==============================================================================
LHC Computing Grid Trust Anchor release 1.124-1                     2023.10.30
==============================================================================

This is the wLCG Trust Anchor release, based on the updated IGTF Accredited CA
distribution version 1.124-1 with Classic, SLCS and MICS profiles,
encoded in meta-package "ca-policy-egi-core-1.124-1" (new installs) and "lcg-CA-1.124-1"
(for sites also part of wLCG and/or upgrading from EGEE/JSPG releases).

The following notices are republished from the IGTF, inasfar as pertinent to
this release. Details are found in the newsletter https://www.eugridpma.org/

Changes from 1.123 to 1.124
---------------------------
(30 October 2023)

* updated contact meta-data for ArmeSFo authority (AM)
* removed discontinued AEGIS authority (RS)
* removed suspended KENET Root and issuing CAs (KE)
* removed suspended SDG-G2 authority (CN)
* removed suspended CNIC authority (CN)
* removed all four discontinued DigitalTrust CAs operated by their issuer (AE)

NOTICE: in future releases we will move to a new RSA-2048 GPG package signing
key. The new public key file, GPG-KEY-EUGridPMA-RPM-4, is distributed with
this and subsequent releases. You can retrieve the new public key file from
  https://dl.igtf.net/distribution/GPG-KEY-EUGridPMA-RPM-4

Your may install BOTH "egi-core" AND "lcg" meta-packages, according to your
policies. Note that your organisation or NGI may have a specific policy and
may have added or removed CAs compared to the EGI core policy.

The CA modifications encoded in both "requires" and "obsoletes" clauses (RPM)
and Conflicts/Replaced clauses (Debian)  have been incorporated in the above-
mentioned meta-packages.  This release is best enjoyed with  fetch-crl v3  or
better, available from GNU/Linux OS add-on repositories Fedora, EPEL, Debian,
and from the IGTF at https://www.igtf.net/fetch-crl

Version information: ca-policy-lcg = 1.124-1