCSRPolicy.3.gz
 %%PERL5_MAN3%%/OpenXPKI::Server::Workflow::Activity::SmartCard::CheckPrereqs.3.gz
+%%PERL5_MAN3%%/OpenXPKI::Server::Workflow::Activity::SmartCard::CheckServerStatus.3.gz
 %%PERL5_MAN3%%/OpenXPKI::Server::Workflow::Activity::SmartCard::ComputePUK.3.gz
 %%PERL5_MAN3%%/OpenXPKI::Server::Workflow::Activity::SmartCard::CreateEscrowedKey.3.gz
 %%PERL5_MAN3%%/OpenXPKI::Server::Workflow::Activity::SmartCard::CreatePKCS12.3.gz
@@ -542,6 +567,7 @@ bin/openxpkictl
 %%PERL5_MAN3%%/OpenXPKI::Server::Workflow::Activity::Tools::Datapool::ModifyEntry.3.gz
 %%PERL5_MAN3%%/OpenXPKI::Server::Workflow::Activity::Tools::Datapool::SetEntry.3.gz
 %%PERL5_MAN3%%/OpenXPKI::Server::Workflow::Activity::Tools::Disconnect.3.gz
+%%PERL5_MAN3%%/OpenXPKI::Server::Workflow::Activity::Tools::EvaluateSignerTrust.3.gz
 %%PERL5_MAN3%%/OpenXPKI::Server::Workflow::Activity::Tools::Export.3.gz
 %%PERL5_MAN3%%/OpenXPKI::Server::Workflow::Activity::Tools::GenerateKey.3.gz
 %%PERL5_MAN3%%/OpenXPKI::Server::Workflow::Activity::Tools::GeneratePassword.3.gz
@@ -609,7 +635,6 @@ bin/openxpkictl
 %%PERL5_MAN3%%/OpenXPKI::Server::Workflow::Validator::Bulk.3.gz
 %%PERL5_MAN3%%/OpenXPKI::Server::Workflow::Validator::CertIdentifierExists.3.gz
 %%PERL5_MAN3%%/OpenXPKI::Server::Workflow::Validator::CertProfile.3.gz
-%%PERL5_MAN3%%/OpenXPKI::Server::Workflow::Validator::CertRole.3.gz
 %%PERL5_MAN3%%/OpenXPKI::Server::Workflow::Validator::CertSubject.3.gz
 %%PERL5_MAN3%%/OpenXPKI::Server::Workflow::Validator::CertSubjectAltNameParts.3.gz
 %%PERL5_MAN3%%/OpenXPKI::Server::Workflow::Validator::CertSubjectFields.3.gz
@@ -644,6 +669,7 @@ bin/openxpkictl
 %%PERL5_MAN3%%/OpenXPKI::Template.3.gz
 %%PERL5_MAN3%%/OpenXPKI::Template::Plugin::Certificate.3.gz
 %%PERL5_MAN3%%/OpenXPKI::Template::Plugin::CheckDNS.3.gz
+%%PERL5_MAN3%%/OpenXPKI::Template::Plugin::Profile.3.gz
 %%PERL5_MAN3%%/OpenXPKI::Template::Plugin::RandomPassword.3.gz
 %%PERL5_MAN3%%/OpenXPKI::Test::More.3.gz
 %%PERL5_MAN3%%/OpenXPKI::Tests.3.gz
@@ -652,185 +678,210 @@ bin/openxpkictl
 %%PERL5_MAN3%%/OpenXPKI::Workflow::Config.3.gz
 %%PERL5_MAN3%%/OpenXPKI::Workflow::Factory.3.gz
 %%PERL5_MAN3%%/OpenXPKI::Workflow::Handler.3.gz
-%%PERL5_MAN3%%/OpenXPKI::XML::Cache.3.gz
 %%PERL5_MAN3%%/OpenXPKI::i18n.3.gz
-%%PERL5_MAN1%%/openxpkiadm.1.gz
-%%PERL5_MAN1%%/openxpkicli.1.gz
-%%PERL5_MAN1%%/openxpkicmd.1.gz
-%%PERL5_MAN1%%/openxpkictl.1.gz
-%%PORTEXAMPLES%%%%EXAMPLESDIR%%/README.md
-%%PORTEXAMPLES%%%%EXAMPLESDIR%%/apache/_htaccess
-%%PORTEXAMPLES%%%%EXAMPLESDIR%%/apache/openxpki-scep.conf
-%%PORTEXAMPLES%%%%EXAMPLESDIR%%/feature/smartcard/config.d/realm/ca-one/_workflow/workflow_activity_smartcard_personalization_v4.xml
-%%PORTEXAMPLES%%%%EXAMPLESDIR%%/feature/smartcard/config.d/realm/ca-one/_workflow/workflow_activity_smartcard_pin_unblock.xml
-%%PORTEXAMPLES%%%%EXAMPLESDIR%%/feature/smartcard/config.d/realm/ca-one/_workflow/workflow_condition_smartcard_personalization_v4.xml
-%%PORTEXAMPLES%%%%EXAMPLESDIR%%/feature/smartcard/config.d/realm/ca-one/_workflow/workflow_condition_smartcard_pin_unblock.xml
-%%PORTEXAMPLES%%%%EXAMPLESDIR%%/feature/smartcard/config.d/realm/ca-one/_workflow/workflow_def_smartcard_personalization_v4.xml
-%%PORTEXAMPLES%%%%EXAMPLESDIR%%/feature/smartcard/config.d/realm/ca-one/_workflow/workflow_def_smartcard_pin_unblock.xml
-%%PORTEXAMPLES%%%%EXAMPLESDIR%%/feature/smartcard/config.d/realm/ca-one/_workflow/workflow_validator_smartcard_personalization_v4.xml
-%%PORTEXAMPLES%%%%EXAMPLESDIR%%/feature/smartcard/config.d/realm/ca-one/profile/I18N_OPENXPKI_PROFILE_USER_AUTHENTICATION_NOMAIL.yaml
-%%PORTEXAMPLES%%%%EXAMPLESDIR%%/feature/smartcard/config.d/realm/ca-one/profile/I18N_OPENXPKI_PROFILE_USER_ENCRYPTION.yaml
-%%PORTEXAMPLES%%%%EXAMPLESDIR%%/feature/smartcard/config.d/realm/ca-one/profile/I18N_OPENXPKI_PROFILE_USER_SIGNATURE.yaml
-%%PORTEXAMPLES%%%%EXAMPLESDIR%%/feature/smartcard/config.d/realm/ca-one/smartcard/card2user.yaml
-%%PORTEXAMPLES%%%%EXAMPLESDIR%%/feature/smartcard/config.d/realm/ca-one/smartcard/cardinfo.yaml
-%%PORTEXAMPLES%%%%EXAMPLESDIR%%/feature/smartcard/config.d/realm/ca-one/smartcard/cardstatus.yaml
-%%PORTEXAMPLES%%%%EXAMPLESDIR%%/feature/smartcard/config.d/realm/ca-one/smartcard/employee.yaml
-%%PORTEXAMPLES%%%%EXAMPLESDIR%%/feature/smartcard/config.d/realm/ca-one/smartcard/groupinfo.yaml
-%%PORTEXAMPLES%%%%EXAMPLESDIR%%/feature/smartcard/config.d/realm/ca-one/smartcard/policy.yaml
-%%PORTEXAMPLES%%%%EXAMPLESDIR%%/feature/smartcard/config.d/realm/ca-one/smartcard/publishing.yaml
-%%PORTEXAMPLES%%%%EXAMPLESDIR%%/feature/smartcard/config.d/realm/ca-one/smartcard/upninfo.yaml
-%%PORTEXAMPLES%%%%EXAMPLESDIR%%/feature/smartcard/config.d/realm/ca-one/users.yaml
-%%PORTEXAMPLES%%%%EXAMPLESDIR%%/feature/soap/README.md
-%%PORTEXAMPLES%%%%EXAMPLESDIR%%/feature/soap/soap/default.conf
-%%PORTEXAMPLES%%%%EXAMPLESDIR%%/feature/soap/soap/log.conf
-%%PORTEXAMPLES%%%%EXAMPLESDIR%%/feature/unsorted/README.md
-%%PORTEXAMPLES%%%%EXAMPLESDIR%%/feature/unsorted/config.d/realm/ca-one/_workflow/workflow_activity_cert_export.xml
-%%PORTEXAMPLES%%%%EXAMPLESDIR%%/feature/unsorted/config.d/realm/ca-one/_workflow/workflow_activity_testing.xml
-%%PORTEXAMPLES%%%%EXAMPLESDIR%%/feature/unsorted/config.d/realm/ca-one/_workflow/workflow_condition_cert_export.xml
-%%PORTEXAMPLES%%%%EXAMPLESDIR%%/feature/unsorted/config.d/realm/ca-one/_workflow/workflow_def_cert_export.xml
-%%PORTEXAMPLES%%%%EXAMPLESDIR%%/feature/unsorted/config.d/realm/ca-one/_workflow/workflow_def_testing.xml
-%%PORTEXAMPLES%%%%EXAMPLESDIR%%/feature/unsorted/config.d/realm/ca-one/approval.yaml
-%%PORTEXAMPLES%%%%EXAMPLESDIR%%/feature/unsorted/config.d/realm/ca-one/cert_revoke.yaml
-%%PORTEXAMPLES%%%%EXAMPLESDIR%%/feature/unsorted/config.d/realm/ca-one/export.yaml
-%%PORTEXAMPLES%%%%EXAMPLESDIR%%/graffle/workflow_certificate_revoke.graffle
-%%PORTEXAMPLES%%%%EXAMPLESDIR%%/graffle/workflow_enrollment.graffle
-%%PORTEXAMPLES%%%%EXAMPLESDIR%%/graffle/workflow_ogflow.graffle
-%%PORTEXAMPLES%%%%EXAMPLESDIR%%/openxpki/README.md
-%%PORTEXAMPLES%%%%EXAMPLESDIR%%/openxpki/config.d/realm/ca-one/auth/connector.yaml
-%%PORTEXAMPLES%%%%EXAMPLESDIR%%/openxpki/config.d/realm/ca-one/auth/handler.yaml
-%%PORTEXAMPLES%%%%EXAMPLESDIR%%/openxpki/config.d/realm/ca-one/auth/roles.yaml
-%%PORTEXAMPLES%%%%EXAMPLESDIR%%/openxpki/config.d/realm/ca-one/auth/stack.yaml
-%%PORTEXAMPLES%%%%EXAMPLESDIR%%/openxpki/config.d/realm/ca-one/auth/wfacl.yaml
-%%PORTEXAMPLES%%%%EXAMPLESDIR%%/openxpki/config.d/realm/ca-one/crl/default.yaml
-%%PORTEXAMPLES%%%%EXAMPLESDIR%%/openxpki/config.d/realm/ca-one/crypto.yaml
-%%PORTEXAMPLES%%%%EXAMPLESDIR%%/openxpki/config.d/realm/ca-one/metadata.yaml
-%%PORTEXAMPLES%%%%EXAMPLESDIR%%/openxpki/config.d/realm/ca-one/nice.yaml
-%%PORTEXAMPLES%%%%EXAMPLESDIR%%/openxpki/config.d/realm/ca-one/notification/rt.yaml.sample
-%%PORTEXAMPLES%%%%EXAMPLESDIR%%/openxpki/config.d/realm/ca-one/notification/servicenow.yaml.sample
-%%PORTEXAMPLES%%%%EXAMPLESDIR%%/openxpki/config.d/realm/ca-one/notification/smtp.yaml.sample
-%%PORTEXAMPLES%%%%EXAMPLESDIR%%/openxpki/config.d/realm/ca-one/profile/I18N_OPENXPKI_PROFILE_TLS_SERVER.yaml
-%%PORTEXAMPLES%%%%EXAMPLESDIR%%/openxpki/config.d/realm/ca-one/profile/I18N_OPENXPKI_PROFILE_USER.yaml
-%%PORTEXAMPLES%%%%EXAMPLESDIR%%/openxpki/config.d/realm/ca-one/profile/default.yaml
-%%PORTEXAMPLES%%%%EXAMPLESDIR%%/openxpki/config.d/realm/ca-one/profile/sample.yaml
-%%PORTEXAMPLES%%%%EXAMPLESDIR%%/openxpki/config.d/realm/ca-one/profile/template/c.yaml
-%%PORTEXAMPLES%%%%EXAMPLESDIR%%/openxpki/config.d/realm/ca-one/profile/template/cn.yaml
-%%PORTEXAMPLES%%%%EXAMPLESDIR%%/openxpki/config.d/realm/ca-one/profile/template/comment.yaml
-%%PORTEXAMPLES%%%%EXAMPLESDIR%%/openxpki/config.d/realm/ca-one/profile/template/dc.yaml
-%%PORTEXAMPLES%%%%EXAMPLESDIR%%/openxpki/config.d/realm/ca-one/profile/template/department.yaml
-%%PORTEXAMPLES%%%%EXAMPLESDIR%%/openxpki/config.d/realm/ca-one/profile/template/email.yaml
-%%PORTEXAMPLES%%%%EXAMPLESDIR%%/openxpki/config.d/realm/ca-one/profile/template/hostname.yaml
-%%PORTEXAMPLES%%%%EXAMPLESDIR%%/openxpki/config.d/realm/ca-one/profile/template/hostname2.yaml
-%%PORTEXAMPLES%%%%EXAMPLESDIR%%/openxpki/config.d/realm/ca-one/profile/template/o.yaml
-%%PORTEXAMPLES%%%%EXAMPLESDIR%%/openxpki/config.d/realm/ca-one/profile/template/ou.yaml
-%%PORTEXAMPLES%%%%EXAMPLESDIR%%/openxpki/config.d/realm/ca-one/profile/template/port.yaml
-%%PORTEXAMPLES%%%%EXAMPLESDIR%%/openxpki/config.d/realm/ca-one/profile/template/realname.yaml
-%%PORTEXAMPLES%%%%EXAMPLESDIR%%/openxpki/config.d/realm/ca-one/profile/template/requestor_affiliation.yaml
-%%PORTEXAMPLES%%%%EXAMPLESDIR%%/openxpki/config.d/realm/ca-one/profile/template/requestor_email.yaml
-%%PORTEXAMPLES%%%%EXAMPLESDIR%%/openxpki/config.d/realm/ca-one/profile/template/requestor_gname.yaml
-%%PORTEXAMPLES%%%%EXAMPLESDIR%%/openxpki/config.d/realm/ca-one/profile/template/requestor_name.yaml
-%%PORTEXAMPLES%%%%EXAMPLESDIR%%/openxpki/config.d/realm/ca-one/profile/template/requestor_phone.yaml
-%%PORTEXAMPLES%%%%EXAMPLESDIR%%/openxpki/config.d/realm/ca-one/profile/template/sample.yaml
-%%PORTEXAMPLES%%%%EXAMPLESDIR%%/openxpki/config.d/realm/ca-one/profile/template/san_dns.yaml
-%%PORTEXAMPLES%%%%EXAMPLESDIR%%/openxpki/config.d/realm/ca-one/profile/template/san_guid.yaml
-%%PORTEXAMPLES%%%%EXAMPLESDIR%%/openxpki/config.d/realm/ca-one/profile/template/san_ipv4.yaml
-%%PORTEXAMPLES%%%%EXAMPLESDIR%%/openxpki/config.d/realm/ca-one/profile/template/san_rid.yaml
-%%PORTEXAMPLES%%%%EXAMPLESDIR%%/openxpki/config.d/realm/ca-one/profile/template/san_upn.yaml
-%%PORTEXAMPLES%%%%EXAMPLESDIR%%/openxpki/config.d/realm/ca-one/profile/template/san_uri.yaml
-%%PORTEXAMPLES%%%%EXAMPLESDIR%%/openxpki/config.d/realm/ca-one/profile/template/userid.yaml
-%%PORTEXAMPLES%%%%EXAMPLESDIR%%/openxpki/config.d/realm/ca-one/profile/template/username.yaml
-%%PORTEXAMPLES%%%%EXAMPLESDIR%%/openxpki/config.d/realm/ca-one/publishing.yaml
-%%PORTEXAMPLES%%%%EXAMPLESDIR%%/openxpki/config.d/realm/ca-one/scep/scep-server-1.yaml
-%%PORTEXAMPLES%%%%EXAMPLESDIR%%/openxpki/config.d/realm/ca-one/uicontrol/Anonymous.yaml
-%%PORTEXAMPLES%%%%EXAMPLESDIR%%/openxpki/config.d/realm/ca-one/uicontrol/CA Operator.yaml
-%%PORTEXAMPLES%%%%EXAMPLESDIR%%/openxpki/config.d/realm/ca-one/uicontrol/RA Operator.yaml
-%%PORTEXAMPLES%%%%EXAMPLESDIR%%/openxpki/config.d/realm/ca-one/uicontrol/_default.yaml
-%%PORTEXAMPLES%%%%EXAMPLESDIR%%/openxpki/config.d/realm/ca-one/workflow/def/ca_publish.yaml
-%%PORTEXAMPLES%%%%EXAMPLESDIR%%/openxpki/config.d/realm/ca-one/workflow/def/certificate_export.yaml
-%%PORTEXAMPLES%%%%EXAMPLESDIR%%/openxpki/config.d/realm/ca-one/workflow/def/certificate_publishing.yaml
-%%PORTEXAMPLES%%%%EXAMPLESDIR%%/openxpki/config.d/realm/ca-one/workflow/def/certificate_revocation_request_v2.yaml
-%%PORTEXAMPLES%%%%EXAMPLESDIR%%/openxpki/config.d/realm/ca-one/workflow/def/certificate_signing_request_v2.yaml
-%%PORTEXAMPLES%%%%EXAMPLESDIR%%/openxpki/config.d/realm/ca-one/workflow/def/change_metadata.yaml
-%%PORTEXAMPLES%%%%EXAMPLESDIR%%/openxpki/config.d/realm/ca-one/workflow/def/crl_issuance.yaml
-%%PORTEXAMPLES%%%%EXAMPLESDIR%%/openxpki/config.d/realm/ca-one/workflow/def/enrollment.yaml
-%%PORTEXAMPLES%%%%EXAMPLESDIR%%/openxpki/config.d/realm/ca-one/workflow/global/action/cancel.yaml
-%%PORTEXAMPLES%%%%EXAMPLESDIR%%/openxpki/config.d/realm/ca-one/workflow/global/action/check_for_revocation.yaml
-%%PORTEXAMPLES%%%%EXAMPLESDIR%%/openxpki/config.d/realm/ca-one/workflow/global/action/disconnect.yaml
-%%PORTEXAMPLES%%%%EXAMPLESDIR%%/openxpki/config.d/realm/ca-one/workflow/global/action/nice_fetch_certificate.yaml
-%%PORTEXAMPLES%%%%EXAMPLESDIR%%/openxpki/config.d/realm/ca-one/workflow/global/action/nice_issue_certificate.yaml
-%%PORTEXAMPLES%%%%EXAMPLESDIR%%/openxpki/config.d/realm/ca-one/workflow/global/action/nice_issue_crl.yaml
-%%PORTEXAMPLES%%%%EXAMPLESDIR%%/openxpki/config.d/realm/ca-one/workflow/global/action/nice_revoke_certificate.yaml
-%%PORTEXAMPLES%%%%EXAMPLESDIR%%/openxpki/config.d/realm/ca-one/workflow/global/action/noop.yaml
-%%PORTEXAMPLES%%%%EXAMPLESDIR%%/openxpki/config.d/realm/ca-one/workflow/global/action/noop2.yaml
-%%PORTEXAMPLES%%%%EXAMPLESDIR%%/openxpki/config.d/realm/ca-one/workflow/global/action/skip.yaml
-%%PORTEXAMPLES%%%%EXAMPLESDIR%%/openxpki/config.d/realm/ca-one/workflow/global/condition/is_batch_mode.yaml
-%%PORTEXAMPLES%%%%EXAMPLESDIR%%/openxpki/config.d/realm/ca-one/workflow/global/field/cert_identifier.yaml
-%%PORTEXAMPLES%%%%EXAMPLESDIR%%/openxpki/config.d/realm/ca-one/workflow/global/field/cert_info.yaml
-%%PORTEXAMPLES%%%%EXAMPLESDIR%%/openxpki/config.d/realm/ca-one/workflow/global/field/cert_subject.yaml
-%%PORTEXAMPLES%%%%EXAMPLESDIR%%/openxpki/config.d/realm/ca-one/workflow/global/field/cert_subject_alt_name.yaml
-%%PORTEXAMPLES%%%%EXAMPLESDIR%%/openxpki/config.d/realm/ca-one/workflow/global/field/comment.yaml
-%%PORTEXAMPLES%%%%EXAMPLESDIR%%/openxpki/config.d/realm/ca-one/workflow/global/field/email.yaml
-%%PORTEXAMPLES%%%%EXAMPLESDIR%%/openxpki/config.d/realm/ca-one/workflow/global/field/flag_batch_mode.yaml
-%%PORTEXAMPLES%%%%EXAMPLESDIR%%/openxpki/config.d/realm/ca-one/workflow/global/field/invalidity_time.yaml
-%%PORTEXAMPLES%%%%EXAMPLESDIR%%/openxpki/config.d/realm/ca-one/workflow/global/field/notafter.yaml
-%%PORTEXAMPLES%%%%EXAMPLESDIR%%/openxpki/config.d/realm/ca-one/workflow/global/field/notbefore.yaml
-%%PORTEXAMPLES%%%%EXAMPLESDIR%%/openxpki/config.d/realm/ca-one/workflow/global/field/password_retype.yaml
-%%PORTEXAMPLES%%%%EXAMPLESDIR%%/openxpki/config.d/realm/ca-one/workflow/global/field/pkcs10.yaml
-%%PORTEXAMPLES%%%%EXAMPLESDIR%%/openxpki/config.d/realm/ca-one/workflow/global/field/reason_code.yaml
-%%PORTEXAMPLES%%%%EXAMPLESDIR%%/openxpki/config.d/realm/ca-one/workflow/global/validator/cert_identifier_exists.yaml
-%%PORTEXAMPLES%%%%EXAMPLESDIR%%/openxpki/config.d/realm/ca-one/workflow/global/validator/cert_info_parts.yaml
-%%PORTEXAMPLES%%%%EXAMPLESDIR%%/openxpki/config.d/realm/ca-one/workflow/global/validator/cert_san_parts.yaml
-%%PORTEXAMPLES%%%%EXAMPLESDIR%%/openxpki/config.d/realm/ca-one/workflow/global/validator/cert_subject_parts.yaml
-%%PORTEXAMPLES%%%%EXAMPLESDIR%%/openxpki/config.d/realm/ca-one/workflow/global/validator/key_reuse.yaml
-%%PORTEXAMPLES%%%%EXAMPLESDIR%%/openxpki/config.d/realm/ca-one/workflow/global/validator/validity_window.yaml
-%%PORTEXAMPLES%%%%EXAMPLESDIR%%/openxpki/config.d/realm/ca-one/workflow/persister.yaml
-%%PORTEXAMPLES%%%%EXAMPLESDIR%%/openxpki/config.d/system/crypto.yaml
-%%PORTEXAMPLES%%%%EXAMPLESDIR%%/openxpki/config.d/system/database.yaml
-%%PORTEXAMPLES%%%%EXAMPLESDIR%%/openxpki/config.d/system/realms.yaml
-%%PORTEXAMPLES%%%%EXAMPLESDIR%%/openxpki/config.d/system/server.yaml
-%%PORTEXAMPLES%%%%EXAMPLESDIR%%/openxpki/config.d/system/watchdog.yaml
-%%PORTEXAMPLES%%%%EXAMPLESDIR%%/openxpki/log.conf
-%%PORTEXAMPLES%%%%EXAMPLESDIR%%/openxpki/notification/email/cert_issued.html
-%%PORTEXAMPLES%%%%EXAMPLESDIR%%/openxpki/notification/email/cert_issued.txt
-%%PORTEXAMPLES%%%%EXAMPLESDIR%%/openxpki/notification/email/csr_created_raop.txt
-%%PORTEXAMPLES%%%%EXAMPLESDIR%%/openxpki/notification/email/csr_created_user.html
-%%PORTEXAMPLES%%%%EXAMPLESDIR%%/openxpki/notification/email/csr_created_user.txt
-%%PORTEXAMPLES%%%%EXAMPLESDIR%%/openxpki/notification/email/csr_rejected.html
-%%PORTEXAMPLES%%%%EXAMPLESDIR%%/openxpki/notification/email/csr_rejected.txt
-%%PORTEXAMPLES%%%%EXAMPLESDIR%%/openxpki/notification/email/images/.keep
-%%PORTEXAMPLES%%%%EXAMPLESDIR%%/openxpki/notification/email/images/foot.png
-%%PORTEXAMPLES%%%%EXAMPLESDIR%%/openxpki/notification/email/images/head.png
-%%PORTEXAMPLES%%%%EXAMPLESDIR%%/openxpki/notification/email/scep_approval_pending_raop.txt
-%%PORTEXAMPLES%%%%EXAMPLESDIR%%/openxpki/notification/email/scep_approval_pending_requestor.html
-%%PORTEXAMPLES%%%%EXAMPLESDIR%%/openxpki/notification/email/scep_approval_pending_requestor.txt
-%%PORTEXAMPLES%%%%EXAMPLESDIR%%/openxpki/notification/email/scep_approval_rejected.html
-%%PORTEXAMPLES%%%%EXAMPLESDIR%%/openxpki/notification/email/scep_approval_rejected.txt
-%%PORTEXAMPLES%%%%EXAMPLESDIR%%/openxpki/notification/email/scep_auth_denied.html
-%%PORTEXAMPLES%%%%EXAMPLESDIR%%/openxpki/notification/email/scep_auth_denied.txt
-%%PORTEXAMPLES%%%%EXAMPLESDIR%%/openxpki/notification/email/scep_cert_issued.html
-%%PORTEXAMPLES%%%%EXAMPLESDIR%%/openxpki/notification/email/scep_cert_issued.txt
-%%PORTEXAMPLES%%%%EXAMPLESDIR%%/openxpki/notification/email/scpu_notify_authcontact.txt
-%%PORTEXAMPLES%%%%EXAMPLESDIR%%/openxpki/notification/email/scpu_notify_user.txt
-%%PORTEXAMPLES%%%%EXAMPLESDIR%%/openxpki/notification/email/testmail.html
-%%PORTEXAMPLES%%%%EXAMPLESDIR%%/openxpki/notification/email/testmail.txt
-%%PORTEXAMPLES%%%%EXAMPLESDIR%%/openxpki/notification/rt/cert_issued.txt
-%%PORTEXAMPLES%%%%EXAMPLESDIR%%/openxpki/notification/rt/cert_issued_internal.txt
-%%PORTEXAMPLES%%%%EXAMPLESDIR%%/openxpki/notification/rt/csr_approvers.txt
-%%PORTEXAMPLES%%%%EXAMPLESDIR%%/openxpki/notification/rt/csr_created.txt
-%%PORTEXAMPLES%%%%EXAMPLESDIR%%/openxpki/notification/rt/csr_created_comment.txt
-%%PORTEXAMPLES%%%%EXAMPLESDIR%%/openxpki/notification/rt/csr_rejected.txt
-%%PORTEXAMPLES%%%%EXAMPLESDIR%%/openxpki/notification/rt/test.txt
-%%PORTEXAMPLES%%%%EXAMPLESDIR%%/openxpki/scep/default.conf
-%%PORTEXAMPLES%%%%EXAMPLESDIR%%/openxpki/scep/log.conf
-%%PORTEXAMPLES%%%%EXAMPLESDIR%%/openxpki/ssl/ca-one/README.md
-%%PORTEXAMPLES%%%%EXAMPLESDIR%%/openxpki/webui/default.conf
-%%PORTEXAMPLES%%%%EXAMPLESDIR%%/openxpki/webui/log.conf
-%%PORTEXAMPLES%%%%EXAMPLESDIR%%/profiles/I18N_OPENXPKI_PROFILE_OPENVPN_CLIENT.yaml
-%%PORTEXAMPLES%%%%EXAMPLESDIR%%/profiles/I18N_OPENXPKI_PROFILE_SCEP_CLIENT.yaml
-%%PORTEXAMPLES%%%%EXAMPLESDIR%%/sampleconfig.sh
-%%PORTEXAMPLES%%%%EXAMPLESDIR%%/sql/schema-mysql.sql
-@owner openxpki
-@group openxpki
-@dir %%ETCDIR%%
-@dir /var/log/openxpki
-@dir /var/openxpki/session
-@dir /var/openxpki
+%%PORTEXAMPLES%%%%EXAMPLESDIR%%/cgi-bin/download.fcgi
+%%PORTEXAMPLES%%%%EXAMPLESDIR%%/cgi-bin/sc.fcgi
+%%PORTEXAMPLES%%%%EXAMPLESDIR%%/cgi-bin/scep
+%%PORTEXAMPLES%%%%EXAMPLESDIR%%/cgi-bin/soap.fcgi
+%%PORTEXAMPLES%%%%EXAMPLESDIR%%/cgi-bin/webui.fcgi
+%%PORTEXAMPLES%%%%EXAMPLESDIR%%/config/README.md
+%%PORTEXAMPLES%%%%EXAMPLESDIR%%/config/apache/_htaccess
+%%PORTEXAMPLES%%%%EXAMPLESDIR%%/config/apache/openxpki.conf
+%%PORTEXAMPLES%%%%EXAMPLESDIR%%/config/feature/smartcard/config.d/realm/ca-one/profile/I18N_OPENXPKI_PROFILE_USER_AUTHENTICATION_NOMAIL.yaml
+%%PORTEXAMPLES%%%%EXAMPLESDIR%%/config/feature/smartcard/config.d/realm/ca-one/profile/I18N_OPENXPKI_PROFILE_USER_ENCRYPTION.yaml
+%%PORTEXAMPLES%%%%EXAMPLESDIR%%/config/feature/smartcard/config.d/realm/ca-one/profile/I18N_OPENXPKI_PROFILE_USER_SIGNATURE.yaml
+%%PORTEXAMPLES%%%%EXAMPLESDIR%%/config/feature/smartcard/config.d/realm/ca-one/smartcard/card2user.yaml
+%%PORTEXAMPLES%%%%EXAMPLESDIR%%/config/feature/smartcard/config.d/realm/ca-one/smartcard/cardinfo.yaml
+%%PORTEXAMPLES%%%%EXAMPLESDIR%%/config/feature/smartcard/config.d/realm/ca-one/smartcard/cardstatus.yaml
+%%PORTEXAMPLES%%%%EXAMPLESDIR%%/config/feature/smartcard/config.d/realm/ca-one/smartcard/employee.yaml
+%%PORTEXAMPLES%%%%EXAMPLESDIR%%/config/feature/smartcard/config.d/realm/ca-one/smartcard/groupinfo.yaml
+%%PORTEXAMPLES%%%%EXAMPLESDIR%%/config/feature/smartcard/config.d/realm/ca-one/smartcard/policy.yaml
+%%PORTEXAMPLES%%%%EXAMPLESDIR%%/config/feature/smartcard/config.d/realm/ca-one/smartcard/publishing.yaml
+%%PORTEXAMPLES%%%%EXAMPLESDIR%%/config/feature/smartcard/config.d/realm/ca-one/smartcard/upninfo.yaml
+%%PORTEXAMPLES%%%%EXAMPLESDIR%%/config/feature/smartcard/config.d/realm/ca-one/smartcard/users.yaml
+%%PORTEXAMPLES%%%%EXAMPLESDIR%%/config/feature/smartcard/config.d/realm/ca-one/workflow/def/sc_fetch_puk.yaml
+%%PORTEXAMPLES%%%%EXAMPLESDIR%%/config/feature/smartcard/config.d/realm/ca-one/workflow/def/sc_personalization.yaml
+%%PORTEXAMPLES%%%%EXAMPLESDIR%%/config/feature/smartcard/config.d/realm/ca-one/workflow/def/sc_pin_unblock.yaml
+%%PORTEXAMPLES%%%%EXAMPLESDIR%%/config/feature/smartcard/config.d/realm/ca-one/workflow/def/sc_revoke.yaml
+%%PORTEXAMPLES%%%%EXAMPLESDIR%%/config/feature/smartcard/config.d/realm/ca-one/workflow/def/sc_server_load.yaml
+%%PORTEXAMPLES%%%%EXAMPLESDIR%%/config/feature/unsorted/README.md
+%%PORTEXAMPLES%%%%EXAMPLESDIR%%/config/feature/unsorted/config.d/realm/ca-one/_workflow/workflow_activity_cert_export.xml
+%%PORTEXAMPLES%%%%EXAMPLESDIR%%/config/feature/unsorted/config.d/realm/ca-one/_workflow/workflow_activity_testing.xml
+%%PORTEXAMPLES%%%%EXAMPLESDIR%%/config/feature/unsorted/config.d/realm/ca-one/_workflow/workflow_condition_cert_export.xml
+%%PORTEXAMPLES%%%%EXAMPLESDIR%%/config/feature/unsorted/config.d/realm/ca-one/_workflow/workflow_def_cert_export.xml
+%%PORTEXAMPLES%%%%EXAMPLESDIR%%/config/feature/unsorted/config.d/realm/ca-one/_workflow/workflow_def_testing.xml
+%%PORTEXAMPLES%%%%EXAMPLESDIR%%/config/feature/unsorted/config.d/realm/ca-one/approval.yaml
+%%PORTEXAMPLES%%%%EXAMPLESDIR%%/config/feature/unsorted/config.d/realm/ca-one/cert_revoke.yaml
+%%PORTEXAMPLES%%%%EXAMPLESDIR%%/config/feature/unsorted/config.d/realm/ca-one/export.yaml
+%%PORTEXAMPLES%%%%EXAMPLESDIR%%/config/graffle/workflow_certificate_revoke.graffle
+%%PORTEXAMPLES%%%%EXAMPLESDIR%%/config/graffle/workflow_enrollment.graffle
+%%PORTEXAMPLES%%%%EXAMPLESDIR%%/config/graffle/workflow_ogflow.graffle
+%%PORTEXAMPLES%%%%EXAMPLESDIR%%/config/openxpki/README.md
+%%PORTEXAMPLES%%%%EXAMPLESDIR%%/config/openxpki/config.d/realm/ca-one/auth/connector.yaml
+%%PORTEXAMPLES%%%%EXAMPLESDIR%%/config/openxpki/config.d/realm/ca-one/auth/handler.yaml
+%%PORTEXAMPLES%%%%EXAMPLESDIR%%/config/openxpki/config.d/realm/ca-one/auth/roles.yaml
+%%PORTEXAMPLES%%%%EXAMPLESDIR%%/config/openxpki/config.d/realm/ca-one/auth/stack.yaml
+%%PORTEXAMPLES%%%%EXAMPLESDIR%%/config/openxpki/config.d/realm/ca-one/crl/default.yaml
+%%PORTEXAMPLES%%%%EXAMPLESDIR%%/config/openxpki/config.d/realm/ca-one/crypto.yaml
+%%PORTEXAMPLES%%%%EXAMPLESDIR%%/config/openxpki/config.d/realm/ca-one/metadata.yaml
+%%PORTEXAMPLES%%%%EXAMPLESDIR%%/config/openxpki/config.d/realm/ca-one/nice.yaml
+%%PORTEXAMPLES%%%%EXAMPLESDIR%%/config/openxpki/config.d/realm/ca-one/notification/rt.yaml.sample
+%%PORTEXAMPLES%%%%EXAMPLESDIR%%/config/openxpki/config.d/realm/ca-one/notification/servicenow.yaml.sample
+%%PORTEXAMPLES%%%%EXAMPLESDIR%%/config/openxpki/config.d/realm/ca-one/notification/smtp.yaml.sample
+%%PORTEXAMPLES%%%%EXAMPLESDIR%%/config/openxpki/config.d/realm/ca-one/profile/I18N_OPENXPKI_PROFILE_TLS_CLIENT.yaml
+%%PORTEXAMPLES%%%%EXAMPLESDIR%%/config/openxpki/config.d/realm/ca-one/profile/I18N_OPENXPKI_PROFILE_TLS_SERVER.yaml
+%%PORTEXAMPLES%%%%EXAMPLESDIR%%/config/openxpki/config.d/realm/ca-one/profile/I18N_OPENXPKI_PROFILE_USER.yaml
+%%PORTEXAMPLES%%%%EXAMPLESDIR%%/config/openxpki/config.d/realm/ca-one/profile/default.yaml
+%%PORTEXAMPLES%%%%EXAMPLESDIR%%/config/openxpki/config.d/realm/ca-one/profile/sample.yaml
+%%PORTEXAMPLES%%%%EXAMPLESDIR%%/config/openxpki/config.d/realm/ca-one/profile/template/application_name.yaml
+%%PORTEXAMPLES%%%%EXAMPLESDIR%%/config/openxpki/config.d/realm/ca-one/profile/template/c.yaml
+%%PORTEXAMPLES%%%%EXAMPLESDIR%%/config/openxpki/config.d/realm/ca-one/profile/template/cn.yaml
+%%PORTEXAMPLES%%%%EXAMPLESDIR%%/config/openxpki/config.d/realm/ca-one/profile/template/comment.yaml
+%%PORTEXAMPLES%%%%EXAMPLESDIR%%/config/openxpki/config.d/realm/ca-one/profile/template/dc.yaml
+%%PORTEXAMPLES%%%%EXAMPLESDIR%%/config/openxpki/config.d/realm/ca-one/profile/template/department.yaml
+%%PORTEXAMPLES%%%%EXAMPLESDIR%%/config/openxpki/config.d/realm/ca-one/profile/template/email.yaml
+%%PORTEXAMPLES%%%%EXAMPLESDIR%%/config/openxpki/config.d/realm/ca-one/profile/template/hostname.yaml
+%%PORTEXAMPLES%%%%EXAMPLESDIR%%/config/openxpki/config.d/realm/ca-one/profile/template/hostname2.yaml
+%%PORTEXAMPLES%%%%EXAMPLESDIR%%/config/openxpki/config.d/realm/ca-one/profile/template/o.yaml
+%%PORTEXAMPLES%%%%EXAMPLESDIR%%/config/openxpki/config.d/realm/ca-one/profile/template/ou.yaml
+%%PORTEXAMPLES%%%%EXAMPLESDIR%%/config/openxpki/config.d/realm/ca-one/profile/template/port.yaml
+%%PORTEXAMPLES%%%%EXAMPLESDIR%%/config/openxpki/config.d/realm/ca-one/profile/template/realname.yaml
+%%PORTEXAMPLES%%%%EXAMPLESDIR%%/config/openxpki/config.d/realm/ca-one/profile/template/requestor_affiliation.yaml
+%%PORTEXAMPLES%%%%EXAMPLESDIR%%/config/openxpki/config.d/realm/ca-one/profile/template/requestor_email.yaml
+%%PORTEXAMPLES%%%%EXAMPLESDIR%%/config/openxpki/config.d/realm/ca-one/profile/template/requestor_gname.yaml
+%%PORTEXAMPLES%%%%EXAMPLESDIR%%/config/openxpki/config.d/realm/ca-one/profile/template/requestor_name.yaml
+%%PORTEXAMPLES%%%%EXAMPLESDIR%%/config/openxpki/config.d/realm/ca-one/profile/template/requestor_phone.yaml
+%%PORTEXAMPLES%%%%EXAMPLESDIR%%/config/openxpki/config.d/realm/ca-one/profile/template/sample.yaml
+%%PORTEXAMPLES%%%%EXAMPLESDIR%%/config/openxpki/config.d/realm/ca-one/profile/template/san_dns.yaml
+%%PORTEXAMPLES%%%%EXAMPLESDIR%%/config/openxpki/config.d/realm/ca-one/profile/template/san_guid.yaml
+%%PORTEXAMPLES%%%%EXAMPLESDIR%%/config/openxpki/config.d/realm/ca-one/profile/template/san_ipv4.yaml
+%%PORTEXAMPLES%%%%EXAMPLESDIR%%/config/openxpki/config.d/realm/ca-one/profile/template/san_rid.yaml
+%%PORTEXAMPLES%%%%EXAMPLESDIR%%/config/openxpki/config.d/realm/ca-one/profile/template/san_upn.yaml
+%%PORTEXAMPLES%%%%EXAMPLESDIR%%/config/openxpki/config.d/realm/ca-one/profile/template/san_uri.yaml
+%%PORTEXAMPLES%%%%EXAMPLESDIR%%/config/openxpki/config.d/realm/ca-one/profile/template/userid.yaml
+%%PORTEXAMPLES%%%%EXAMPLESDIR%%/config/openxpki/config.d/realm/ca-one/profile/template/username.yaml
+%%PORTEXAMPLES%%%%EXAMPLESDIR%%/config/openxpki/config.d/realm/ca-one/publishing.yaml
+%%PORTEXAMPLES%%%%EXAMPLESDIR%%/config/openxpki/config.d/realm/ca-one/report/expiry.yaml
+%%PORTEXAMPLES%%%%EXAMPLESDIR%%/config/openxpki/config.d/realm/ca-one/scep/scep-server-1.yaml
+%%PORTEXAMPLES%%%%EXAMPLESDIR%%/config/openxpki/config.d/realm/ca-one/soap/signed-revoke.yaml
+%%PORTEXAMPLES%%%%EXAMPLESDIR%%/config/openxpki/config.d/realm/ca-one/uicontrol/Anonymous.yaml
+%%PORTEXAMPLES%%%%EXAMPLESDIR%%/config/openxpki/config.d/realm/ca-one/uicontrol/CA Operator.yaml
+%%PORTEXAMPLES%%%%EXAMPLESDIR%%/config/openxpki/config.d/realm/ca-one/uicontrol/RA Operator.yaml
+%%PORTEXAMPLES%%%%EXAMPLESDIR%%/config/openxpki/config.d/realm/ca-one/uicontrol/_default.yaml
+%%PORTEXAMPLES%%%%EXAMPLESDIR%%/config/openxpki/config.d/realm/ca-one/workflow/def/ca_publish.yaml
+%%PORTEXAMPLES%%%%EXAMPLESDIR%%/config/openxpki/config.d/realm/ca-one/workflow/def/certificate_export.yaml
+%%PORTEXAMPLES%%%%EXAMPLESDIR%%/config/openxpki/config.d/realm/ca-one/workflow/def/certificate_publishing.yaml
+%%PORTEXAMPLES%%%%EXAMPLESDIR%%/config/openxpki/config.d/realm/ca-one/workflow/def/certificate_revocation_request_v2.yaml
+%%PORTEXAMPLES%%%%EXAMPLESDIR%%/config/openxpki/config.d/realm/ca-one/workflow/def/certificate_signing_request_v2.yaml
+%%PORTEXAMPLES%%%%EXAMPLESDIR%%/config/openxpki/config.d/realm/ca-one/workflow/def/change_metadata.yaml
+%%PORTEXAMPLES%%%%EXAMPLESDIR%%/config/openxpki/config.d/realm/ca-one/workflow/def/crl_issuance.yaml
+%%PORTEXAMPLES%%%%EXAMPLESDIR%%/config/openxpki/config.d/realm/ca-one/workflow/def/enrollment.yaml
+%%PORTEXAMPLES%%%%EXAMPLESDIR%%/config/openxpki/config.d/realm/ca-one/workflow/def/report_full.yaml
+%%PORTEXAMPLES%%%%EXAMPLESDIR%%/config/openxpki/config.d/realm/ca-one/workflow/def/report_summary.yaml
+%%PORTEXAMPLES%%%%EXAMPLESDIR%%/config/openxpki/config.d/realm/ca-one/workflow/def/status_process.yaml
+%%PORTEXAMPLES%%%%EXAMPLESDIR%%/config/openxpki/config.d/realm/ca-one/workflow/def/status_system.yaml
+%%PORTEXAMPLES%%%%EXAMPLESDIR%%/config/openxpki/config.d/realm/ca-one/workflow/global/action/cancel.yaml
+%%PORTEXAMPLES%%%%EXAMPLESDIR%%/config/openxpki/config.d/realm/ca-one/workflow/global/action/check_for_revocation.yaml
+%%PORTEXAMPLES%%%%EXAMPLESDIR%%/config/openxpki/config.d/realm/ca-one/workflow/global/action/disconnect.yaml
+%%PORTEXAMPLES%%%%EXAMPLESDIR%%/config/openxpki/config.d/realm/ca-one/workflow/global/action/nice_fetch_certificate.yaml
+%%PORTEXAMPLES%%%%EXAMPLESDIR%%/config/openxpki/config.d/realm/ca-one/workflow/global/action/nice_issue_certificate.yaml
+%%PORTEXAMPLES%%%%EXAMPLESDIR%%/config/openxpki/config.d/realm/ca-one/workflow/global/action/nice_issue_crl.yaml
+%%PORTEXAMPLES%%%%EXAMPLESDIR%%/config/openxpki/config.d/realm/ca-one/workflow/global/action/nice_revoke_certificate.yaml
+%%PORTEXAMPLES%%%%EXAMPLESDIR%%/config/openxpki/config.d/realm/ca-one/workflow/global/action/noop.yaml
+%%PORTEXAMPLES%%%%EXAMPLESDIR%%/config/openxpki/config.d/realm/ca-one/workflow/global/action/noop2.yaml
+%%PORTEXAMPLES%%%%EXAMPLESDIR%%/config/openxpki/config.d/realm/ca-one/workflow/global/action/noop3.yaml
+%%PORTEXAMPLES%%%%EXAMPLESDIR%%/config/openxpki/config.d/realm/ca-one/workflow/global/action/skip.yaml
+%%PORTEXAMPLES%%%%EXAMPLESDIR%%/config/openxpki/config.d/realm/ca-one/workflow/global/condition/is_batch_mode.yaml
+%%PORTEXAMPLES%%%%EXAMPLESDIR%%/config/openxpki/config.d/realm/ca-one/workflow/global/condition/is_creator.yaml
+%%PORTEXAMPLES%%%%EXAMPLESDIR%%/config/openxpki/config.d/realm/ca-one/workflow/global/condition/is_operator.yaml
+%%PORTEXAMPLES%%%%EXAMPLESDIR%%/config/openxpki/config.d/realm/ca-one/workflow/global/field/approval_count.yaml
+%%PORTEXAMPLES%%%%EXAMPLESDIR%%/config/openxpki/config.d/realm/ca-one/workflow/global/field/cert_identifier.yaml
+%%PORTEXAMPLES%%%%EXAMPLESDIR%%/config/openxpki/config.d/realm/ca-one/workflow/global/field/cert_info.yaml
+%%PORTEXAMPLES%%%%EXAMPLESDIR%%/config/openxpki/config.d/realm/ca-one/workflow/global/field/cert_subject.yaml
+%%PORTEXAMPLES%%%%EXAMPLESDIR%%/config/openxpki/config.d/realm/ca-one/workflow/global/field/cert_subject_alt_name.yaml
+%%PORTEXAMPLES%%%%EXAMPLESDIR%%/config/openxpki/config.d/realm/ca-one/workflow/global/field/comment.yaml
+%%PORTEXAMPLES%%%%EXAMPLESDIR%%/config/openxpki/config.d/realm/ca-one/workflow/global/field/email.yaml
+%%PORTEXAMPLES%%%%EXAMPLESDIR%%/config/openxpki/config.d/realm/ca-one/workflow/global/field/flag_batch_mode.yaml
+%%PORTEXAMPLES%%%%EXAMPLESDIR%%/config/openxpki/config.d/realm/ca-one/workflow/global/field/invalidity_time.yaml
+%%PORTEXAMPLES%%%%EXAMPLESDIR%%/config/openxpki/config.d/realm/ca-one/workflow/global/field/notafter.yaml
+%%PORTEXAMPLES%%%%EXAMPLESDIR%%/config/openxpki/config.d/realm/ca-one/workflow/global/field/notbefore.yaml
+%%PORTEXAMPLES%%%%EXAMPLESDIR%%/config/openxpki/config.d/realm/ca-one/workflow/global/field/password_retype.yaml
+%%PORTEXAMPLES%%%%EXAMPLESDIR%%/config/openxpki/config.d/realm/ca-one/workflow/global/field/pkcs10.yaml
+%%PORTEXAMPLES%%%%EXAMPLESDIR%%/config/openxpki/config.d/realm/ca-one/workflow/global/field/reason_code.yaml
+%%PORTEXAMPLES%%%%EXAMPLESDIR%%/config/openxpki/config.d/realm/ca-one/workflow/global/field/validity_years.yaml
+%%PORTEXAMPLES%%%%EXAMPLESDIR%%/config/openxpki/config.d/realm/ca-one/workflow/global/validator/cert_identifier_exists.yaml
+%%PORTEXAMPLES%%%%EXAMPLESDIR%%/config/openxpki/config.d/realm/ca-one/workflow/global/validator/cert_info_parts.yaml
+%%PORTEXAMPLES%%%%EXAMPLESDIR%%/config/openxpki/config.d/realm/ca-one/workflow/global/validator/cert_san_parts.yaml
+%%PORTEXAMPLES%%%%EXAMPLESDIR%%/config/openxpki/config.d/realm/ca-one/workflow/global/validator/cert_subject_parts.yaml
+%%PORTEXAMPLES%%%%EXAMPLESDIR%%/config/openxpki/config.d/realm/ca-one/workflow/global/validator/key_reuse.yaml
+%%PORTEXAMPLES%%%%EXAMPLESDIR%%/config/openxpki/config.d/realm/ca-one/workflow/global/validator/password_quality.yaml
+%%PORTEXAMPLES%%%%EXAMPLESDIR%%/config/openxpki/config.d/realm/ca-one/workflow/global/validator/pkcs10_valid.yaml
+%%PORTEXAMPLES%%%%EXAMPLESDIR%%/config/openxpki/config.d/realm/ca-one/workflow/global/validator/validity_window.yaml
+%%PORTEXAMPLES%%%%EXAMPLESDIR%%/config/openxpki/config.d/realm/ca-one/workflow/persister.yaml
+%%PORTEXAMPLES%%%%EXAMPLESDIR%%/config/openxpki/config.d/system/crypto.yaml
+%%PORTEXAMPLES%%%%EXAMPLESDIR%%/config/openxpki/config.d/system/database.yaml
+%%PORTEXAMPLES%%%%EXAMPLESDIR%%/config/openxpki/config.d/system/realms.yaml
+%%PORTEXAMPLES%%%%EXAMPLESDIR%%/config/openxpki/config.d/system/server.yaml
+%%PORTEXAMPLES%%%%EXAMPLESDIR%%/config/openxpki/config.d/system/watchdog.yaml
+%%PORTEXAMPLES%%%%EXAMPLESDIR%%/config/openxpki/log.conf
+%%PORTEXAMPLES%%%%EXAMPLESDIR%%/config/openxpki/notification/email/cert_issued.html
+%%PORTEXAMPLES%%%%EXAMPLESDIR%%/config/openxpki/notification/email/cert_issued.txt
+%%PORTEXAMPLES%%%%EXAMPLESDIR%%/config/openxpki/notification/email/csr_created_raop.txt
+%%PORTEXAMPLES%%%%EXAMPLESDIR%%/config/openxpki/notification/email/csr_created_user.html
+%%PORTEXAMPLES%%%%EXAMPLESDIR%%/config/openxpki/notification/email/csr_created_user.txt
+%%PORTEXAMPLES%%%%EXAMPLESDIR%%/config/openxpki/notification/email/csr_rejected.html
+%%PORTEXAMPLES%%%%EXAMPLESDIR%%/config/openxpki/notification/email/csr_rejected.txt
+%%PORTEXAMPLES%%%%EXAMPLESDIR%%/config/openxpki/notification/email/images/.keep
+%%PORTEXAMPLES%%%%EXAMPLESDIR%%/config/openxpki/notification/email/images/foot.png
+%%PORTEXAMPLES%%%%EXAMPLESDIR%%/config/openxpki/notification/email/images/head.png
+%%PORTEXAMPLES%%%%EXAMPLESDIR%%/config/openxpki/notification/email/scep_approval_pending_raop.txt
+%%PORTEXAMPLES%%%%EXAMPLESDIR%%/config/openxpki/notification/email/scep_approval_pending_requestor.html
+%%PORTEXAMPLES%%%%EXAMPLESDIR%%/config/openxpki/notification/email/scep_approval_pending_requestor.txt
+%%PORTEXAMPLES%%%%EXAMPLESDIR%%/config/openxpki/notification/email/scep_approval_rejected.html
+%%PORTEXAMPLES%%%%EXAMPLESDIR%%/config/openxpki/notification/email/scep_approval_rejected.txt
+%%PORTEXAMPLES%%%%EXAMPLESDIR%%/config/openxpki/notification/email/scep_auth_denied.html
+%%PORTEXAMPLES%%%%EXAMPLESDIR%%/config/openxpki/notification/email/scep_auth_denied.txt
+%%PORTEXAMPLES%%%%EXAMPLESDIR%%/config/openxpki/notification/email/scep_cert_issued.html
+%%PORTEXAMPLES%%%%EXAMPLESDIR%%/config/openxpki/notification/email/scep_cert_issued.txt
+%%PORTEXAMPLES%%%%EXAMPLESDIR%%/config/openxpki/notification/email/scpu_notify_authcontact.txt
+%%PORTEXAMPLES%%%%EXAMPLESDIR%%/config/openxpki/notification/email/scpu_notify_user.txt
+%%PORTEXAMPLES%%%%EXAMPLESDIR%%/config/openxpki/notification/email/testmail.html
+%%PORTEXAMPLES%%%%EXAMPLESDIR%%/config/openxpki/notification/email/testmail.txt
+%%PORTEXAMPLES%%%%EXAMPLESDIR%%/config/openxpki/notification/rt/cert_issued.txt
+%%PORTEXAMPLES%%%%EXAMPLESDIR%%/config/openxpki/notification/rt/cert_issued_internal.txt
+%%PORTEXAMPLES%%%%EXAMPLESDIR%%/config/openxpki/notification/rt/csr_approvers.txt
+%%PORTEXAMPLES%%%%EXAMPLESDIR%%/config/openxpki/notification/rt/csr_created.txt
+%%PORTEXAMPLES%%%%EXAMPLESDIR%%/config/openxpki/notification/rt/csr_created_comment.txt
+%%PORTEXAMPLES%%%%EXAMPLESDIR%%/config/openxpki/notification/rt/csr_rejected.txt
+%%PORTEXAMPLES%%%%EXAMPLESDIR%%/config/openxpki/notification/rt/test.txt
+%%PORTEXAMPLES%%%%EXAMPLESDIR%%/config/openxpki/sc/default.conf
+%%PORTEXAMPLES%%%%EXAMPLESDIR%%/config/openxpki/sc/log.conf
+%%PORTEXAMPLES%%%%EXAMPLESDIR%%/config/openxpki/scep/default.conf
+%%PORTEXAMPLES%%%%EXAMPLESDIR%%/config/openxpki/scep/log.conf
+%%PORTEXAMPLES%%%%EXAMPLESDIR%%/config/openxpki/soap/default.conf
+%%PORTEXAMPLES%%%%EXAMPLESDIR%%/config/openxpki/soap/log.conf
+%%PORTEXAMPLES%%%%EXAMPLESDIR%%/config/openxpki/ssl/ca-one/README.md
+%%PORTEXAMPLES%%%%EXAMPLESDIR%%/config/openxpki/webui/default.conf
+%%PORTEXAMPLES%%%%EXAMPLESDIR%%/config/openxpki/webui/log.conf
+%%PORTEXAMPLES%%%%EXAMPLESDIR%%/config/pkiadm/carddata.yaml
+%%PORTEXAMPLES%%%%EXAMPLESDIR%%/config/profiles/I18N_OPENXPKI_PROFILE_OPENVPN_CLIENT.yaml
+%%PORTEXAMPLES%%%%EXAMPLESDIR%%/config/profiles/I18N_OPENXPKI_PROFILE_SCEP_CLIENT.yaml
+%%PORTEXAMPLES%%%%EXAMPLESDIR%%/config/sampleconfig.sh
+%%PORTEXAMPLES%%%%EXAMPLESDIR%%/config/sql/schema-mysql.sql
+%%PORTEXAMPLES%%%%EXAMPLESDIR%%/htdocs/default.html
+%%PORTEXAMPLES%%%%EXAMPLESDIR%%/htdocs/index.html
+%%PORTEXAMPLES%%%%EXAMPLESDIR%%/htdocs/localconfig.js
+%%PORTEXAMPLES%%%%EXAMPLESDIR%%/htdocs/src/main-built.js
+%%PORTEXAMPLES%%%%EXAMPLESDIR%%/htdocs/style/img/logo.png
+%%PORTEXAMPLES%%%%EXAMPLESDIR%%/htdocs/style/main-built.css
+%%PORTEXAMPLES%%%%EXAMPLESDIR%%/htdocs/themed.html
+%%PORTEXAMPLES%%%%EXAMPLESDIR%%/htdocs/vendor/bootstrap/dist/fonts/glyphicons-halflings-regular.eot
+%%PORTEXAMPLES%%%%EXAMPLESDIR%%/htdocs/vendor/bootstrap/dist/fonts/glyphicons-halflings-regular.svg
+%%PORTEXAMPLES%%%%EXAMPLESDIR%%/htdocs/vendor/bootstrap/dist/fonts/glyphicons-halflings-regular.ttf
+%%PORTEXAMPLES%%%%EXAMPLESDIR%%/htdocs/vendor/bootstrap/dist/fonts/glyphicons-halflings-regular.woff
+%%PORTEXAMPLES%%%%EXAMPLESDIR%%/htdocs/vendor/bootstrap/dist/fonts/glyphicons-halflings-regular.woff2
+%%PORTEXAMPLES%%%%EXAMPLESDIR%%/htdocs/vendor/ember/ember-template-compiler.js
+@dir(openxpki,openxpki,754) %%ETCDIR%%
+@dir(openxpki,openxpki,751) /var/log/openxpki
+@dir(openxpki,openxpki,750) /var/openxpki/session
+@dir(openxpki,openxpki,750) /var/openxpki